{0x0, 0x0, 0x0, r26}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r28, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r30, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r27, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r30, 0x0, 0x20000}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r31 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x40045431, &(0x7f00003b9fdc)) r33 = syz_open_pts(r32, 0x4000000000000002) dup3(r33, r31, 0x0) ioctl$TIOCSETD(r31, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r31, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept4$packet(r31, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) r36 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r36, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_SIOCGIFINDEX(r36, 0x8933, &(0x7f00000008c0)={'lapb0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x1d74337f0a19b2d0, &(0x7f0000001100)={@rand_addr, @broadcast, 0x0}, &(0x7f0000001140)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000011c0)=0x14) r40 = socket$netlink(0x10, 0x3, 0x0) r41 = socket$netlink(0x10, 0x3, 0x0) r42 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r42, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r42, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r41, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r43, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r40, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r43}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{&(0x7f0000001300)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003540)=[{&(0x7f0000001380)=""/239, 0xef}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/57, 0x39}, {&(0x7f00000024c0)=""/98, 0x62}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x5, &(0x7f00000035c0)=""/81, 0x51}}, {{&(0x7f0000003640)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000037c0)=[{&(0x7f00000036c0)=""/236, 0xec}], 0x1, &(0x7f0000003800)=""/70, 0x46}, 0x80000001}, {{&(0x7f0000003880)=@sco, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/196, 0xc4}, {&(0x7f0000004a00)=""/220, 0xdc}, {&(0x7f0000004b00)=""/62, 0x3e}, {&(0x7f0000004b40)=""/227, 0xe3}, {&(0x7f0000004c40)=""/48, 0x30}], 0x6, &(0x7f0000004d00)=""/237, 0xed}, 0x3}, {{&(0x7f0000004e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004e80)=""/131, 0x83}, {&(0x7f0000004f40)=""/126, 0x7e}, {&(0x7f0000004fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000006000)=""/131, 0x83}, 0xfff}], 0x4, 0x80000000, &(0x7f00000061c0)={0x77359400}) r45 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r46 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r46, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r47, 0x5}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000067c0)={'ip6gretap0\x00', r47}) r49 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r50 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r50, 0x40045431, &(0x7f00003b9fdc)) r51 = syz_open_pts(r50, 0x4000000000000002) dup3(r51, r49, 0x0) ioctl$TIOCSETD(r49, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r49, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept$packet(r49, &(0x7f0000006800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006840)=0x14) r53 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r54 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r54, 0x40045431, &(0x7f00003b9fdc)) r55 = syz_open_pts(r54, 0x4000000000000002) dup3(r55, r53, 0x0) ioctl$TIOCSETD(r53, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r53, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getpeername$packet(r53, &(0x7f0000006940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006980)=0x14) r57 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r57, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r58 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r58, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r59, 0x5}}, 0x20}}, 0x0) r60 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r60, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r60, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r61 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r60, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r61, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r62, 0x5}}, 0x20}}, 0x0) r63 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r63, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r64 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r64, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r65, 0x5}}, 0x20}}, 0x0) r66 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r67 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r67, 0x40045431, &(0x7f00003b9fdc)) r68 = syz_open_pts(r67, 0x4000000000000002) dup3(r68, r66, 0x0) ioctl$TIOCSETD(r66, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r66, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept$packet(r66, &(0x7f00000069c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006a00)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000006b40)={@multicast2, @dev, 0x0}, &(0x7f0000006b80)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000073c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000007380)={&(0x7f0000006bc0)={0x7b4, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x16c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x5, 0x3f, 0x9, 0x8}, {0x3f, 0x40, 0x3}, {0x4, 0x7e, 0x0, 0x5}, {0x91b, 0xfa, 0x0, 0x9}, {0x9, 0x8, 0x6, 0x9}, {0x6, 0x64, 0x2, 0x5}, {0x100, 0x7, 0xf8, 0x100}]}}}]}}, {{0x8, 0x1, r18}, {0x1c4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r34}, {0xd4, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x2, 0x1, 0x7}, {0x0, 0x6, 0x7, 0x1}, {0x3, 0x9, 0xfc, 0x5}, {0xfff, 0x2, 0x9, 0x1ff}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r37}, {0x134, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r43}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r44}, {0x100, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r48}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x514}}, {0x8, 0x6, r52}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r56}}}]}}, {{0x8, 0x1, r59}, {0x80, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r62}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r65}}}]}}, {{0x8, 0x1, r69}, {0xb0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r70}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x10000050}, 0x8000) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) [ 721.030114] protocol 88fb is buggy, dev hsr_slave_0 [ 721.030127] protocol 88fb is buggy, dev hsr_slave_0 [ 721.035229] protocol 88fb is buggy, dev hsr_slave_1 [ 721.040271] protocol 88fb is buggy, dev hsr_slave_1 [ 721.045317] protocol 88fb is buggy, dev hsr_slave_0 [ 721.055306] protocol 88fb is buggy, dev hsr_slave_1 05:21:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 721.110161] protocol 88fb is buggy, dev hsr_slave_0 [ 721.115293] protocol 88fb is buggy, dev hsr_slave_1 05:21:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x31, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) 05:21:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 721.394180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 721.481275] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 721.506689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 721.536232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 721.557924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 721.587947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 721.640078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 721.676880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:21:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x3b8, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x31, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) 05:21:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 05:21:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r2, r3, 0x0) 05:21:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r5, 0xa05, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9, 0x5}}, 0x20}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r11, 0x4000000000000002) dup3(r12, r10, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r10, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1}, &(0x7f00000001c0)=0xc) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r17 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r18, 0x5}}, 0x20}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r22, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r26, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r23, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r26}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r28, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r30, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r27, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r30, 0x0, 0x20000}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r31 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x40045431, &(0x7f00003b9fdc)) r33 = syz_open_pts(r32, 0x4000000000000002) dup3(r33, r31, 0x0) ioctl$TIOCSETD(r31, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r31, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept4$packet(r31, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) r36 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r36, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_SIOCGIFINDEX(r36, 0x8933, &(0x7f00000008c0)={'lapb0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x1d74337f0a19b2d0, &(0x7f0000001100)={@rand_addr, @broadcast, 0x0}, &(0x7f0000001140)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000011c0)=0x14) r40 = socket$netlink(0x10, 0x3, 0x0) r41 = socket$netlink(0x10, 0x3, 0x0) r42 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r42, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r42, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r41, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r43, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r40, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r43}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{&(0x7f0000001300)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003540)=[{&(0x7f0000001380)=""/239, 0xef}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/57, 0x39}, {&(0x7f00000024c0)=""/98, 0x62}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x5, &(0x7f00000035c0)=""/81, 0x51}}, {{&(0x7f0000003640)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000037c0)=[{&(0x7f00000036c0)=""/236, 0xec}], 0x1, &(0x7f0000003800)=""/70, 0x46}, 0x80000001}, {{&(0x7f0000003880)=@sco, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/196, 0xc4}, {&(0x7f0000004a00)=""/220, 0xdc}, {&(0x7f0000004b00)=""/62, 0x3e}, {&(0x7f0000004b40)=""/227, 0xe3}, {&(0x7f0000004c40)=""/48, 0x30}], 0x6, &(0x7f0000004d00)=""/237, 0xed}, 0x3}, {{&(0x7f0000004e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004e80)=""/131, 0x83}, {&(0x7f0000004f40)=""/126, 0x7e}, {&(0x7f0000004fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000006000)=""/131, 0x83}, 0xfff}], 0x4, 0x80000000, &(0x7f00000061c0)={0x77359400}) r45 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r46 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r46, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r47, 0x5}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000067c0)={'ip6gretap0\x00', r47}) r49 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r50 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r50, 0x40045431, &(0x7f00003b9fdc)) r51 = syz_open_pts(r50, 0x4000000000000002) dup3(r51, r49, 0x0) ioctl$TIOCSETD(r49, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r49, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept$packet(r49, &(0x7f0000006800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006840)=0x14) r53 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r54 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r54, 0x40045431, &(0x7f00003b9fdc)) r55 = syz_open_pts(r54, 0x4000000000000002) dup3(r55, r53, 0x0) ioctl$TIOCSETD(r53, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r53, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getpeername$packet(r53, &(0x7f0000006940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006980)=0x14) r57 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r57, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r58 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r58, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r59, 0x5}}, 0x20}}, 0x0) r60 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r60, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r60, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r61 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r60, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r61, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r62, 0x5}}, 0x20}}, 0x0) r63 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r63, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r64 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r64, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r65, 0x5}}, 0x20}}, 0x0) r66 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r67 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r67, 0x40045431, &(0x7f00003b9fdc)) r68 = syz_open_pts(r67, 0x4000000000000002) dup3(r68, r66, 0x0) ioctl$TIOCSETD(r66, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r66, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept$packet(r66, &(0x7f00000069c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006a00)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000006b40)={@multicast2, @dev, 0x0}, &(0x7f0000006b80)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000073c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000007380)={&(0x7f0000006bc0)={0x7b4, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x16c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x5, 0x3f, 0x9, 0x8}, {0x3f, 0x40, 0x3}, {0x4, 0x7e, 0x0, 0x5}, {0x91b, 0xfa, 0x0, 0x9}, {0x9, 0x8, 0x6, 0x9}, {0x6, 0x64, 0x2, 0x5}, {0x100, 0x7, 0xf8, 0x100}]}}}]}}, {{0x8, 0x1, r18}, {0x1c4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r34}, {0xd4, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x2, 0x1, 0x7}, {0x0, 0x6, 0x7, 0x1}, {0x3, 0x9, 0xfc, 0x5}, {0xfff, 0x2, 0x9, 0x1ff}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r37}, {0x134, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r43}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r44}, {0x100, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r48}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x514}}, {0x8, 0x6, r52}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r56}}}]}}, {{0x8, 0x1, r59}, {0x80, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r62}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r65}}}]}}, {{0x8, 0x1, r69}, {0xb0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r70}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x10000050}, 0x8000) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(0xffffffffffffffff, r2, 0x0) 05:21:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(0xffffffffffffffff, r2, 0x0) 05:21:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 05:21:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 05:21:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x3) dup3(r2, 0xffffffffffffffff, 0x0) 05:21:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r2, r3, 0x0) 05:21:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe800000000000001500000000000000000000000000f8ffffffffffffff000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x138}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 724.484933] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:21:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r2, r3, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) [ 724.601213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 724.659595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 724.770937] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 725.190127] net_ratelimit: 16 callbacks suppressed [ 725.190132] protocol 88fb is buggy, dev hsr_slave_0 [ 725.190162] protocol 88fb is buggy, dev hsr_slave_1 [ 725.195134] protocol 88fb is buggy, dev hsr_slave_1 [ 725.200251] protocol 88fb is buggy, dev hsr_slave_0 [ 725.215247] protocol 88fb is buggy, dev hsr_slave_1 [ 725.270176] protocol 88fb is buggy, dev hsr_slave_0 [ 725.275273] protocol 88fb is buggy, dev hsr_slave_1 [ 725.910128] protocol 88fb is buggy, dev hsr_slave_0 [ 725.915342] protocol 88fb is buggy, dev hsr_slave_1 [ 726.070238] protocol 88fb is buggy, dev hsr_slave_0 05:21:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r5, 0xa05, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9, 0x5}}, 0x20}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r11, 0x4000000000000002) dup3(r12, r10, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r10, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1}, &(0x7f00000001c0)=0xc) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r17 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r18, 0x5}}, 0x20}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r22, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r26, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r23, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r26}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r28, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r30, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r27, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r30, 0x0, 0x20000}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r31 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r32 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r32, 0x40045431, &(0x7f00003b9fdc)) r33 = syz_open_pts(r32, 0x4000000000000002) dup3(r33, r31, 0x0) ioctl$TIOCSETD(r31, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r31, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept4$packet(r31, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) r36 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r36, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_SIOCGIFINDEX(r36, 0x8933, &(0x7f00000008c0)={'lapb0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x1d74337f0a19b2d0, &(0x7f0000001100)={@rand_addr, @broadcast, 0x0}, &(0x7f0000001140)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000011c0)=0x14) r40 = socket$netlink(0x10, 0x3, 0x0) r41 = socket$netlink(0x10, 0x3, 0x0) r42 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r42, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r42, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r41, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r43, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r40, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r43}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{&(0x7f0000001300)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003540)=[{&(0x7f0000001380)=""/239, 0xef}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/57, 0x39}, {&(0x7f00000024c0)=""/98, 0x62}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x5, &(0x7f00000035c0)=""/81, 0x51}}, {{&(0x7f0000003640)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000037c0)=[{&(0x7f00000036c0)=""/236, 0xec}], 0x1, &(0x7f0000003800)=""/70, 0x46}, 0x80000001}, {{&(0x7f0000003880)=@sco, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/196, 0xc4}, {&(0x7f0000004a00)=""/220, 0xdc}, {&(0x7f0000004b00)=""/62, 0x3e}, {&(0x7f0000004b40)=""/227, 0xe3}, {&(0x7f0000004c40)=""/48, 0x30}], 0x6, &(0x7f0000004d00)=""/237, 0xed}, 0x3}, {{&(0x7f0000004e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004e80)=""/131, 0x83}, {&(0x7f0000004f40)=""/126, 0x7e}, {&(0x7f0000004fc0)=""/4096, 0x1000}], 0x3, &(0x7f0000006000)=""/131, 0x83}, 0xfff}], 0x4, 0x80000000, &(0x7f00000061c0)={0x77359400}) r45 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r46 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r46, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r47, 0x5}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000067c0)={'ip6gretap0\x00', r47}) r49 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r50 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r50, 0x40045431, &(0x7f00003b9fdc)) r51 = syz_open_pts(r50, 0x4000000000000002) dup3(r51, r49, 0x0) ioctl$TIOCSETD(r49, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r49, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept$packet(r49, &(0x7f0000006800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006840)=0x14) r53 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r54 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r54, 0x40045431, &(0x7f00003b9fdc)) r55 = syz_open_pts(r54, 0x4000000000000002) dup3(r55, r53, 0x0) ioctl$TIOCSETD(r53, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r53, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getpeername$packet(r53, &(0x7f0000006940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006980)=0x14) r57 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r57, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r58 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r58, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r59, 0x5}}, 0x20}}, 0x0) r60 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r60, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r60, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r61 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r60, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r61, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r62, 0x5}}, 0x20}}, 0x0) r63 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r63, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r64 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r64, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r65, 0x5}}, 0x20}}, 0x0) r66 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r67 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r67, 0x40045431, &(0x7f00003b9fdc)) r68 = syz_open_pts(r67, 0x4000000000000002) dup3(r68, r66, 0x0) ioctl$TIOCSETD(r66, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r66, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept$packet(r66, &(0x7f00000069c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006a00)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000006b40)={@multicast2, @dev, 0x0}, &(0x7f0000006b80)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000073c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000007380)={&(0x7f0000006bc0)={0x7b4, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x16c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x5, 0x3f, 0x9, 0x8}, {0x3f, 0x40, 0x3}, {0x4, 0x7e, 0x0, 0x5}, {0x91b, 0xfa, 0x0, 0x9}, {0x9, 0x8, 0x6, 0x9}, {0x6, 0x64, 0x2, 0x5}, {0x100, 0x7, 0xf8, 0x100}]}}}]}}, {{0x8, 0x1, r18}, {0x1c4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r34}, {0xd4, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x2, 0x1, 0x7}, {0x0, 0x6, 0x7, 0x1}, {0x3, 0x9, 0xfc, 0x5}, {0xfff, 0x2, 0x9, 0x1ff}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r37}, {0x134, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r43}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r44}, {0x100, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r48}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x514}}, {0x8, 0x6, r52}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r56}}}]}}, {{0x8, 0x1, r59}, {0x80, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r62}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r65}}}]}}, {{0x8, 0x1, r69}, {0xb0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r70}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x10000050}, 0x8000) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) dup3(0xffffffffffffffff, r0, 0x0) 05:21:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r2, r3, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r2, r3, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) dup3(0xffffffffffffffff, r0, 0x0) 05:21:17 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r2, r3, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:17 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) dup3(0xffffffffffffffff, r0, 0x0) [ 727.465178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 727.489986] FAULT_INJECTION: forcing a failure. [ 727.489986] name failslab, interval 1, probability 0, space 0, times 0 [ 727.503448] FAULT_INJECTION: forcing a failure. [ 727.503448] name failslab, interval 1, probability 0, space 0, times 0 [ 727.526647] CPU: 1 PID: 27279 Comm: syz-executor.5 Not tainted 4.14.157-syzkaller #0 [ 727.534675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.544336] Call Trace: [ 727.544358] dump_stack+0x142/0x197 [ 727.544379] should_fail.cold+0x10f/0x159 [ 727.550651] should_failslab+0xdb/0x130 [ 727.550664] kmem_cache_alloc_node+0x287/0x780 [ 727.550686] __alloc_skb+0x9c/0x500 [ 727.550696] ? skb_trim+0x180/0x180 [ 727.550709] ? netlink_autobind.isra.0+0x1c9/0x290 [ 727.550722] netlink_sendmsg+0x874/0xc60 [ 727.563672] ? netlink_unicast+0x650/0x650 [ 727.563689] ? security_socket_sendmsg+0x89/0xb0 [ 727.563700] ? netlink_unicast+0x650/0x650 [ 727.570965] sock_sendmsg+0xce/0x110 [ 727.589033] ___sys_sendmsg+0x70a/0x840 [ 727.589053] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 727.601213] ? __fget+0x210/0x370 [ 727.601229] ? find_held_lock+0x35/0x130 [ 727.601239] ? __fget+0x210/0x370 [ 727.601256] ? lock_downgrade+0x740/0x740 [ 727.601271] ? __fget+0x237/0x370 [ 727.601285] ? __fget_light+0x172/0x1f0 [ 727.601296] ? __fdget+0x1b/0x20 [ 727.609513] ? sockfd_lookup_light+0xb4/0x160 [ 727.609526] __sys_sendmsg+0xb9/0x140 [ 727.609536] ? SyS_shutdown+0x170/0x170 [ 727.609560] SyS_sendmsg+0x2d/0x50 [ 727.617057] ? __sys_sendmsg+0x140/0x140 [ 727.617072] do_syscall_64+0x1e8/0x640 [ 727.617082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 727.617101] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 727.624691] RIP: 0033:0x45a679 [ 727.624697] RSP: 002b:00007fe41e860c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.624709] RAX: ffffffffffffffda RBX: 00007fe41e860c90 RCX: 000000000045a679 [ 727.624715] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 727.624724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 727.632052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe41e8616d4 [ 727.632059] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 727.660187] CPU: 1 PID: 27278 Comm: syz-executor.0 Not tainted 4.14.157-syzkaller #0 [ 727.677602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.677614] Call Trace: [ 727.677634] dump_stack+0x142/0x197 [ 727.677655] should_fail.cold+0x10f/0x159 [ 727.677675] should_failslab+0xdb/0x130 [ 727.677686] kmem_cache_alloc_node+0x287/0x780 [ 727.677708] __alloc_skb+0x9c/0x500 [ 727.677720] ? skb_trim+0x180/0x180 [ 727.692290] ? netlink_autobind.isra.0+0x1c9/0x290 [ 727.692305] netlink_sendmsg+0x874/0xc60 [ 727.692322] ? netlink_unicast+0x650/0x650 [ 727.692340] ? security_socket_sendmsg+0x89/0xb0 [ 727.692351] ? netlink_unicast+0x650/0x650 [ 727.692365] sock_sendmsg+0xce/0x110 [ 727.692379] ___sys_sendmsg+0x70a/0x840 [ 727.692391] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 727.692403] ? __fget+0x210/0x370 [ 727.692416] ? find_held_lock+0x35/0x130 [ 727.692425] ? __fget+0x210/0x370 [ 727.692441] ? lock_downgrade+0x740/0x740 [ 727.707088] ? __fget+0x237/0x370 [ 727.707108] ? __fget_light+0x172/0x1f0 [ 727.707121] ? __fdget+0x1b/0x20 [ 727.707136] ? sockfd_lookup_light+0xb4/0x160 [ 727.707149] __sys_sendmsg+0xb9/0x140 [ 727.707159] ? SyS_shutdown+0x170/0x170 [ 727.707193] SyS_sendmsg+0x2d/0x50 [ 727.707205] ? __sys_sendmsg+0x140/0x140 [ 727.722366] do_syscall_64+0x1e8/0x640 [ 727.722377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 727.722397] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 727.722406] RIP: 0033:0x45a679 [ 727.722412] RSP: 002b:00007f6dc6c01c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.722425] RAX: ffffffffffffffda RBX: 00007f6dc6c01c90 RCX: 000000000045a679 [ 727.722431] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 727.722437] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 727.722444] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6dc6c026d4 [ 727.722450] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 727.915741] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:21:18 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:18 executing program 5 (fault-call:1 fault-nth:1): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:18 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r2, r3, 0x0) [ 727.948721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 728.004977] FAULT_INJECTION: forcing a failure. [ 728.004977] name failslab, interval 1, probability 0, space 0, times 0 [ 728.026517] FAULT_INJECTION: forcing a failure. [ 728.026517] name failslab, interval 1, probability 0, space 0, times 0 [ 728.045485] FAULT_INJECTION: forcing a failure. [ 728.045485] name failslab, interval 1, probability 0, space 0, times 0 [ 728.058769] CPU: 0 PID: 27306 Comm: syz-executor.3 Not tainted 4.14.157-syzkaller #0 [ 728.066903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.066912] Call Trace: [ 728.078974] dump_stack+0x142/0x197 [ 728.082722] should_fail.cold+0x10f/0x159 [ 728.086894] should_failslab+0xdb/0x130 [ 728.091065] kmem_cache_alloc_node+0x287/0x780 [ 728.095793] __alloc_skb+0x9c/0x500 [ 728.095806] ? skb_trim+0x180/0x180 [ 728.095819] ? netlink_autobind.isra.0+0x1c9/0x290 [ 728.095832] netlink_sendmsg+0x874/0xc60 [ 728.095846] ? netlink_unicast+0x650/0x650 [ 728.117465] ? security_socket_sendmsg+0x89/0xb0 [ 728.122398] ? netlink_unicast+0x650/0x650 [ 728.126794] sock_sendmsg+0xce/0x110 [ 728.126808] ___sys_sendmsg+0x70a/0x840 [ 728.126823] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 728.126835] ? __fget+0x210/0x370 [ 728.126848] ? find_held_lock+0x35/0x130 [ 728.126861] ? __fget+0x210/0x370 [ 728.151562] ? lock_downgrade+0x740/0x740 05:21:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) [ 728.155735] ? __fget+0x237/0x370 [ 728.159216] ? __fget_light+0x172/0x1f0 [ 728.163212] ? __fdget+0x1b/0x20 [ 728.166715] ? sockfd_lookup_light+0xb4/0x160 [ 728.171225] __sys_sendmsg+0xb9/0x140 [ 728.175132] ? SyS_shutdown+0x170/0x170 [ 728.179135] SyS_sendmsg+0x2d/0x50 [ 728.182927] ? __sys_sendmsg+0x140/0x140 [ 728.187272] do_syscall_64+0x1e8/0x640 [ 728.191239] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 728.196325] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 728.201526] RIP: 0033:0x45a679 [ 728.204724] RSP: 002b:00007f4cd7d78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.212535] RAX: ffffffffffffffda RBX: 00007f4cd7d78c90 RCX: 000000000045a679 [ 728.219906] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 728.227326] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 728.234607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cd7d796d4 [ 728.241886] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 728.249769] CPU: 1 PID: 27303 Comm: syz-executor.0 Not tainted 4.14.157-syzkaller #0 [ 728.257959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.267639] Call Trace: [ 728.270245] dump_stack+0x142/0x197 [ 728.273896] should_fail.cold+0x10f/0x159 [ 728.278067] should_failslab+0xdb/0x130 [ 728.282061] kmem_cache_alloc_node_trace+0x280/0x770 [ 728.287187] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 728.292649] __kmalloc_node_track_caller+0x3d/0x80 [ 728.292664] __kmalloc_reserve.isra.0+0x40/0xe0 [ 728.292676] __alloc_skb+0xcf/0x500 [ 728.292685] ? skb_trim+0x180/0x180 [ 728.292696] ? netlink_autobind.isra.0+0x1c9/0x290 [ 728.292708] netlink_sendmsg+0x874/0xc60 [ 728.318694] ? netlink_unicast+0x650/0x650 [ 728.322937] ? security_socket_sendmsg+0x89/0xb0 [ 728.327783] ? netlink_unicast+0x650/0x650 [ 728.332022] sock_sendmsg+0xce/0x110 [ 728.335859] ___sys_sendmsg+0x70a/0x840 [ 728.339980] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 728.344857] ? __fget+0x210/0x370 [ 728.348384] ? find_held_lock+0x35/0x130 [ 728.352487] ? __fget+0x210/0x370 [ 728.355943] ? lock_downgrade+0x740/0x740 [ 728.360103] ? __fget+0x237/0x370 [ 728.363558] ? __fget_light+0x172/0x1f0 [ 728.367528] ? __fdget+0x1b/0x20 [ 728.370889] ? sockfd_lookup_light+0xb4/0x160 [ 728.375559] __sys_sendmsg+0xb9/0x140 [ 728.379366] ? SyS_shutdown+0x170/0x170 [ 728.383363] SyS_sendmsg+0x2d/0x50 [ 728.386906] ? __sys_sendmsg+0x140/0x140 [ 728.391132] do_syscall_64+0x1e8/0x640 [ 728.395019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 728.399870] entry_SYSCALL_64_after_hwframe+0x42/0xb7 05:21:18 executing program 3 (fault-call:1 fault-nth:1): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 728.405182] RIP: 0033:0x45a679 [ 728.408835] RSP: 002b:00007f6dc6c01c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.416548] RAX: ffffffffffffffda RBX: 00007f6dc6c01c90 RCX: 000000000045a679 [ 728.423820] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 728.431091] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 728.438403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6dc6c026d4 [ 728.445668] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 728.456264] CPU: 1 PID: 27301 Comm: syz-executor.5 Not tainted 4.14.157-syzkaller #0 [ 728.464313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.473859] Call Trace: [ 728.476548] dump_stack+0x142/0x197 [ 728.480204] should_fail.cold+0x10f/0x159 [ 728.484377] should_failslab+0xdb/0x130 [ 728.488374] kmem_cache_alloc_node_trace+0x280/0x770 [ 728.493514] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 728.499117] __kmalloc_node_track_caller+0x3d/0x80 [ 728.502419] FAULT_INJECTION: forcing a failure. [ 728.502419] name failslab, interval 1, probability 0, space 0, times 0 [ 728.504188] __kmalloc_reserve.isra.0+0x40/0xe0 [ 728.504205] __alloc_skb+0xcf/0x500 [ 728.504216] ? skb_trim+0x180/0x180 [ 728.504233] ? netlink_autobind.isra.0+0x1c9/0x290 [ 728.533714] netlink_sendmsg+0x874/0xc60 [ 728.537793] ? netlink_unicast+0x650/0x650 [ 728.542039] ? security_socket_sendmsg+0x89/0xb0 [ 728.546973] ? netlink_unicast+0x650/0x650 [ 728.551304] sock_sendmsg+0xce/0x110 [ 728.555162] ___sys_sendmsg+0x70a/0x840 [ 728.559230] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 728.564105] ? __fget+0x210/0x370 [ 728.567562] ? find_held_lock+0x35/0x130 [ 728.571708] ? __fget+0x210/0x370 [ 728.575341] ? lock_downgrade+0x740/0x740 [ 728.579611] ? __fget+0x237/0x370 [ 728.583268] ? __fget_light+0x172/0x1f0 [ 728.587553] ? __fdget+0x1b/0x20 [ 728.590926] ? sockfd_lookup_light+0xb4/0x160 [ 728.595534] __sys_sendmsg+0xb9/0x140 [ 728.599430] ? SyS_shutdown+0x170/0x170 [ 728.603520] SyS_sendmsg+0x2d/0x50 [ 728.607118] ? __sys_sendmsg+0x140/0x140 [ 728.611274] do_syscall_64+0x1e8/0x640 [ 728.615187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 728.620393] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 728.625682] RIP: 0033:0x45a679 [ 728.629055] RSP: 002b:00007fe41e860c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.636961] RAX: ffffffffffffffda RBX: 00007fe41e860c90 RCX: 000000000045a679 [ 728.644737] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 728.652221] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 728.659586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe41e8616d4 [ 728.666921] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 728.674951] CPU: 0 PID: 27312 Comm: syz-executor.3 Not tainted 4.14.157-syzkaller #0 [ 728.683329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.693171] Call Trace: [ 728.695871] dump_stack+0x142/0x197 [ 728.699531] should_fail.cold+0x10f/0x159 [ 728.703992] should_failslab+0xdb/0x130 05:21:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) [ 728.708080] kmem_cache_alloc_node_trace+0x280/0x770 [ 728.713492] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 728.719195] __kmalloc_node_track_caller+0x3d/0x80 [ 728.724234] __kmalloc_reserve.isra.0+0x40/0xe0 [ 728.729008] __alloc_skb+0xcf/0x500 [ 728.729020] ? skb_trim+0x180/0x180 [ 728.729031] ? netlink_autobind.isra.0+0x1c9/0x290 [ 728.729045] netlink_sendmsg+0x874/0xc60 [ 728.746225] ? netlink_unicast+0x650/0x650 [ 728.750576] ? security_socket_sendmsg+0x89/0xb0 [ 728.755782] ? netlink_unicast+0x650/0x650 [ 728.760047] sock_sendmsg+0xce/0x110 [ 728.764054] ___sys_sendmsg+0x70a/0x840 [ 728.768410] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 728.773355] ? __fget+0x210/0x370 [ 728.776816] ? find_held_lock+0x35/0x130 [ 728.780909] ? __fget+0x210/0x370 [ 728.784405] ? lock_downgrade+0x740/0x740 [ 728.788684] ? __fget+0x237/0x370 [ 728.792278] ? __fget_light+0x172/0x1f0 [ 728.796464] ? __fdget+0x1b/0x20 [ 728.799850] ? sockfd_lookup_light+0xb4/0x160 [ 728.804650] __sys_sendmsg+0xb9/0x140 [ 728.808637] ? SyS_shutdown+0x170/0x170 [ 728.812743] SyS_sendmsg+0x2d/0x50 [ 728.816336] ? __sys_sendmsg+0x140/0x140 [ 728.820496] do_syscall_64+0x1e8/0x640 [ 728.824595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 728.829695] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 728.835058] RIP: 0033:0x45a679 [ 728.838300] RSP: 002b:00007f4cd7d78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.846418] RAX: ffffffffffffffda RBX: 00007f4cd7d78c90 RCX: 000000000045a679 [ 728.854214] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 728.861793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 728.869305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cd7d796d4 [ 728.876627] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 05:21:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:19 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x3) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) 05:21:19 executing program 5 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:19 executing program 3 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) [ 729.019604] FAULT_INJECTION: forcing a failure. [ 729.019604] name failslab, interval 1, probability 0, space 0, times 0 [ 729.057281] FAULT_INJECTION: forcing a failure. [ 729.057281] name failslab, interval 1, probability 0, space 0, times 0 [ 729.069859] CPU: 0 PID: 27322 Comm: syz-executor.0 Not tainted 4.14.157-syzkaller #0 [ 729.077783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.087416] Call Trace: [ 729.090016] dump_stack+0x142/0x197 [ 729.093701] should_fail.cold+0x10f/0x159 [ 729.097870] should_failslab+0xdb/0x130 [ 729.101851] kmem_cache_alloc_trace+0x4b/0x790 [ 729.106442] ? __lock_acquire+0x523/0x4620 [ 729.111078] xfrm_state_alloc+0x48/0x5a0 [ 729.115263] xfrm_add_sa+0xb13/0x305e [ 729.119153] ? xfrm_alloc_userspi+0x860/0x860 [ 729.123653] ? nla_parse+0x186/0x240 [ 729.127545] ? xfrm_alloc_userspi+0x860/0x860 [ 729.132039] xfrm_user_rcv_msg+0x3c9/0x690 [ 729.136303] ? xfrm_dump_sa_done+0xe0/0xe0 [ 729.140550] ? __lock_acquire+0x5f7/0x4620 [ 729.144822] ? netlink_deliver_tap+0x93/0x8f0 [ 729.149381] ? xfrm_netlink_rcv+0x61/0x90 [ 729.153534] netlink_rcv_skb+0x14f/0x3c0 [ 729.157599] ? xfrm_dump_sa_done+0xe0/0xe0 [ 729.161832] ? netlink_ack+0x9a0/0x9a0 [ 729.165730] xfrm_netlink_rcv+0x70/0x90 [ 729.169703] netlink_unicast+0x44d/0x650 [ 729.173771] ? netlink_attachskb+0x6a0/0x6a0 [ 729.178242] ? security_netlink_send+0x81/0xb0 [ 729.182828] netlink_sendmsg+0x7c4/0xc60 [ 729.186895] ? netlink_unicast+0x650/0x650 [ 729.191132] ? security_socket_sendmsg+0x89/0xb0 [ 729.196002] ? netlink_unicast+0x650/0x650 [ 729.200237] sock_sendmsg+0xce/0x110 [ 729.203951] ___sys_sendmsg+0x70a/0x840 [ 729.208062] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 729.213056] ? __fget+0x210/0x370 [ 729.216698] ? find_held_lock+0x35/0x130 [ 729.220973] ? __fget+0x210/0x370 [ 729.224449] ? lock_downgrade+0x740/0x740 [ 729.228751] ? __fget+0x237/0x370 [ 729.232211] ? __fget_light+0x172/0x1f0 [ 729.236184] ? __fdget+0x1b/0x20 [ 729.239552] ? sockfd_lookup_light+0xb4/0x160 [ 729.244211] __sys_sendmsg+0xb9/0x140 [ 729.248012] ? SyS_shutdown+0x170/0x170 [ 729.252086] SyS_sendmsg+0x2d/0x50 [ 729.255631] ? __sys_sendmsg+0x140/0x140 [ 729.259698] do_syscall_64+0x1e8/0x640 [ 729.263583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 729.268434] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 729.273621] RIP: 0033:0x45a679 [ 729.276847] RSP: 002b:00007f6dc6c01c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.284601] RAX: ffffffffffffffda RBX: 00007f6dc6c01c90 RCX: 000000000045a679 [ 729.291869] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 729.299138] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 729.306495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6dc6c026d4 [ 729.313764] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 729.325365] FAULT_INJECTION: forcing a failure. [ 729.325365] name failslab, interval 1, probability 0, space 0, times 0 [ 729.346291] CPU: 0 PID: 27326 Comm: syz-executor.5 Not tainted 4.14.157-syzkaller #0 [ 729.354331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.364025] Call Trace: [ 729.366639] dump_stack+0x142/0x197 [ 729.370435] should_fail.cold+0x10f/0x159 [ 729.374747] should_failslab+0xdb/0x130 [ 729.378757] kmem_cache_alloc+0x47/0x780 [ 729.382909] ? lock_acquire+0x16f/0x430 [ 729.386991] ? check_preemption_disabled+0x3c/0x250 [ 729.392061] skb_clone+0x129/0x320 [ 729.395734] netlink_deliver_tap+0x681/0x8f0 [ 729.400170] netlink_unicast+0x49d/0x650 [ 729.404343] ? netlink_attachskb+0x6a0/0x6a0 [ 729.408770] ? security_netlink_send+0x81/0xb0 [ 729.413373] netlink_sendmsg+0x7c4/0xc60 [ 729.417570] ? netlink_unicast+0x650/0x650 [ 729.421824] ? security_socket_sendmsg+0x89/0xb0 [ 729.426590] ? netlink_unicast+0x650/0x650 [ 729.430834] sock_sendmsg+0xce/0x110 [ 729.434571] ___sys_sendmsg+0x70a/0x840 [ 729.438557] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 729.443396] ? __fget+0x210/0x370 [ 729.446855] ? find_held_lock+0x35/0x130 [ 729.450920] ? __fget+0x210/0x370 [ 729.454394] ? lock_downgrade+0x740/0x740 [ 729.458557] ? __fget+0x237/0x370 [ 729.462032] ? __fget_light+0x172/0x1f0 [ 729.466015] ? __fdget+0x1b/0x20 [ 729.469383] ? sockfd_lookup_light+0xb4/0x160 [ 729.473977] __sys_sendmsg+0xb9/0x140 [ 729.477927] ? SyS_shutdown+0x170/0x170 [ 729.481940] SyS_sendmsg+0x2d/0x50 [ 729.485604] ? __sys_sendmsg+0x140/0x140 [ 729.489670] do_syscall_64+0x1e8/0x640 [ 729.493566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 729.498515] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 729.503708] RIP: 0033:0x45a679 [ 729.506917] RSP: 002b:00007fe41e860c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.514661] RAX: ffffffffffffffda RBX: 00007fe41e860c90 RCX: 000000000045a679 [ 729.522109] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 729.529388] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 729.536666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe41e8616d4 [ 729.544129] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 729.556493] CPU: 1 PID: 27329 Comm: syz-executor.3 Not tainted 4.14.157-syzkaller #0 [ 729.564763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.574333] Call Trace: [ 729.576955] dump_stack+0x142/0x197 [ 729.580616] should_fail.cold+0x10f/0x159 [ 729.584788] should_failslab+0xdb/0x130 [ 729.588786] kmem_cache_alloc_trace+0x4b/0x790 [ 729.593395] ? __lock_acquire+0x523/0x4620 [ 729.597658] xfrm_state_alloc+0x48/0x5a0 [ 729.601849] xfrm_add_sa+0xb13/0x305e [ 729.605677] ? xfrm_alloc_userspi+0x860/0x860 [ 729.610328] ? nla_parse+0x186/0x240 [ 729.614070] ? xfrm_alloc_userspi+0x860/0x860 [ 729.618713] xfrm_user_rcv_msg+0x3c9/0x690 [ 729.623060] ? xfrm_dump_sa_done+0xe0/0xe0 [ 729.627325] ? __lock_acquire+0x5f7/0x4620 [ 729.631817] ? native_iret+0x7/0x7 [ 729.635408] ? netlink_deliver_tap+0x93/0x8f0 [ 729.639922] ? xfrm_netlink_rcv+0x61/0x90 [ 729.644097] netlink_rcv_skb+0x14f/0x3c0 [ 729.648274] ? xfrm_dump_sa_done+0xe0/0xe0 [ 729.652536] ? netlink_ack+0x9a0/0x9a0 [ 729.656218] FAULT_INJECTION: forcing a failure. [ 729.656218] name failslab, interval 1, probability 0, space 0, times 0 [ 729.656456] xfrm_netlink_rcv+0x70/0x90 [ 729.656471] netlink_unicast+0x44d/0x650 [ 729.671383] FAULT_INJECTION: forcing a failure. [ 729.671383] name failslab, interval 1, probability 0, space 0, times 0 [ 729.671651] ? netlink_attachskb+0x6a0/0x6a0 [ 729.671669] ? security_netlink_send+0x81/0xb0 [ 729.671682] netlink_sendmsg+0x7c4/0xc60 [ 729.671702] ? netlink_unicast+0x650/0x650 [ 729.671721] ? security_socket_sendmsg+0x89/0xb0 [ 729.709544] ? netlink_unicast+0x650/0x650 [ 729.713896] sock_sendmsg+0xce/0x110 [ 729.717614] ___sys_sendmsg+0x70a/0x840 [ 729.721590] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 729.726346] ? __fget+0x210/0x370 [ 729.729891] ? find_held_lock+0x35/0x130 [ 729.734037] ? __fget+0x210/0x370 [ 729.737496] ? lock_downgrade+0x740/0x740 [ 729.741650] ? __fget+0x237/0x370 [ 729.745292] ? __fget_light+0x172/0x1f0 [ 729.749269] ? __fdget+0x1b/0x20 [ 729.752724] ? sockfd_lookup_light+0xb4/0x160 [ 729.757226] __sys_sendmsg+0xb9/0x140 [ 729.761038] ? SyS_shutdown+0x170/0x170 [ 729.765112] SyS_sendmsg+0x2d/0x50 [ 729.768681] ? __sys_sendmsg+0x140/0x140 [ 729.772804] do_syscall_64+0x1e8/0x640 [ 729.776692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 729.781542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 729.786728] RIP: 0033:0x45a679 [ 729.789913] RSP: 002b:00007f4cd7d78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.797752] RAX: ffffffffffffffda RBX: 00007f4cd7d78c90 RCX: 000000000045a679 [ 729.805024] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 729.812341] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 729.819610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cd7d796d4 05:21:19 executing program 5 (fault-call:1 fault-nth:3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:19 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 729.827053] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 729.834555] CPU: 0 PID: 27339 Comm: syz-executor.5 Not tainted 4.14.157-syzkaller #0 [ 729.842811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.842818] Call Trace: [ 729.842837] dump_stack+0x142/0x197 [ 729.842856] should_fail.cold+0x10f/0x159 [ 729.842873] should_failslab+0xdb/0x130 [ 729.842885] kmem_cache_alloc+0x47/0x780 [ 729.867522] ? lock_acquire+0x16f/0x430 [ 729.867537] ? check_preemption_disabled+0x3c/0x250 [ 729.867556] skb_clone+0x129/0x320 [ 729.867572] dev_queue_xmit_nit+0x2da/0x940 [ 729.867595] dev_hard_start_xmit+0xa7/0x8b0 [ 729.867610] ? check_preemption_disabled+0x10/0x250 [ 729.867628] __dev_queue_xmit+0x1d95/0x25e0 [ 729.880764] ? trace_hardirqs_on+0x10/0x10 [ 729.880789] ? netdev_pick_tx+0x300/0x300 [ 729.880800] ? skb_clone+0x129/0x320 [ 729.880815] ? memcpy+0x46/0x50 [ 729.880828] ? __copy_skb_header+0x2be/0x3e0 [ 729.880840] ? __skb_clone+0x271/0x800 [ 729.880856] dev_queue_xmit+0x18/0x20 [ 729.880866] ? dev_queue_xmit+0x18/0x20 [ 729.880880] netlink_deliver_tap+0x62a/0x8f0 [ 729.880901] netlink_unicast+0x49d/0x650 [ 729.880918] ? netlink_attachskb+0x6a0/0x6a0 [ 729.880932] ? security_netlink_send+0x81/0xb0 [ 729.880946] netlink_sendmsg+0x7c4/0xc60 [ 729.880963] ? netlink_unicast+0x650/0x650 [ 729.880978] ? security_socket_sendmsg+0x89/0xb0 [ 729.889042] ? netlink_unicast+0x650/0x650 [ 729.889059] sock_sendmsg+0xce/0x110 [ 729.889074] ___sys_sendmsg+0x70a/0x840 [ 729.889090] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 729.889104] ? __fget+0x210/0x370 [ 729.889117] ? find_held_lock+0x35/0x130 [ 729.889130] ? __fget+0x210/0x370 [ 729.889157] ? lock_downgrade+0x740/0x740 [ 730.015323] ? __fget+0x237/0x370 [ 730.018838] ? __fget_light+0x172/0x1f0 [ 730.022817] ? __fdget+0x1b/0x20 [ 730.026184] ? sockfd_lookup_light+0xb4/0x160 [ 730.030720] __sys_sendmsg+0xb9/0x140 [ 730.034519] ? SyS_shutdown+0x170/0x170 [ 730.038510] SyS_sendmsg+0x2d/0x50 [ 730.042046] ? __sys_sendmsg+0x140/0x140 [ 730.046108] do_syscall_64+0x1e8/0x640 [ 730.049993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 730.054846] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 730.060039] RIP: 0033:0x45a679 [ 730.063229] RSP: 002b:00007fe41e860c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.073196] RAX: ffffffffffffffda RBX: 00007fe41e860c90 RCX: 000000000045a679 [ 730.081109] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 730.088994] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 730.096264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe41e8616d4 [ 730.103633] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 730.135265] CPU: 0 PID: 27340 Comm: syz-executor.0 Not tainted 4.14.157-syzkaller #0 [ 730.143220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.152595] Call Trace: [ 730.155205] dump_stack+0x142/0x197 [ 730.158861] should_fail.cold+0x10f/0x159 [ 730.163036] should_failslab+0xdb/0x130 [ 730.167247] __kmalloc+0x2f0/0x7a0 [ 730.170952] ? xfrm_find_algo+0x1c1/0x270 [ 730.175392] ? xfrm_aead_get_byname+0x90/0x90 [ 730.179903] ? xfrm_add_sa+0x14d2/0x305e [ 730.183984] xfrm_add_sa+0x14d2/0x305e [ 730.188404] ? xfrm_alloc_userspi+0x860/0x860 [ 730.193013] ? nla_parse+0x186/0x240 [ 730.196813] ? xfrm_alloc_userspi+0x860/0x860 [ 730.201504] xfrm_user_rcv_msg+0x3c9/0x690 [ 730.205889] ? xfrm_dump_sa_done+0xe0/0xe0 [ 730.210314] ? __lock_acquire+0x5f7/0x4620 [ 730.215112] ? native_iret+0x7/0x7 [ 730.219022] ? netlink_deliver_tap+0x93/0x8f0 [ 730.223575] ? xfrm_netlink_rcv+0x61/0x90 [ 730.227810] netlink_rcv_skb+0x14f/0x3c0 [ 730.231868] ? xfrm_dump_sa_done+0xe0/0xe0 [ 730.236184] ? netlink_ack+0x9a0/0x9a0 [ 730.240078] xfrm_netlink_rcv+0x70/0x90 [ 730.244084] netlink_unicast+0x44d/0x650 [ 730.248143] ? netlink_attachskb+0x6a0/0x6a0 [ 730.252549] ? security_netlink_send+0x81/0xb0 [ 730.257129] netlink_sendmsg+0x7c4/0xc60 [ 730.261193] ? netlink_unicast+0x650/0x650 [ 730.265505] ? security_socket_sendmsg+0x89/0xb0 [ 730.270260] ? netlink_unicast+0x650/0x650 [ 730.274811] sock_sendmsg+0xce/0x110 [ 730.279266] ___sys_sendmsg+0x70a/0x840 [ 730.283283] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 730.288381] ? __fget+0x210/0x370 [ 730.292278] ? find_held_lock+0x35/0x130 [ 730.297685] ? __fget+0x210/0x370 [ 730.301146] ? lock_downgrade+0x740/0x740 [ 730.305444] ? __fget+0x237/0x370 [ 730.309167] ? __fget_light+0x172/0x1f0 [ 730.313141] ? __fdget+0x1b/0x20 [ 730.316775] ? sockfd_lookup_light+0xb4/0x160 [ 730.321276] __sys_sendmsg+0xb9/0x140 [ 730.325275] ? SyS_shutdown+0x170/0x170 [ 730.329262] SyS_sendmsg+0x2d/0x50 [ 730.332860] ? __sys_sendmsg+0x140/0x140 [ 730.336963] do_syscall_64+0x1e8/0x640 [ 730.340860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 730.346966] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 730.352370] RIP: 0033:0x45a679 [ 730.355555] RSP: 002b:00007f6dc6c01c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.363350] RAX: ffffffffffffffda RBX: 00007f6dc6c01c90 RCX: 000000000045a679 [ 730.370795] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 05:21:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x1f8, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x2, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x108, 0x1, {{'md5\x00'}, 0x5e8, "26dc06d6c0b1f8f7c497e17726c2088105e113b5a45064a5000ecec859f69a8123867f97b8033b35d31e6dee1a6192618e250195504b8d23e58cf7c1ca64cfbc36d42935677e37a1ae88a44404f7769356c58ae42de5e033af09007448fdb4bbfb6f958859b0bda71f14940b096417eafa3e8dcf79b2e3e6fff587c95623fdb1fe048169e3fdfec89ae8b9008e8b28a9fee2909680d36b30a70e66e5330583ccf2c2ac1e939ecd210e5ec6eb440286f0e9425fa39c01c8d7c61b61543e"}}]}, 0x1f8}}, 0x2008084) 05:21:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) [ 730.379887] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 730.387392] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6dc6c026d4 [ 730.394822] R13: 00000000004c9592 R14: 00000000004e1048 R15: 0000000000000004 [ 730.402466] net_ratelimit: 22 callbacks suppressed [ 730.402472] protocol 88fb is buggy, dev hsr_slave_0 [ 730.412854] protocol 88fb is buggy, dev hsr_slave_1 05:21:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x37c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, r1}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x4b}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}, 0x0, "05046a4325a64fe977f1d45442bdf1"}}]}, 0x138}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f00000002c0)={0x3, 0x4}) 05:21:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000502}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x29c, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf5f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x936}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbaf4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3534}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100033070000000000000084fe80000000000000000000000000000000000000000000000000000000000001000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000009000000000000000000000000000000000000000000000000000000020000000200000000000000480001006e68706f6c79313330352d6e656f6e00"/240], 0x138}}, 0x0) sysfs$1(0x1, &(0x7f0000000080)='lo\x00') fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x4) 05:21:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x3) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) 05:21:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) 05:21:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x3) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 05:21:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) 05:21:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) 05:21:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x3) 05:21:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) 05:21:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) [ 731.430174] protocol 88fb is buggy, dev hsr_slave_0 [ 731.435316] protocol 88fb is buggy, dev hsr_slave_1 [ 731.520162] protocol 88fb is buggy, dev hsr_slave_0 [ 731.525914] protocol 88fb is buggy, dev hsr_slave_1 [ 731.590151] protocol 88fb is buggy, dev hsr_slave_0 [ 731.595325] protocol 88fb is buggy, dev hsr_slave_1 [ 731.600497] protocol 88fb is buggy, dev hsr_slave_0 [ 731.605686] protocol 88fb is buggy, dev hsr_slave_1 05:21:23 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x2000}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'ghash\x00'}}}]}, 0x138}}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141000, 0x142) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x3, 0x1f, 0x7fffffff}) 05:21:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$caif_stream(0x25, 0x1, 0x3) 05:21:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000280)={0xfffffe01, 0x5}) r8 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r8, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') ioctl$KVM_S390_UCAS_UNMAP(r9, 0x4018ae51, &(0x7f00000000c0)={0x8000, 0x7ff, 0x2}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x81800004}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r10, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x14fda9609d41cda9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 05:21:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(0xffffffffffffffff, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:23 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0xffffffff, &(0x7f0000000100)=0x4) 05:21:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) socket$caif_stream(0x25, 0x1, 0x3) 05:21:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:23 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) 05:21:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(0xffffffffffffffff, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:24 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) socket$caif_stream(0x25, 0x1, 0x3) [ 733.850978] audit: type=1400 audit(1575264084.021:863): avc: denied { map } for pid=27397 comm="syz-executor.0" path="socket:[103544]" dev="sockfs" ino=103544 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 [ 735.590164] net_ratelimit: 16 callbacks suppressed [ 735.590169] protocol 88fb is buggy, dev hsr_slave_0 [ 735.600424] protocol 88fb is buggy, dev hsr_slave_1 [ 735.670160] protocol 88fb is buggy, dev hsr_slave_0 [ 735.675517] protocol 88fb is buggy, dev hsr_slave_1 [ 735.750164] protocol 88fb is buggy, dev hsr_slave_0 [ 735.755505] protocol 88fb is buggy, dev hsr_slave_1 [ 735.760847] protocol 88fb is buggy, dev hsr_slave_0 [ 735.766142] protocol 88fb is buggy, dev hsr_slave_1 [ 736.310142] protocol 88fb is buggy, dev hsr_slave_0 [ 736.315244] protocol 88fb is buggy, dev hsr_slave_1 05:21:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0xa) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x2}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r9, 0x400, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000100000000000000000000000003f000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="40c03e4dfa9d001600000000000000000000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000fdffffffffffffff810000000000000000000000001a00000000000000000000080000000000000000000000000000200000000000000000000000000000000000000000000000000700000000000000ff0f00000000000000000000020000000000000000000000bea21a0dec41b4b9ac390f286a407c9e50a59362d5e834"], 0xf0}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080), 0x4) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) 05:21:26 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(0xffffffffffffffff, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) socket$caif_stream(0x25, 0x1, 0x3) 05:21:26 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in6, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x229243cf113528bf}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0xfffffffffffffd49}}, 0x0) 05:21:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) alarm(0x1000) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r4, 0x4000000000000002) ioctl$TCGETX(r4, 0x5432, &(0x7f0000000500)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@polexpire={0x260, 0x1b, 0x100, 0x70bd26, 0x25dfdbfe, {{{@in=@local, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e24, 0x2, 0x4e24, 0x0, 0xa, 0x0, 0xa0, 0x2b, r8, r10}, {0x645f, 0xfffffffffffffffb, 0x3, 0x49d8, 0x1, 0x5, 0x2, 0x4}, {0x4, 0x100, 0xfffffffff699dfb3, 0x7ff}, 0x10001, 0x6e6bb1, 0x0, 0x76a9b7fec070f96e, 0x2}, 0xb3}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d2}, 0xa, @in6=@remote, 0x34ff, 0x0, 0x3, 0xc1, 0xffffff7b, 0x8, 0x8}, {{@in=@rand_addr=0x3, 0x4d3, 0x1ec098bac828beec}, 0x2, @in=@empty, 0x3502, 0x3, 0x1, 0x81, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x2, 0x4d3, 0x101}, 0x2, @in=@broadcast, 0x0, 0x3, 0x2, 0x1, 0x44, 0x1, 0x3}, {{@in6=@ipv4={[], [], @remote}, 0x4d3, 0x19}, 0xe619d13d9042f083, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x3506, 0x2, 0x2, 0x51, 0x0, 0x67, 0x9}, {{@in=@local, 0x4d2, 0xff}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x1, 0x3, 0x5f, 0x56, 0x2, 0x9}]}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @srcaddr={0x14, 0xd, @in6=@loopback}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) [ 736.719616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:21:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'nlmon0\x00'}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffff04de027d7738293a4e76000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000fffb00"/250], 0x225}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000300)={@remote}, &(0x7f0000000340)=0x14) [ 736.819046] batman_adv: batadv0: Adding interface: veth25 [ 736.836085] batman_adv: batadv0: The MTU of interface veth25 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 05:21:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) [ 736.895500] batman_adv: batadv0: Not using interface veth25 (retrying later): interface not active [ 736.938178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 736.957630] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:21:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x1}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 736.990491] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:21:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x86, 0x2}, 0x2) 05:21:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 737.072699] batman_adv: batadv0: Adding interface: veth3 [ 737.084937] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.109650] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active 05:21:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@local}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x9) 05:21:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socket$caif_stream(0x25, 0x1, 0x3) 05:21:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x20040) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x0, 0x0, 0x80000000000000}}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x20000900) 05:21:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000500)={{0x4, 0x3, 0xffff, 0x80, 'syz0\x00', 0xfffffffc}, 0x0, [0x9, 0xe9ed, 0x3, 0x3, 0x7fffffff, 0x9, 0x4, 0x0, 0xe19, 0x8, 0x3, 0xe49, 0x6, 0x40, 0x1, 0x4, 0x80000000, 0x4, 0x3, 0x10001, 0x6, 0x2, 0x4, 0x19d, 0x1, 0x1, 0x7, 0x1a, 0x0, 0x0, 0x20, 0xfffffffffffff800, 0x2, 0x100000001, 0xfff, 0x7fff, 0x6, 0x4b, 0xeee, 0x6a6, 0x4, 0x8, 0xffffffffffffff7f, 0x4, 0x5, 0x81, 0x4, 0x1000, 0x5, 0x3, 0x3, 0x4, 0x3a, 0x2, 0x4, 0x1, 0x7ff, 0x2e, 0x4, 0x0, 0x0, 0x9, 0x4, 0x23e8, 0x7, 0x9, 0x1, 0x1, 0xff, 0x6000000000000000, 0xd5f, 0x8, 0x0, 0x0, 0x2, 0x8000, 0x6, 0x0, 0x2, 0x81, 0x3, 0x4c, 0x1, 0x8, 0x8, 0x8, 0x80000001, 0x1, 0x9, 0x1, 0xffffffff, 0x80000001, 0x6, 0x1, 0x7fffffff, 0xed2, 0xff, 0x4, 0x7, 0x3, 0x1, 0x7fffffff, 0x7, 0x6, 0x4, 0x9, 0x9, 0x3, 0x4, 0x5, 0xfffffffffffffffb, 0x0, 0x6, 0x3ff, 0x10001, 0x1, 0x80000000, 0x278b9e2c, 0x0, 0x4c49, 0x101, 0xf37, 0x8, 0x400, 0x4, 0x2, 0x9, 0xffd], {0x0, 0x989680}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0xffffffff, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:30 executing program 1: socket$caif_stream(0x25, 0x1, 0x3) 05:21:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'cmac-aes-ce\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x20000, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0xfffffffa}) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000140)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1c, 0x17, "189ad0df36d1365bb8606f500f13e3718eb348483ca5afde27e04287b001f6967c3806ca7425e9e9c41ad8322048d5b79ad22412a58ff166ae53ae6c0a387f6a", "15a97e01f3acc0560682cd9cfae86c646cebaa54339c2927217e7965cbf13361", [0x0, 0x800]}) [ 740.790211] net_ratelimit: 24 callbacks suppressed [ 740.790217] protocol 88fb is buggy, dev hsr_slave_0 [ 740.800308] protocol 88fb is buggy, dev hsr_slave_1 [ 741.830164] protocol 88fb is buggy, dev hsr_slave_0 [ 741.835302] protocol 88fb is buggy, dev hsr_slave_1 [ 741.910110] protocol 88fb is buggy, dev hsr_slave_0 [ 741.915268] protocol 88fb is buggy, dev hsr_slave_1 [ 741.990127] protocol 88fb is buggy, dev hsr_slave_0 [ 741.995362] protocol 88fb is buggy, dev hsr_slave_1 [ 742.000491] protocol 88fb is buggy, dev hsr_slave_0 [ 742.005599] protocol 88fb is buggy, dev hsr_slave_1 05:21:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x4d2, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1, 0xd5}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0x5, 0x2, 0x2, 0x4, '\x00', 0x1}) 05:21:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:32 executing program 1: socket$caif_stream(0x25, 0x1, 0x3) 05:21:32 executing program 1: socket$caif_stream(0x25, 0x1, 0x3) 05:21:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033050000fe80000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000015000000480001006d643500"/240], 0x225}}, 0x0) 05:21:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) [ 742.883215] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:21:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffffef) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x1, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100000020000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa000000470e000000000000000000000000000000000000000000000000000000000000000000000000809c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000484d7f006d643500000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000002000000000000090000"], 0x138}}, 0x0) 05:21:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x8408, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x12, 0x5}) r5 = syz_open_pts(r2, 0x4000000000000002) dup3(r5, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) recvfrom$rose(r1, &(0x7f00000000c0)=""/129, 0x81, 0x40000003, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) 05:21:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 05:21:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004800010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000983001f10000000000"], 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000080)={0x1, 0x4, 0x28f0, 0x4, 0x1000}) 05:21:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 05:21:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 743.428333] Unknown ioctl 28677 05:21:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = semget$private(0x0, 0x0, 0x20) semctl$GETNCNT(r1, 0x4, 0xe, &(0x7f0000000080)=""/151) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 745.990164] net_ratelimit: 16 callbacks suppressed [ 745.990170] protocol 88fb is buggy, dev hsr_slave_0 [ 746.000278] protocol 88fb is buggy, dev hsr_slave_1 [ 746.070152] protocol 88fb is buggy, dev hsr_slave_0 [ 746.075290] protocol 88fb is buggy, dev hsr_slave_1 [ 746.150169] protocol 88fb is buggy, dev hsr_slave_0 [ 746.155276] protocol 88fb is buggy, dev hsr_slave_1 [ 746.160590] protocol 88fb is buggy, dev hsr_slave_0 [ 746.165626] protocol 88fb is buggy, dev hsr_slave_1 05:21:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0xbc466a7ee4b0d71f, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x67}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10004080) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='md5\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 05:21:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0xfa, 0x5}, 'port1\x00', 0x81129681dfd7e543, 0x100400, 0x8000, 0x6, 0x10, 0x5, 0x3a, 0x0, 0x2, 0x6}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x24, 0x1d, 0x200, 0x70bd27, 0x25dfdbfd, "", [@coaddr={0x14, 0xe, @in6=@rand_addr="a548ae4e06731d7c8ff6f8c5692ffd60"}]}, 0x24}}, 0x0) 05:21:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@remote, @in=@initdev}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xffffffffffffff3d) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) socketpair(0x9, 0x5, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xd4, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4880}, 0x84000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x7683c36402c368bd}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000900)={0x7, 0x2, 0x8, 0x240, 0x4, 0x6, 0x4, 0x20, 0x3ec, 0x7fffffff, 0x7, 0x3}) process_vm_readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/186, 0xba}, {&(0x7f0000000440)=""/120, 0x78}], 0x2, &(0x7f0000000940), 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c95290263c3c3b284750154362356352cbd120b207ef6"], 0x225}}, 0x0) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "7a341e4e6ee4ac406a864cce29618603cca6c74e"}, 0x15, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) accept(r4, 0x0, &(0x7f0000000780)) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="217681c531ad1231ea13ed54438014bb4b6245c83df87ad8b67607526c9c3ca7", 0x20, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xbd, @mcast2, 0x8}, 0x1c) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000007c0)={0x4, "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"}) [ 746.316732] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 05:21:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:36 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x100000, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 05:21:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:36 executing program 4: [ 746.467328] devpts: called with bogus options 05:21:36 executing program 4: [ 746.494232] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 746.526911] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 746.710142] protocol 88fb is buggy, dev hsr_slave_0 [ 746.715288] protocol 88fb is buggy, dev hsr_slave_1 05:21:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x12100, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110}, {@in6, 0x0, 0x4f}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x5c, 0x1, {{'sha256\x00'}, 0xa0, "1d4d49a8890d54090400799d14f14bf591ba1622"}}]}, 0x14c}}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7, 0x81, 0x9f4, 0xffffffff, 0x81, 0x50, 0x10001}, 0x1c) timer_delete(0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000280)={{0xd2, 0x1, 0xdb, 0x7, 0x7, 0xe5}, 0x10001, 0xcff4, 0xfffffffb}) 05:21:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:39 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x1, 0x0, 0x7ff, 0xffff, 0x2, 0x6, 0x5}, 0x0) accept$netrom(r0, &(0x7f0000000080)={{0x3, @default}, [@bcast, @bcast, @bcast, @bcast, @rose, @bcast, @rose, @rose]}, &(0x7f0000000100)=0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:39 executing program 4: 05:21:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000160013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000000000004c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xec6c0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/26) 05:21:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80000000000000000000000000000000000000000000000000ffffe0000002000000f0c73d41000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000020000000000000000000000480001006d643500"/240], 0xfe0e4430}}, 0x0) 05:21:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:39 executing program 4: 05:21:39 executing program 4: 05:21:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000020000000000000000000000480001006d643500"/234], 0x4}}, 0x0) [ 749.495797] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 05:21:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x58, 0x1, {{'md5\x00'}, 0x68, "19a81bae3001571162d6c61f59"}}]}, 0x148}}, 0x0) 05:21:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) [ 749.545116] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 05:21:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0xbbc4, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) 05:21:39 executing program 4: 05:21:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x0) 05:21:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x802, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r7}, 0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={r7, 0xd7, "0853d0121b46831a66325c992c548810c44e69235f820c6ac2e5d92c8751e6b4fb23474ada7e36785888795903b49a68e678e8e803a97c2cff85b3d482ab56e2f6caec205ed97067f52cc0a702d5288a429e7dd072ad31efb3c21be8d46005f4837e119a83d579bb84f3dc5d24963d3f605802fee1253396f853fd78375a87cbc03b97f4d85b8997730d04789285c1af43336de5685990ebb95ed3f4be324bf5e0e7a21c84d6de0d01a8a1bef5b5c76836b2a3b03dc65edb95399508565e8a208740cfe3713dc2fc7e6f988e853c86ee036dd77d0f2bb5"}, &(0x7f00000001c0)=0xdf) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r8, 0x7}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x80000, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x1a}, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:21:39 executing program 4: 05:21:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x138, 0x10, 0x713, 0xfffffffd, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'rmd128\x00'}}}]}, 0x138}}, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) getsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000540)=""/83, &(0x7f00000005c0)=0x53) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000640)) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000600)=0x3) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x299, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800d892c785e787182900010000f8ff0023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd0577298148aa291a92db8ebd054a4131d7f80cb605082780f807f2d0a4eb640ae995f3033e3d50fa7c6a3e0d37b10f506559b09e33211fed357d93c3c712d116416912398792268f51215f654b1fe838a0700d75b474096006ffadca41ae726539ca5371f37a818452ed6848bd91f24fbf3a28157ca697", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r13, @ANYBLOB="000000000004000008000a0014000000"], 0x28}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x5, @empty, 0x1000}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="60b72f28f12c6ad406fd1965c128dfe0960d3db81ad57dc073123db450b08d5feeadb969de6d36df99cce7e4e980a56edf754cfcec3f76bf0486edfc8ae6e1971291b3c8a6361a8d99e14c155a509d090f035b9a5196744f0480c70dd54a28a17e5ed234afcd7657979eb9f26d4363642c1a2516d78b28784a2b1c48e81ed8182b44b9e245a29dde8aa919d5081b8c14a5ccd28fcad8608972faf54119944300e8fcc91d869e772b9753d760ae068eb70a07c255", 0xb4}, {&(0x7f0000000180)="a980b327a3a33e44c2765a42c78cd9e6a726170e19c9afe169162ce9ecc5966fb656bea6824df426c457109dcbf2931309d76dc512eef95c2c1d605771ea5174f40522556c92f87ef448a5009f29438dcadaaac6b06b2dcbc41c49b975e47a1dc7449f2a16779be6c293729f4bc54f4178ff8e31c7b521fe", 0x78}, {&(0x7f0000000200)="fd81d59c15cbd1c7e7db1e9beb36", 0xe}], 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x108}, 0x4000040) 05:21:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:40 executing program 4: 05:21:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x0) 05:21:40 executing program 4: 05:21:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:40 executing program 4: [ 750.003318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 750.025020] batman_adv: batadv0: Adding interface: veth5 [ 750.036586] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.061455] batman_adv: batadv0: Not using interface veth5 (retrying later): interface not active [ 751.190172] net_ratelimit: 24 callbacks suppressed [ 751.190177] protocol 88fb is buggy, dev hsr_slave_0 [ 751.200595] protocol 88fb is buggy, dev hsr_slave_1 [ 752.230122] protocol 88fb is buggy, dev hsr_slave_0 [ 752.235321] protocol 88fb is buggy, dev hsr_slave_1 [ 752.310136] protocol 88fb is buggy, dev hsr_slave_0 [ 752.315326] protocol 88fb is buggy, dev hsr_slave_1 [ 752.390140] protocol 88fb is buggy, dev hsr_slave_0 [ 752.395315] protocol 88fb is buggy, dev hsr_slave_1 [ 752.401153] protocol 88fb is buggy, dev hsr_slave_0 [ 752.406313] protocol 88fb is buggy, dev hsr_slave_1 05:21:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x484, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',posixacl,access=', @ANYRESDEC=r6, @ANYBLOB="2c6c6f6f73652c706f73697861636c2c667363616368652c6163636573733d757365722c6163636573733d636c69756e742c736d61636b6673726f6f743d6d6435002c7365636c6162656c2c66736d616769633d3078303030303030303030303030303030312c6f626a5f747970c6f6112235002c736d61636b6673666c6f6f723d6d6435002c736d61735f9bd6fab4636b6673326f6f743d6d6435002c00"]) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:21:42 executing program 4: 05:21:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x0) 05:21:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x140, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'tunl0\x00', {0x2, 0x4e21, @broadcast}}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6=@rand_addr="00fffffffffffffffa00", 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'blake2s-128-x86\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 05:21:43 executing program 4: 05:21:43 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)=""/162, &(0x7f0000000140)=0xa2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:21:43 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_tables_matches\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 752.915829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:21:43 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 753.029701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:21:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80000000000000000000000000e80000000000000000000000000000000001bc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000100)=0xfb4) 05:21:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000010001307000000000000000000000000000000000000000000000001bf000000000000000000000000000001000000000000000000000000000000001150aae484d414461b8d70f1f7d4255d2a11f115e0329545434fd56e65b9e3dac6a246b3b0f32c02a2e4fad7d7e72cd13f9ab4ab77d51a33d0bdcb0249ee5785720ec1737ce37ee05adb2c957fa638cc958d4acd217bfb1522559e9ce9df0fef9ac28c24ff09c4a87a62b79e3f734d39a089356955942cfaaa097af42304e69a0155a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x138}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x1) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/41) 05:21:45 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:45 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x8, 0x0, 0x47}) 05:21:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000f89b1f56f5af7e1893791a80665d66e63b2d4c2cbadab2c4bc84babf258b8d52a9e31b9dc2f22ea2bd341a7bffe45eff1786604fe2458ec965e36082f9ec803361cb9994cb50fcadfa506e4cd1cbeae2758fd5b723dfaa8ed65930c98bfd923cf64bb04773fd52bd2760ae131558a8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9fcffff"], 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000400)={0x200, 0x8e9fdcbb005518c1, 'client1\x00', 0xffffffff80000000, "063fa15fa0a6f4b2", "6a2346ecaef21a1df1073302457fda8f5135b1d31e85a635710e8e783c527bf3", 0x7, 0x5}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x14843fad}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4a010}, 0x20000010) 05:21:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/7) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) [ 755.807022] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 755.839844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:21:46 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101000, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB="532c88d1ecaca443d45be60dd5dbbabe955bd234aabea81ffa700a793e91a1690a1ae69bd574bd8bf8cc3a14f78e92c8dcb7d573a4024248b07d0278"], 0x3}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x747d, 0x4) 05:21:46 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) [ 755.865136] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:21:46 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x8, 0x0, 0x47}) 05:21:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:21:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@newspdinfo={0x338, 0x24, 0x2, 0x70bd26, 0x25dfdbfb, 0x0, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d6, 0x13aab799e1518fd7}, 0xa, @in=@multicast2, 0x3504, 0x0, 0x2, 0xfe, 0x1, 0xbff, 0x2}, {{@in6=@local, 0x4d5, 0x3c}, 0x0, @in6=@loopback, 0x3500, 0x2, 0x0, 0x6, 0x7c68, 0x80000001}]}, @tmpl={0x184, 0x5, [{{@in=@remote, 0x4d5, 0x2b}, 0xa, @in=@broadcast, 0x3507, 0x3, 0x1, 0x1, 0x7fffffff, 0x0, 0x7}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x1, 0xc0, 0x7ff, 0x4b, 0x115}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4d2, 0xd1020810792acf77}, 0xa, @in6=@empty, 0x3506, 0x9, 0x3, 0x3, 0x0, 0x7, 0x5}, {{@in6=@remote, 0x4d6, 0xff}, 0xa, @in6=@rand_addr="2c35896f2a44455b7925bdfc7e8da2eb", 0x3505, 0x1, 0x0, 0x0, 0x7f, 0x5, 0xdb}, {{@in=@multicast1, 0x4d3, 0x33}, 0xa, @in, 0x3503, 0x3, 0x1, 0x5, 0x0, 0x71852c7b, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x2b}, 0x2, @in6=@ipv4={[], [], @broadcast}, 0x3505, 0x0, 0x2, 0x1, 0x5, 0x8, 0x7}]}, @algo_crypt={0x11c, 0x2, {{'fpu(lrw-serpent-avx)\x00'}, 0x688, "e18599d01fb5af3f13a9fa364b3a131918639ade5aec8959293ec1d3277038ceda6b1ecf2c9e002df92eed81aedb23fca4e7d3b5252c50b6cbe1b9e15d492085ba19060355c9775607b03d117b9db58912de6753823c97736aa52227c271521ea650ed1ebc61da9b58cfeba1528814bef9e99b3572a538cd94754ba1af12a7ec0071e98108beecce3bf8c3404ba0dae6fa7f49846414d7cde689625465ba991445cb4d49a633b0fac2963106faf653cbd12c47958d38af6366e4600ce77ba65d524c09a1d3a7f0e571a34ac815eeac2305"}}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) [ 755.994357] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:21:46 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6b) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:46 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x8, 0x0, 0x47}) 05:21:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 05:21:46 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6b) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 756.135806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 756.241004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 756.390128] net_ratelimit: 16 callbacks suppressed [ 756.390137] protocol 88fb is buggy, dev hsr_slave_0 [ 756.400284] protocol 88fb is buggy, dev hsr_slave_1 [ 756.470158] protocol 88fb is buggy, dev hsr_slave_0 [ 756.475293] protocol 88fb is buggy, dev hsr_slave_1 [ 756.550128] protocol 88fb is buggy, dev hsr_slave_0 [ 756.555254] protocol 88fb is buggy, dev hsr_slave_1 [ 756.560387] protocol 88fb is buggy, dev hsr_slave_0 [ 756.565438] protocol 88fb is buggy, dev hsr_slave_1 [ 757.120140] protocol 88fb is buggy, dev hsr_slave_0 [ 757.125286] protocol 88fb is buggy, dev hsr_slave_1 05:21:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x1}, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:21:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x1d5d, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d6435000000f6ffffffffffffff00f7ffffff00"/226], 0x225}}, 0x0) 05:21:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/142, 0x8e}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x192fb1, 0x0, 0x0, 0x800e00569) shutdown(r0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/157, 0x9d}, {0x0}], 0x2}, 0x0) shutdown(r1, 0x0) 05:21:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 05:21:49 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6b) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup(r1) 05:21:49 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 758.894128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.916958] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.041652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:21:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6, 0x5}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_delroute={0xcc, 0x19, 0x200, 0x70bd2c, 0x25dfdbff, {0x2, 0xa0, 0x0, 0x8, 0x0, 0x2, 0xfe}, [@RTA_METRICS={0x88, 0x8, "f8711649b405a5cdcf8c590e76ef4f219360ebc0960bb76c6d1475fe2677c2efd52cca5ce107e9ef8ebfbeb599a694a2fe21f7659d5a2cf46bf7293a9773fe63c24e1285583213d139cc0e725cdea811b1a2545ae914bc24377dd6b8c1b803cf54a099c98a5253f409e1548a206e51bbba2d465983204b76473fa76e9be0899c26"}, @RTA_PRIORITY={0x8, 0x6, 0x20}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_MARK={0x8, 0x10, 0x1ff}, @RTA_MARK={0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x22004000}, 0x0) 05:21:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80000000000000000000000000000000000006000000000000deffffab99ffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x138}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x2002, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x7fff) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000000340)) setuid(r4) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=@newpolicy={0x320, 0x13, 0x300, 0x70bd28, 0x25dfdbfd, {{@in6=@ipv4={[], [], @rand_addr=0x1ff}, @in=@multicast1, 0x4e20, 0x0, 0x4e24, 0xd8c1, 0xf, 0x150, 0x80, 0x2b, r2, r4}, {0x7, 0xa99, 0x1, 0x401, 0x6, 0x4, 0xfffffffffffffffd, 0xfffffffffffffffc}, {0x40, 0x8, 0x8, 0xdd}, 0x5, 0x6e6bb4, 0x0, 0x0, 0x317dcc4f6867eac1, 0x3}, [@algo_auth={0x5c, 0x1, {{'streebog256\x00'}, 0xa0, "3061a8c4c1009bba1b60a383a221d6752236eb99"}}, @proto={0x8, 0x19, 0x6c}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd2a, 0x70bd2a, 0x70bd25, 0x32, [0x1, 0x8]}}, @ipv4_hthresh={0x8, 0x3, {0xc, 0x12}}, @ipv4_hthresh={0x8, 0x3, {0x1d, 0x5}}, @policy_type={0xc}, @srcaddr={0x14, 0xd, @in6=@ipv4={[], [], @broadcast}}, @sec_ctx={0xd8, 0x8, {0xd4, 0x8, 0x1, 0x9, 0xcc, "a9cb988343a92bfab281002300d079fef4334e9338c52467c627c12cfbabfb369fd99108b6b1e845bd2b461487a3f4864b19fdb0f0883df77d8a4ebcb59aaa090a40c03a1c884a1aa5f7f2abb772064e5f07b29a86da64c12f0b97e988592454156a9e2784ef15f70364e447f6ce1932decf629cf1df1be4230b2358afa5b9f20d5ed364bb5e55625c7cb0e9614d4d7db11c5e1ae538c8d8acff61c2e86838fafefb08b79fec64ae33d9bb8d5269a9b44f3101c461a9508a0ce92b68f3afbf30e2fd93e095716a9d60dcd21c"}}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @tmpl={0xc4, 0x5, [{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d5, 0x19}, 0x2, @in=@empty, 0x34ff, 0x0, 0x3, 0x80, 0x9, 0xff, 0xfffffffe}, {{@in=@multicast1, 0x4d3, 0xff}, 0x2, @in=@multicast1, 0x0, 0x4, 0x3, 0x8, 0x3, 0x0, 0x100}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3506, 0x3c7b8e8c12681796, 0x1, 0x1e, 0x3, 0x80, 0x7}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000080) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 05:21:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 05:21:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, 0x7fff}) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r5, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xee6a9f01d1540a83}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xcc4002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x225}}, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x1) 05:21:49 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:49 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESHEX]], 0x1}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x42000, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000180)) [ 759.159798] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.329979] QAT: Invalid ioctl 05:21:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000078232e86100000000059000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff0000010000000081ffa6fffff7", @ANYRES32=r5], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0xffffffac) close(r3) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 05:21:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x8) 05:21:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 05:21:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@local, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'bond_slave_0\x00', {0x2, 0x4e23, @rand_addr=0x4}}) [ 759.847557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.862844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.876984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.906450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.920281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.933857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.946971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.960015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.973205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 759.986553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27905 comm=syz-executor.4 [ 761.590158] net_ratelimit: 24 callbacks suppressed [ 761.590163] protocol 88fb is buggy, dev hsr_slave_0 [ 761.600198] protocol 88fb is buggy, dev hsr_slave_1 05:21:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 05:21:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$void(r1, 0x5451) 05:21:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000900)={0x7, 0x2, 0x8, 0x240, 0x4, 0x6, 0x4, 0x20, 0x3ec, 0x7fffffff, 0x7, 0x3}) process_vm_readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/186, 0xba}, {&(0x7f0000000440)=""/120, 0x78}], 0x2, &(0x7f0000000940), 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c95290263c3c3b284750154362356352cbd120b207ef6"], 0x225}}, 0x0) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "7a341e4e6ee4ac406a864cce29618603cca6c74e"}, 0x15, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) accept(r4, 0x0, &(0x7f0000000780)) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="217681c531ad1231ea13ed54438014bb4b6245c83df87ad8b67607526c9c3ca7", 0x20, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xbd, @mcast2, 0x8}, 0x1c) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000007c0)={0x4, "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"}) 05:21:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r6}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r6, 0x47, "1dc3ff3d9d286941a1298cf8284d2fd50ce5d9d68227cd0004d80c8174b1d3c00e37dfa6fabf535c12a6bf4148fdec579d24874109df470c929cbf6a8550efad5f97ebec28814d"}, &(0x7f0000000180)=0x4f) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000080)=0x5, 0x4) 05:21:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 762.197299] nla_parse: 4 callbacks suppressed [ 762.197305] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 05:21:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000100)=""/218) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x1a0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x10, &(0x7f0000000600)={'trans=xen,', {[{@cache_none='cache=none'}, {@access_uid={'access', 0x3d, r5}}, {@cachetag={'cachetag', 0x3d, 'md5\x00'}}, {@noextend='noextend'}, {@posixacl='posixacl'}, {@access_user='access=user'}], [{@hash='hash'}, {@fsname={'fsname', 0x3d, 'md5\x00'}}, {@uid_lt={'uid<', r6}}, {@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) 05:21:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(xtea-generic)\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) 05:21:52 executing program 1: r0 = socket$inet(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 05:21:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x86, 0x2}, 0x2) 05:21:52 executing program 1: r0 = socket$inet(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:52 executing program 1: r0 = socket$inet(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:52 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:52 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 762.526368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.604959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.630127] protocol 88fb is buggy, dev hsr_slave_0 [ 762.635267] protocol 88fb is buggy, dev hsr_slave_1 [ 762.710109] protocol 88fb is buggy, dev hsr_slave_0 [ 762.715364] protocol 88fb is buggy, dev hsr_slave_1 [ 762.790139] protocol 88fb is buggy, dev hsr_slave_0 [ 762.795314] protocol 88fb is buggy, dev hsr_slave_1 [ 762.800510] protocol 88fb is buggy, dev hsr_slave_0 [ 762.805582] protocol 88fb is buggy, dev hsr_slave_1 05:21:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80000000000000000000000000d53e9a476c1ceb5cd0654ecd6602000000000000000072000000000000000001419522fbc19453810000000000000000829cac15d12ff04ce37eac209267fb307937d62ca18453a3c1cf51956009", @ANYRES32=r0, @ANYRES16, @ANYRESDEC=r0], 0x4}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="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", 0x1000) 05:21:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, 0xffffffffffffffff, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:55 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) socket$caif_stream(0x25, 0x1, 0x3) 05:21:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:21:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) fanotify_init(0x0, 0x101000) 05:21:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) 05:21:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0xffffffe0, 0x7ff, [], &(0x7f0000000080)=0x20}) [ 765.414500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:21:55 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80fbffffff000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:21:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:21:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x4, 0x10, 0x1}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@ipv4={[], [], @loopback}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfc2bc14e683d66a1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x88000) [ 765.635834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.790120] net_ratelimit: 16 callbacks suppressed [ 766.790126] protocol 88fb is buggy, dev hsr_slave_0 [ 766.800188] protocol 88fb is buggy, dev hsr_slave_1 [ 766.870121] protocol 88fb is buggy, dev hsr_slave_0 [ 766.875236] protocol 88fb is buggy, dev hsr_slave_1 [ 766.950134] protocol 88fb is buggy, dev hsr_slave_0 [ 766.955260] protocol 88fb is buggy, dev hsr_slave_1 [ 766.960408] protocol 88fb is buggy, dev hsr_slave_0 [ 766.965454] protocol 88fb is buggy, dev hsr_slave_1 [ 767.510114] protocol 88fb is buggy, dev hsr_slave_0 [ 767.515234] protocol 88fb is buggy, dev hsr_slave_1 05:21:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff72, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x4}, @in6=@loopback, 0x2}, {@in6}, @in6=@local, {0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, {0x0, 0x0, 0x7}, {0x0, 0xfd9}, 0x0, 0x0, 0x2}, [@policy_type]}, 0x138}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x8, 0x10001) 05:21:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x45, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSTI(r1, 0x5412, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r2, r3, 0x0) 05:21:58 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:21:58 executing program 4 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:21:58 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 768.278673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 768.280583] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 768.299196] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:21:58 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES64=r2, @ANYPTR64]], 0x3}, 0x1, 0x0, 0x0, 0x6c850}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0xe6}) r7 = syz_open_pts(r4, 0x210040) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$cgroup_int(r5, &(0x7f0000000000), 0x12) r8 = syz_open_pts(r4, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc)) r13 = syz_open_pts(r12, 0x4000000000000002) dup3(r13, r11, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r11, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) r14 = syz_open_pts(r10, 0x4000000000000002) dup3(r14, r9, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r9, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r15 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r15, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000100)={r15, r3}) dup3(r8, r3, 0x0) 05:21:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) [ 768.395875] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 768.407031] selinux_nlmsg_perm: 70 callbacks suppressed [ 768.407042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28029 comm=syz-executor.4 [ 768.428784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28029 comm=syz-executor.4 05:21:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380100000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/57, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:21:58 executing program 2 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 768.446693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28029 comm=syz-executor.4 [ 768.478990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 768.515983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28029 comm=syz-executor.4 [ 768.537976] FAULT_INJECTION: forcing a failure. [ 768.537976] name failslab, interval 1, probability 0, space 0, times 0 [ 768.549820] CPU: 1 PID: 28041 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 768.557719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.557726] Call Trace: [ 768.557748] dump_stack+0x142/0x197 [ 768.557769] should_fail.cold+0x10f/0x159 [ 768.577482] should_failslab+0xdb/0x130 [ 768.581468] kmem_cache_alloc+0x47/0x780 [ 768.585612] ? __might_fault+0x110/0x1d0 [ 768.589782] ebitmap_cpy+0xcd/0x270 [ 768.593412] ? hashtab_search+0x196/0x230 [ 768.597568] mls_compute_sid+0x22f/0xd60 [ 768.601026] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=28045 comm=syz-executor.0 [ 768.601633] ? mls_convert_context+0x6a0/0x6a0 [ 768.601654] security_compute_sid.part.0+0xa8f/0x10f0 [ 768.601666] ? get_pid_task+0x98/0x140 [ 768.601682] ? compute_sid_handle_invalid_context+0x270/0x270 [ 768.601696] ? check_preemption_disabled+0x3c/0x250 [ 768.618223] ? lock_downgrade+0x740/0x740 [ 768.618240] ? debug_smp_processor_id+0x1c/0x20 [ 768.618251] ? perf_trace_lock+0x109/0x500 [ 768.618262] ? check_preemption_disabled+0x3c/0x250 [ 768.618282] ? find_held_lock+0x35/0x130 [ 768.618299] security_transition_sid+0xd6/0x130 [ 768.664931] selinux_socket_create+0x36d/0x4d0 [ 768.664945] ? selinux_ib_free_security+0x20/0x20 [ 768.664965] security_socket_create+0x83/0xc0 [ 768.664982] __sock_create+0x67/0x620 [ 768.664997] SyS_socket+0xd3/0x170 [ 768.674408] ? move_addr_to_kernel+0x60/0x60 [ 768.690601] ? do_syscall_64+0x53/0x640 [ 768.694585] ? move_addr_to_kernel+0x60/0x60 [ 768.699006] do_syscall_64+0x1e8/0x640 [ 768.702900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 768.707757] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 768.707768] RIP: 0033:0x45a679 05:21:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3801000013070000000000000000fe800000000000000000000000000000000000000000fb0300003f00cd00000000000005000000000000000000000000398395ec8acce32eca4e512434e2ff48876626fe0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe800000000000000000feffffffffa90000e5ffffff00000000000000000074f20000000000000000000000dec9f2ad2da2c1f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000200ac775e2c4746fb5bbbb6a93bb9f0270d00000000000000000000480001006d64350000000000000000000000000000000000000000000000000000000000c222c89b378aca64f54f5a1200"/267], 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0xe, &(0x7f00000000c0)='net/dev_snmp6\x00'}, 0x30) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='nt\xd0\x11\x1b\xdf\xbdQ\xacnmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x8c9bb7d9279ce222, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 05:21:58 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/118) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000100000000000000040200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 05:21:58 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6b) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 768.707775] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 768.707786] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 768.707794] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 768.731124] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 768.731131] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 768.731138] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 [ 768.750995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28029 comm=syz-executor.4 [ 768.786650] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1811 sclass=netlink_xfrm_socket pig=28052 comm=syz-executor.0 [ 768.787427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:21:59 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6b) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 768.810652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28029 comm=syz-executor.4 [ 768.841688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28029 comm=syz-executor.4 05:21:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x302, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) syz_open_pts(r2, 0x4000000000000002) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r7, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r8, 0x4000000000000002) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x10000000) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x9) dup3(r7, r9, 0x80000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x4}}, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) [ 768.856924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28029 comm=syz-executor.4 05:21:59 executing program 2 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:21:59 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6b) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 768.918159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.005427] FAULT_INJECTION: forcing a failure. [ 769.005427] name failslab, interval 1, probability 0, space 0, times 0 [ 769.016745] CPU: 1 PID: 28066 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 769.021733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.024631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.024638] Call Trace: [ 769.024659] dump_stack+0x142/0x197 [ 769.024680] should_fail.cold+0x10f/0x159 [ 769.024691] ? ebitmap_cpy+0xcd/0x270 [ 769.024708] should_failslab+0xdb/0x130 [ 769.024724] kmem_cache_alloc+0x47/0x780 [ 769.052886] ? __might_fault+0x110/0x1d0 [ 769.052903] ebitmap_cpy+0xcd/0x270 [ 769.060637] ? hashtab_search+0x196/0x230 [ 769.060652] mls_compute_sid+0x22f/0xd60 [ 769.060664] ? mls_convert_context+0x6a0/0x6a0 [ 769.060681] security_compute_sid.part.0+0xa8f/0x10f0 [ 769.090312] ? get_pid_task+0x98/0x140 [ 769.092041] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.094211] ? compute_sid_handle_invalid_context+0x270/0x270 [ 769.094223] ? check_preemption_disabled+0x3c/0x250 [ 769.094233] ? lock_downgrade+0x740/0x740 [ 769.094248] ? debug_smp_processor_id+0x1c/0x20 [ 769.094259] ? perf_trace_lock+0x109/0x500 [ 769.094270] ? check_preemption_disabled+0x3c/0x250 [ 769.094289] ? find_held_lock+0x35/0x130 [ 769.094304] security_transition_sid+0xd6/0x130 [ 769.094318] selinux_socket_create+0x36d/0x4d0 [ 769.145137] ? selinux_ib_free_security+0x20/0x20 [ 769.149996] security_socket_create+0x83/0xc0 [ 769.154501] __sock_create+0x67/0x620 [ 769.158320] SyS_socket+0xd3/0x170 [ 769.161863] ? move_addr_to_kernel+0x60/0x60 [ 769.166270] ? do_syscall_64+0x53/0x640 [ 769.170244] ? move_addr_to_kernel+0x60/0x60 [ 769.174646] do_syscall_64+0x1e8/0x640 [ 769.178525] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 769.183376] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 769.188552] RIP: 0033:0x45a679 [ 769.191747] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 05:21:59 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x0, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 769.199461] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 769.206718] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 769.213988] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 769.221255] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 769.228538] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 05:22:01 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x0, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:01 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:01 executing program 2 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 771.420671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 771.449450] FAULT_INJECTION: forcing a failure. [ 771.449450] name failslab, interval 1, probability 0, space 0, times 0 [ 771.460895] CPU: 0 PID: 28080 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 771.468797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.478168] Call Trace: [ 771.480774] dump_stack+0x142/0x197 [ 771.484425] should_fail.cold+0x10f/0x159 [ 771.488592] ? ebitmap_cpy+0xcd/0x270 [ 771.492421] should_failslab+0xdb/0x130 [ 771.496407] kmem_cache_alloc+0x47/0x780 [ 771.500485] ? retint_kernel+0x2d/0x2d [ 771.504400] ebitmap_cpy+0xcd/0x270 [ 771.508036] ? hashtab_search+0x196/0x230 [ 771.512191] mls_compute_sid+0x22f/0xd60 [ 771.516259] ? mls_convert_context+0x6a0/0x6a0 [ 771.520859] security_compute_sid.part.0+0xa8f/0x10f0 [ 771.526064] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 771.531192] ? compute_sid_handle_invalid_context+0x270/0x270 [ 771.537091] ? perf_trace_lock+0x30d/0x500 [ 771.537108] ? perf_trace_run_bpf_submit+0x113/0x170 [ 771.537136] ? find_held_lock+0x35/0x130 [ 771.550506] security_transition_sid+0xd6/0x130 [ 771.550530] selinux_socket_create+0x36d/0x4d0 [ 771.550550] ? selinux_ib_free_security+0x20/0x20 [ 771.550575] security_socket_create+0x83/0xc0 [ 771.569165] __sock_create+0x67/0x620 [ 771.572997] SyS_socket+0xd3/0x170 [ 771.576726] ? move_addr_to_kernel+0x60/0x60 [ 771.581146] ? do_syscall_64+0x53/0x640 [ 771.585135] ? move_addr_to_kernel+0x60/0x60 [ 771.589567] do_syscall_64+0x1e8/0x640 [ 771.593468] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 771.598340] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 771.603541] RIP: 0033:0x45a679 [ 771.606750] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 771.614456] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 771.614463] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 771.614470] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 771.614478] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 771.614485] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 05:22:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000122b32f4fd4f8f0e8f4bd2bd7d684a9160b976dcf596114c6f066d3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40041) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe800000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000009e63bd9aea2febce38718b2571b28df9c6bf5d0999300d14ebde1fa177fa49e80660a5621478c19b7c2cb6885e14feac02a2c5553463c8e5f56c740d06fd4787716557a484ef578218af7626cf9aa01a065db5eaa07cf3e6d03e1a9e1c7802c9bc5e78bda861b0b83b7fd3d30d4a5acd11175bc092ad3bb2620a900e0f171d1d5b076585aa02631a76a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:01 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x0, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:01 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='veth1_to_team\x00', 0x5, 0x3e, 0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r1, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x40, 0x1, 0x8}}, 0x14) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f00000001c0)={0x0, 0x2, 0x7f, 0x2, 0x8, 0x1}) 05:22:02 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:02 executing program 2 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7f) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@local, 0x3c}) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 05:22:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r2, 0x4000000000000002) dup3(r4, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0x7) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6=@mcast2, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, {0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x400}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 05:22:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@empty, @loopback}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r8 = syz_open_pts(r4, 0x0) dup3(r8, r0, 0x0) 05:22:02 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 771.959738] FAULT_INJECTION: forcing a failure. [ 771.959738] name failslab, interval 1, probability 0, space 0, times 0 [ 771.990162] net_ratelimit: 24 callbacks suppressed [ 771.990167] protocol 88fb is buggy, dev hsr_slave_0 [ 772.000252] protocol 88fb is buggy, dev hsr_slave_1 [ 772.005498] CPU: 1 PID: 28109 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 772.013397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.013402] Call Trace: [ 772.013422] dump_stack+0x142/0x197 [ 772.013443] should_fail.cold+0x10f/0x159 [ 772.013459] should_failslab+0xdb/0x130 [ 772.013471] kmem_cache_alloc+0x2d7/0x780 [ 772.037109] ? security_transition_sid+0xa4/0x130 [ 772.037131] ? sock_destroy_inode+0x60/0x60 [ 772.050490] sock_alloc_inode+0x1d/0x260 [ 772.054556] alloc_inode+0x64/0x180 [ 772.058196] new_inode_pseudo+0x19/0xf0 [ 772.062181] sock_alloc+0x41/0x280 [ 772.065727] __sock_create+0x8f/0x620 [ 772.069538] SyS_socket+0xd3/0x170 [ 772.073081] ? move_addr_to_kernel+0x60/0x60 [ 772.077614] ? do_syscall_64+0x53/0x640 [ 772.081593] ? move_addr_to_kernel+0x60/0x60 [ 772.086008] do_syscall_64+0x1e8/0x640 [ 772.089903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 772.094861] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 772.100061] RIP: 0033:0x45a679 05:22:02 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:02 executing program 2 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 772.103248] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 772.110964] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 772.118236] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 772.125507] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 772.132786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 772.140053] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 [ 772.144787] socket: no more sockets [ 772.216295] FAULT_INJECTION: forcing a failure. [ 772.216295] name failslab, interval 1, probability 0, space 0, times 0 [ 772.228087] CPU: 1 PID: 28129 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 772.235990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.245346] Call Trace: [ 772.247946] dump_stack+0x142/0x197 [ 772.251586] should_fail.cold+0x10f/0x159 [ 772.255738] should_failslab+0xdb/0x130 [ 772.260402] kmem_cache_alloc_trace+0x2e9/0x790 [ 772.260412] ? kmem_cache_alloc+0x611/0x780 [ 772.260424] ? security_transition_sid+0xa4/0x130 [ 772.260442] ? sock_destroy_inode+0x60/0x60 [ 772.260453] sock_alloc_inode+0x63/0x260 [ 772.260465] alloc_inode+0x64/0x180 [ 772.286245] new_inode_pseudo+0x19/0xf0 [ 772.290227] sock_alloc+0x41/0x280 [ 772.293781] __sock_create+0x8f/0x620 [ 772.297599] SyS_socket+0xd3/0x170 [ 772.301151] ? move_addr_to_kernel+0x60/0x60 [ 772.305554] ? do_syscall_64+0x53/0x640 [ 772.305569] ? move_addr_to_kernel+0x60/0x60 [ 772.305581] do_syscall_64+0x1e8/0x640 [ 772.305589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 772.305606] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 772.327830] RIP: 0033:0x45a679 [ 772.331004] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 772.338700] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 772.345954] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 772.353209] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 05:22:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newsa={0xfc, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x1}, {}, 0x0, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0xc5}}]}, 0x452}}, 0x0) [ 772.360472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 772.367727] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 [ 772.423363] socket: no more sockets [ 773.030138] protocol 88fb is buggy, dev hsr_slave_0 [ 773.035231] protocol 88fb is buggy, dev hsr_slave_1 [ 773.110145] protocol 88fb is buggy, dev hsr_slave_0 [ 773.115258] protocol 88fb is buggy, dev hsr_slave_1 [ 773.350103] protocol 88fb is buggy, dev hsr_slave_0 [ 773.355269] protocol 88fb is buggy, dev hsr_slave_1 05:22:04 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8f00000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a2ab3b84a48b264700000000000000480001006d64350000000000000000000000000000001d56b0dfa6be45a47c6100"/240], 0x225}}, 0x0) 05:22:04 executing program 2 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 774.802595] FAULT_INJECTION: forcing a failure. [ 774.802595] name failslab, interval 1, probability 0, space 0, times 0 [ 774.807174] nla_parse: 6 callbacks suppressed [ 774.807180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 774.836658] CPU: 0 PID: 28141 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 05:22:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4300, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = dup3(r4, r2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) dup3(r8, r6, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r6, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)={'raw\x00', 0xf6, "717c7a8340fc7930c0ce7b867400ee731734c588747ddfa4c0040f8ce2b9c2d1531b70968b3a18601049bb4da2248be4449a73e20db138db26ad8ff99b3c298b862d3522afffc2ea10efd02fdaf3c9cb13a70dbc3f2b80258c42743f319a8c893ba4e19464c13c2c55e7be80fc28e63c058cb3a810446190981d12d401b45f12f548e8c74b17f21da2c8a9f0e2531772ff4710c2e9bf98246826656604fbc99824013bb88c9705f6848c2aba1eb65fb2d4e4a915f9d848b9efbde64193085ccdd5a9d989630cd7c3e3b81a359f10a3417e574cb470c8e0c8d39b66231ae3ef61d9fce3a05ded45bdf0c0b55a1adf277736c42d8192fd"}, &(0x7f00000001c0)=0x11a) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, &(0x7f0000000640)={0x0, [[0x3, 0xffffffff, 0x10000, 0xaf3, 0x0, 0x4, 0x8, 0x8], [0x0, 0x8, 0x6, 0x6, 0x5, 0x0, 0x1, 0xfffffffc], [0x2c69, 0x81, 0x7f, 0x4, 0x2fa, 0x7, 0xfff, 0xf35]], [{0x5, 0x9, 0x20}, {0xfce, 0x800, 0xe431}, {0x6, 0x20, 0xfff}, {0x100, 0x3, 0x5951}, {0x278, 0x7, 0x7fffffff}, {0x1, 0x100000, 0x2}, {0xffff19c5, 0x2, 0x800}, {0xffffffff, 0x40, 0x5}, {0x1, 0x0, 0x6}, {0x48e, 0x3f, 0x100}, {0x9, 0xcc52, 0x6}, {0x2, 0x1}], 0x10000}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r9, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xee6a9f01d1540a83}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x90201}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) [ 774.844593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.853966] Call Trace: [ 774.856581] dump_stack+0x142/0x197 [ 774.860245] should_fail.cold+0x10f/0x159 [ 774.864424] should_failslab+0xdb/0x130 [ 774.868414] kmem_cache_alloc+0x2d7/0x780 [ 774.872583] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 774.878057] selinux_inode_alloc_security+0xb6/0x2a0 [ 774.883172] security_inode_alloc+0x94/0xd0 [ 774.887487] inode_init_always+0x552/0xaf0 [ 774.891754] alloc_inode+0x81/0x180 [ 774.895387] new_inode_pseudo+0x19/0xf0 [ 774.900354] sock_alloc+0x41/0x280 [ 774.903914] __sock_create+0x8f/0x620 [ 774.907720] SyS_socket+0xd3/0x170 [ 774.911267] ? move_addr_to_kernel+0x60/0x60 [ 774.915668] ? do_syscall_64+0x53/0x640 [ 774.919667] ? move_addr_to_kernel+0x60/0x60 [ 774.924082] do_syscall_64+0x1e8/0x640 [ 774.927969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 774.932827] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 774.938003] RIP: 0033:0x45a679 [ 774.941186] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 05:22:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x40) dup3(r2, r0, 0x0) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x301}}, 0x18) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c22ca388604ad5dfc003046831abe9e76207c3daa974eac408f9abbdc66237fff9ee1a336c6ef910874855c9c2fd23b6762f2758f320f1b051c08baed6468cb78c2e568c6c56cf", 0x47, 0xfffffffffffffffc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, r3, r5, r6) 05:22:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="cd9f55cfff6419d6e56e84353aa7d73b4b499eda9a90a1b84801636c8cde7bea9619458325322267a848364452c496986de7ee58ec8d93d03a0b3ae62a7661b72f8213ee992e3d3161b5424e6df1e43f7dab602c1fbc10102009d6c125bc0276a5ddb0db4ded224e270e1b0d99e509b4ec5de1361093fab422660047e12068d37057e2f4ac62b9aa478c891e29d2ebe5d7f0176e1c0a14235e6bb6722525afd9fcdb5fa3f07663b0c0e389476991ea", 0xaf, 0xfffffffffffffff8) r2 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='md5\x00', 0xfffffffffffffffa) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:05 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) uselib(&(0x7f0000000200)='./file0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @multicast1}, {0x0, @random="47bda609caa8"}, 0x2, {0x2, 0x4e20, @multicast1}, 'nr0\x00'}) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000, 0x0) r6 = syz_open_pts(r5, 0x4000000000000002) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r11, 0x4000000000000002) dup3(r12, r10, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r10, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000240)=0x4, 0x4) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f00000000c0)={[{0xffffff76, 0x7ff, 0x7, 0xb, 0x0, 0x3, 0x55, 0x1, 0x78, 0x5, 0x81, 0x3, 0x9}, {0x200, 0x9, 0x7f, 0xff, 0xbf, 0x9, 0x5, 0x7f, 0x81, 0x7f, 0x4, 0x3, 0x9}, {0x3f, 0x540, 0x1f, 0xf7, 0x80, 0xc, 0x0, 0x3, 0x3, 0x0, 0x8, 0xdb}], 0x8}) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x7, r4}) [ 774.948904] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 774.956184] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 774.963465] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 774.970838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 774.970876] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 05:22:05 executing program 2 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:05 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x80) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) recvfrom$packet(r0, &(0x7f0000000140)=""/132, 0x84, 0x10000, &(0x7f0000000200)={0x11, 0x3, r2, 0x1, 0x3, 0x6, @random="dbfc2e92fee5"}, 0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) [ 775.107775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.146959] FAULT_INJECTION: forcing a failure. [ 775.146959] name failslab, interval 1, probability 0, space 0, times 0 [ 775.173662] CPU: 1 PID: 28163 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 775.181598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.188263] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 775.190950] Call Trace: [ 775.190972] dump_stack+0x142/0x197 [ 775.190994] should_fail.cold+0x10f/0x159 [ 775.191012] should_failslab+0xdb/0x130 [ 775.191022] __kmalloc+0x2f0/0x7a0 [ 775.191036] ? SOFTIRQ_verbose+0x10/0x10 [ 775.191049] ? sk_prot_alloc+0x171/0x2a0 [ 775.191063] sk_prot_alloc+0x171/0x2a0 [ 775.191074] ? security_capable+0x8e/0xc0 [ 775.191090] sk_alloc+0x39/0xd70 [ 775.203191] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 775.205869] ? ns_capable_common+0x12c/0x160 [ 775.205954] caif_create+0xdd/0x4b0 [ 775.205970] __sock_create+0x2f6/0x620 [ 775.237070] SyS_socket+0xd3/0x170 [ 775.250018] ? move_addr_to_kernel+0x60/0x60 [ 775.250030] ? do_syscall_64+0x53/0x640 [ 775.250044] ? move_addr_to_kernel+0x60/0x60 05:22:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000009dd6bc6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000080ffffff0000000000000000000000000000000000000000000000000000000000000012f8aa9600"/240], 0x225}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x181082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x7, 0x9, "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", 0x20, 0x6, 0x40, 0x9, 0x8, 0x81, 0x2b}, r5}}, 0x120) [ 775.250056] do_syscall_64+0x1e8/0x640 [ 775.250066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 775.250085] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 775.250095] RIP: 0033:0x45a679 [ 775.281374] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 775.282556] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 775.282570] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 775.282576] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 05:22:05 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext, 0x5840, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x54e5505aa242fb45, 0x7, {0xfad, 0x6, 0x3ff, 0x5}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) [ 775.282583] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 775.282589] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 775.282595] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 05:22:05 executing program 2 (fault-call:1 fault-nth:7): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:05 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0b") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 775.375641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.446145] FAULT_INJECTION: forcing a failure. [ 775.446145] name failslab, interval 1, probability 0, space 0, times 0 [ 775.459660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.488454] CPU: 0 PID: 28185 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 775.496397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.505855] Call Trace: [ 775.508467] dump_stack+0x142/0x197 [ 775.512129] should_fail.cold+0x10f/0x159 [ 775.516313] should_failslab+0xdb/0x130 [ 775.520315] kmem_cache_alloc_trace+0x2e9/0x790 [ 775.524992] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 775.530439] selinux_sk_alloc_security+0x5a/0x190 [ 775.535271] security_sk_alloc+0x7d/0xb0 [ 775.539341] sk_prot_alloc+0x190/0x2a0 [ 775.543254] ? security_capable+0x8e/0xc0 [ 775.547404] sk_alloc+0x39/0xd70 [ 775.550766] ? ns_capable_common+0x12c/0x160 [ 775.555175] caif_create+0xdd/0x4b0 [ 775.558800] __sock_create+0x2f6/0x620 [ 775.562685] SyS_socket+0xd3/0x170 [ 775.566216] ? move_addr_to_kernel+0x60/0x60 [ 775.570624] ? do_syscall_64+0x53/0x640 [ 775.574592] ? move_addr_to_kernel+0x60/0x60 [ 775.579005] do_syscall_64+0x1e8/0x640 [ 775.582937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 775.587782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 775.592961] RIP: 0033:0x45a679 [ 775.596137] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 775.603835] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 775.611097] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 775.618358] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 775.625627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 775.632883] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 [ 777.190155] net_ratelimit: 19 callbacks suppressed [ 777.190161] protocol 88fb is buggy, dev hsr_slave_0 [ 777.200195] protocol 88fb is buggy, dev hsr_slave_1 [ 777.350147] protocol 88fb is buggy, dev hsr_slave_0 [ 777.355266] protocol 88fb is buggy, dev hsr_slave_1 [ 777.510135] protocol 88fb is buggy, dev hsr_slave_0 [ 777.515276] protocol 88fb is buggy, dev hsr_slave_1 [ 777.520419] protocol 88fb is buggy, dev hsr_slave_0 [ 777.525465] protocol 88fb is buggy, dev hsr_slave_1 05:22:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$KDDISABIO(r1, 0x4b37) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2c6a47) r4 = dup3(r3, r0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000400)={0x3, 0x1, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r9}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {0x0, r9, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x81, 0x5, "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", 0x6, 0x2, 0x8, 0x40, 0x20, 0x3f, 0x4, 0x1}, r9}}, 0x120) 05:22:08 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0b") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:08 executing program 2 (fault-call:1 fault-nth:8): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/207, &(0x7f0000000180)=0xcf) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000300)={0xff, 0xffffffe1, 0x9, 0x19d829d0f9217f5d, 0x285}) [ 777.898088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 777.913851] FAULT_INJECTION: forcing a failure. [ 777.913851] name failslab, interval 1, probability 0, space 0, times 0 [ 777.920119] protocol 88fb is buggy, dev hsr_slave_0 [ 777.930219] protocol 88fb is buggy, dev hsr_slave_1 [ 777.942695] CPU: 0 PID: 28198 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 777.950626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.959999] Call Trace: [ 777.962599] dump_stack+0x142/0x197 [ 777.966230] should_fail.cold+0x10f/0x159 [ 777.970377] should_failslab+0xdb/0x130 [ 777.974404] kmem_cache_alloc_trace+0x2e9/0x790 [ 777.979087] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 777.984609] selinux_sk_alloc_security+0x5a/0x190 [ 777.989452] security_sk_alloc+0x7d/0xb0 [ 777.993508] sk_prot_alloc+0x190/0x2a0 [ 777.997393] ? security_capable+0x8e/0xc0 [ 778.001541] sk_alloc+0x39/0xd70 [ 778.004896] ? ns_capable_common+0x12c/0x160 [ 778.009362] caif_create+0xdd/0x4b0 [ 778.012984] __sock_create+0x2f6/0x620 [ 778.016865] SyS_socket+0xd3/0x170 [ 778.020431] ? move_addr_to_kernel+0x60/0x60 [ 778.024825] ? do_syscall_64+0x53/0x640 [ 778.028787] ? move_addr_to_kernel+0x60/0x60 [ 778.033191] do_syscall_64+0x1e8/0x640 [ 778.037105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 778.041946] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 778.047138] RIP: 0033:0x45a679 [ 778.050314] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 778.058011] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 778.065266] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 778.072536] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 778.079796] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 778.087072] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 05:22:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0xef037903cd597dfa, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000500), &(0x7f0000000540)=0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x7fffffff, @rand_addr="bba24e6f20cbadf318a55318857074b5", 0x1}, 0x1c) 05:22:08 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0b") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:08 executing program 2 (fault-call:1 fault-nth:9): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 778.156175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 778.232174] FAULT_INJECTION: forcing a failure. [ 778.232174] name failslab, interval 1, probability 0, space 0, times 0 [ 778.243833] CPU: 0 PID: 28216 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 778.251731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.261092] Call Trace: [ 778.263675] dump_stack+0x142/0x197 [ 778.267385] should_fail.cold+0x10f/0x159 [ 778.271544] ? ebitmap_cpy+0xcd/0x270 [ 778.271570] should_failslab+0xdb/0x130 05:22:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000"/54, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x120000, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x5) [ 778.271587] kmem_cache_alloc+0x47/0x780 [ 778.271612] ebitmap_cpy+0xcd/0x270 [ 778.279365] ? hashtab_search+0x196/0x230 [ 778.279387] mls_compute_sid+0x22f/0xd60 [ 778.295256] ? mls_convert_context+0x6a0/0x6a0 [ 778.299877] security_compute_sid.part.0+0xa8f/0x10f0 [ 778.305098] ? compute_sid_handle_invalid_context+0x270/0x270 [ 778.310999] ? perf_trace_run_bpf_submit+0x113/0x170 [ 778.316128] ? perf_trace_lock+0x30d/0x500 [ 778.320373] ? perf_trace_lock+0x30d/0x500 [ 778.324622] ? release_sock+0x14a/0x1b0 05:22:08 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000140)={0xfffffffe, 0x5, 0x21, 0x6, 0xa7, 0x7}) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) setpgid(0xffffffffffffffff, r5) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x100, 0x0) [ 778.328628] security_transition_sid+0xd6/0x130 [ 778.333332] selinux_socket_post_create+0x559/0x680 [ 778.338373] ? selinux_sb_copy_data+0x390/0x390 [ 778.343065] security_socket_post_create+0x8b/0xc0 [ 778.348018] __sock_create+0x4a1/0x620 [ 778.350201] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 778.351926] SyS_socket+0xd3/0x170 [ 778.351947] ? move_addr_to_kernel+0x60/0x60 [ 778.351960] ? do_syscall_64+0x53/0x640 [ 778.351978] ? move_addr_to_kernel+0x60/0x60 [ 778.376882] do_syscall_64+0x1e8/0x640 05:22:08 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 778.380780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 778.385654] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 778.390853] RIP: 0033:0x45a679 [ 778.394050] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 778.401778] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 778.409064] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 778.416335] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 778.416343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 05:22:08 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 778.416350] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 05:22:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:11 executing program 2 (fault-call:1 fault-nth:10): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:11 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b30") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 780.896509] FAULT_INJECTION: forcing a failure. [ 780.896509] name failslab, interval 1, probability 0, space 0, times 0 [ 780.907863] CPU: 0 PID: 28237 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 780.913124] nla_parse: 3 callbacks suppressed [ 780.913130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 780.915773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.915781] Call Trace: [ 780.915804] dump_stack+0x142/0x197 [ 780.915829] should_fail.cold+0x10f/0x159 [ 780.948723] ? ebitmap_cpy+0xcd/0x270 [ 780.952560] should_failslab+0xdb/0x130 [ 780.956582] kmem_cache_alloc+0x47/0x780 [ 780.960671] ebitmap_cpy+0xcd/0x270 [ 780.964308] ? hashtab_search+0x196/0x230 [ 780.968482] mls_compute_sid+0x22f/0xd60 [ 780.972567] ? mls_convert_context+0x6a0/0x6a0 [ 780.977187] security_compute_sid.part.0+0xa8f/0x10f0 [ 780.982410] ? compute_sid_handle_invalid_context+0x270/0x270 [ 780.988315] ? perf_trace_run_bpf_submit+0x113/0x170 [ 780.993448] ? perf_trace_lock+0x30d/0x500 [ 780.997696] ? perf_trace_lock+0x30d/0x500 [ 781.001958] ? release_sock+0x14a/0x1b0 [ 781.005958] security_transition_sid+0xd6/0x130 [ 781.010655] selinux_socket_post_create+0x559/0x680 [ 781.015694] ? selinux_sb_copy_data+0x390/0x390 [ 781.020394] security_socket_post_create+0x8b/0xc0 [ 781.025333] __sock_create+0x4a1/0x620 [ 781.029252] SyS_socket+0xd3/0x170 [ 781.032813] ? move_addr_to_kernel+0x60/0x60 [ 781.037239] ? do_syscall_64+0x53/0x640 [ 781.041231] ? move_addr_to_kernel+0x60/0x60 05:22:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 05:22:11 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7ff}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20000, 0x0) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x1f, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000040000000001) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x7f, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc06e}}, 0xea3, 0x9, 0xffff, 0xffff, 0x10000}, &(0x7f0000000280)=0x98) ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f0000000000)={0xf}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r11, 0x4000000000000002) r13 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$KVM_X86_SET_MCE(r13, 0x4040ae9e, &(0x7f0000000180)={0x2280000000000000, 0x2, 0x80000001, 0x8, 0x9}) dup3(r12, r10, 0x0) ioctl$TIOCGPGRP(r12, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r14, &(0x7f0000000100)='net/bnep\x00') ioctl$TCSETS(r2, 0x40045431, &(0x7f00000003c0)={0x0, 0xfffffffd}) r15 = syz_open_pts(r2, 0x0) dup3(r15, r1, 0x0) 05:22:11 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b30") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 781.045658] do_syscall_64+0x1e8/0x640 [ 781.049557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 781.054432] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 781.059625] RIP: 0033:0x45a679 [ 781.062816] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 781.070544] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 781.077831] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 781.085116] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 05:22:11 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b30") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 781.092391] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 781.092399] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 [ 781.125545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 781.194077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:22:11 executing program 2 (fault-call:1 fault-nth:11): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:11 executing program 1: socket$inet(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$FUSE_STATFS(r4, &(0x7f0000000300)={0x60, 0x0, 0x3, {{0x8c4, 0x80, 0x8, 0x5, 0x200, 0x4e, 0x4, 0x6}}}, 0x60) accept4$rose(r3, &(0x7f0000000140)=@short={0xb, @dev, @remote, 0x1, @null}, &(0x7f0000000180)=0x1c, 0x800) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x80000000, @empty, 0x1}}, 0x0, 0x3, 0x0, "d31431db1b0425a6a734dd5669a226fa441e124b652ad5470b854a314ec1b933d879d00d42f3ca370a38f9c63e68944b941222aa5b36f52a46b465f6d7c66b807b8a37b29f1391e184be8bcdd2a3ab4b"}, 0xd8) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x34}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r0) keyctl$revoke(0x3, r0) r1 = add_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="ebc35346b878b2348de95076599cbf270bc6a89912be10b222c256838873f782ababe535dbd4b18c040a6308b019c600449e1f3f57ca4c13b8a719e50df1e20d620e4b2dacc9c72a9be820dcf805ce792d9ffe0dab336a4ce2633bb5a376b8ad77769f30b18879ad4d85b480a2c3facd645f98d60401bdb54f07415e25899b4086e23cafed0d09c4d707f428de11663da2c0603820cf1157dc7667a22b71204addc56124aa9f2f1c7b5485951493b91977f6ef9fe5e8ea732587c6427ae7b1376960b49af6ade3e4c61f9488a79ed52265d63eb7a9147e3cb3fa55eca973c5f453846110788fbb41e0c5e7e1e809485ccc7ac31d2d99bc3f082cda058223139cc87805cd4337807ba54c1055377400a096a2ce721fecb20e1b0f134f3a05df6d6051cae3640164ef17c0a89ff5de7d4f4624bc44097949f14c8c9267135169bb952043264f47fecb4f9204ee555d06d917501b8e8f9de9c5496cd44e16945c4d806181b9ccf8c0cc99347fde52afafe13bbcac89869c9b210690f37137df12b14f8dc48cf54b9fbfc1c086214b98d5cf6b37d425fc40bdb4db0c4f40a903ed7282842dcf200e9f428889b5d37966aba66e542605ab3ef57962ad3b3fd300c56eff3cd6c8f05e0a0478fe0133d5bc38f66dc5a6b05706b30e8f35f65f0e61871ff08e65f19c481bbde4aee91b599c2404091c0d835551809c9381b3b5cdf78af2faba1a316acf4151fbcf48d436da2eef160f347a5bb1c1090417d1eba16c0ea05504d0d4a109490137c164850aa29fe7ef0e8aac644dd7dbaf45043c8775c61939789e78e7b6213c0d3505ae0338987180b0cfd5f64b6d074f4bd55c33b8c3f29d6b96d40642d276af99e32dead5bb671329fa9377ddaae38ff0b707524a315a8d21f1875d38289f2b6a99a38afedf57506fcd1b57425e5866daa693122ea638deb76580efc36a589dfce84746787d1a118192d9038b5b82a6c33e58493214221d0e84d88d24eb42fe172dde02cdcd29ce9712dacaae135a0bb95d26bd70fdbed9aa7593be60ca8a16845dd570759e2ae050c685c0ad9ff7344c51148c79e602c96b40b723856efbf11816c748861001e8e959001a544266d9c212c3bce7119850cbaa2a283f95872898a07989778e737793bb7ae91f45fdfc8cae0ef8d097f26c501f023c208eb7a19727ec46d0d19293fd95cb12a4f52968e73b87d117d560ea867e130d77c712535fa10dd1335859946bddb6c1b950ed86c3e91d32ca431cb9dd0c5f95dcccc1a3378fade6cf99777f4965fb01a72a752cbed1acf4f3b9757893961c62560daeeb6ac8fbf01908bd88fa45f51dd989b3c5714affdba2c6fd7c933a5fd2c357f5b626a29107f91450dfc9970b752845f2d3f18865bd157f1db792240826696dd41b91dba8be924069f6adcf72d47b15a59765c507d85de721af0e1fe79460f02880e91fca7b37205456f070ecf518fed0a82c57eac70df5103ebeb1495e2559bb65daf6e77ff5de7e5ef77b0231db4d24bc1ef8afda11977e02dc8558c204dd2aabe5a808aa1cd4a10f79d47554bcbc2239554cf4e4d1c3cc4cae2fff9b53f6f1f8b1bc71620007ec701e00dac4ce80cc2a254b4279e0d4ad5e653f7fbf0abb88afeb48f3c0d1b1332a438a71ac6cb87c07a8731622ace8d3f01ec24db122e337ab316dd5e58d653a2548698c68d05d5cf9c1c7fcb4b40ba5291ece4b37ef50394da89e34d4960ad9277727b23c7ca6e6e56d2ef4db3954a172d051f4439ec7715d6c9413639d6dcf8d84ae7b4b85c2d3aec125edd764ca1e205b2dbf353ed4b3a280ad0b7f5578f9a241e72272f0e396ecbf4269fd905a3d62dbc9fd10e15afce7d60b5ab89536c4a751997bf7717f6575c201b3577cb3b729d38a3962fb6664a919f36824793c77cec862460562fc1176fcfa3581901f9d0c5031f7fbc2b8ae3a4f1c957bf4d3acb5a5ae4954debacfb30a747859739858b71a4928195955a865cb9ed5b907544b411adf289e0407b7145ef940c358c41e834a46c6913b2459132e95bae7f43e7cd085ead5f2a74c4c1ee7b93eedbbed4fc1a45b77042fe3b1bc9acf98300c0ea01007d48f0588ddd6fc36c6d1fe18b2c3b734d6bc8e093e4a1e741a14c475b1d4ebd8cc529b6d14f4302e1989071d13e66323a011d25833ae3e77bd1607df22521865504b98bff29924ec7f88ae4553f48cdca0bae6cae599bc8e51496312e13906fae73e2656d42eee703cc96f37b2ee57cb5ac0e565459af7506bbf4697e5a965f8455fb578a1fdca6e20ccc60c9aec86eeaff6a6f58a7dfb96c7766da1e5768d7d3c2610fa9360db923ae4a27104116a66ef0d6eae9920aaa9f1f36d37f2f64f331d7a04677e12c75d7a78e750865628c772a22d7b2eb29dbd66a45d97f9d49858c09a834e5e5daf5f23798baac08b2a00858529e99844fdda581b3ff5a75e6dc17e204684fb0ed608dc487804b96c055086949ac0108cc1442a87a3b04bdd0742a58328468546f2928b3dc0ad48a1f2ae267d757fa5bf259d04fe166c58382ecdb008e22fb52c6f057371cb12844c71e7b1883be8f84042c320541fb81f7b6cb38fdd368db1cb07ea832c83b7b3540a57ee2bdceec7319a83839f67dd073f720547a545a838f45c1c3e422411b5050592b77b9e892b437d777aa0223f053d2d6e1122e68a8b763d3dffc407c7de4852577b4d086af77a37e6ecf279d935ac6304e2e77eee130fe2ab5d497021ef1bcada6c80756acb272cbbc69ff223c8551e8a0d77042a8da5af98f2e7357d350624c94fbc5d3bfc98adcbf49e6d5f567631d94ada63e3b94c4f7253b18ed84d5e79b6ea97799c2c61d974dd9650cd50fb86e5782599a17725eabb85eddf68cecf284d0836be4da09874884c7232ff291926dc831824c1ccc3a6dfdcf1b904bb19dd8a44b438c5e072c73f9ea37ed9b395534676b61118bef47608941f6cd27cd7af426f1de675d8cf3f22fe47a1348b9f2cd6aa8a98f1e2f860b30c8abc7ac36a62131719fe7856766b1a3345224664ce6b55de503a9023502ffd0028e57634911acd28f8eccc2347058e8763d6e901e5423995a1a3dc98e5ea73af5c2a2cc78c78bdc4c74cc4890a5f4e6ba3e056ca5414103921f8176896954d878cab8d0f4e44ce81b46c8fa7883b770f5f891bf3c38361f05fb6f09bd72be8b097107271c1dc21e6b888fd0363f64166c0e981cf9c929631eefef8aef4be53edc4e7d72378c2f888a6a0c75415e25060e385d83c6727e9e78b851dab4ff89801d81df28a5419ac62ac01bd06ca9efffa1be6616229da5baa8b3834d4b67ba38716a83746b9e5dada117622a48039a08f38cfb8b0831955c598646cbbcb61ca5fbff4ead57d4e52541f093db0089564b223f615b3f237121cf949b4a5c67bdf8cfe58a693d5b51cde193832d06513505120e105f1a045a9ab5f859d972b3188ba0a1a8a3d0b3d3064728f6b0e33686e121739316b3a92c063096f84b8e6279d918fb4965cd0e7cc8cd7ab245ae60e0fedaaccb0ca3dbc55f1673ef805e4c53b3c17276863451afeaef9caad6bd3be18db2a71451ed4c6bf0865a79c0ce60f538ad7e2d99c9a77fe16a659ca1fdaaf84f2dfe7af2c4103d0708cd02d6d04aed4389560bbde603077a545c681b6591bed366f377468bc2e6386c590ba0a563cf1b089f333c0dbe0c5f324276595ad2b583ad8e3f833cc9e5eff73b2ee478e3bbe8e6ea09e88d9d0218c84e605053053ad3d91be1e04fc5ad26b79e0d50157e771556c28b22e907c7cc754bf29276c0519830ad80b3ce61c2bd3ef31f727476ea86fbef35ddca1e2b4c791d45e6dd74d30cf5c3ea62a6ae2e7bafd6372636ee775f8cf91fd9cce4eaad96182c6fb24005ae2b3d61864c726c51cc768cf748ae30e38d3200042e40be44edd34623f0a734c9e1300284da67fb0a052d5639356466e74065639d296928a87552930a66b347af66b2dad2eb0aab0200fbdc160b52737119e6cf7fe71108484dd1c77b6a97bbd34c1b1547e62c221d75c356259e141cc8447e1a83645dd141c0fc3941e0097a2b29a0ac2d0527111b4f21dd6595401181c21af0771f5c526049f3b07042adf9ba21447dc05b0c3b8ad11a19155fec854865b8449731da9bc7f6d36e79fa056e18c3ccd8adc08eb2708ff8993e0a2108d302b421ec421c0f63c4a11d67760e8fee13e76a4e0f5f6a84d2bfe8f29cea2adefc447142478bd3706c43b147af8d29a99efe444efd4e16aa32315278c77048d593b5969ee19e404de55fa393588da342f19d812a0878eb644d47bcc8d71922e57b99d3e348bd6e3232fbde497fcc45985ae37c2736557f594f7dae217ce09c50aab018a7d157d3788cc3418a86fc515e2dd4e3735bac701ebc3d5215c7be4b7d55b2914999960701aa209a03517f91df6f68c007dfc05e579c4abcf7b2e5322799473a75d475188b80dbd3db009d8f4f704d1dc4974c536b3d4cda80bb2ff173103d0263d362868fd739357eb71ebffc3bdcfed05a1812f820f28413ddb92076b80708e66bccedf4c2f641e410bfa4a65142375eb637fbf6aef385964b31f776d81dcff7eb116822d333103c07c7cdf3faee34b117e4b29b0e7993d6c626a2806c1a213d56c51a8bf634c3c9492908797314695500b45b8f3104c2181a33149f22376b4b3833c55481832e8a3daa2628b965fc8a8177291e187a221527f71bd2917acd491c10f305617bdd5071728ec78e1c46652a3db99fef19ba8a28b7dfee802de911b409f15df2025142cd0c883cad58477ba184a00c2f0069cf67c866e234c2f5f970f878c3ba3f5523bafa84a8ea741a15807f8719875cf1ef3d840ea9264fccf4d59f84a13cf4c8352867033d8e2574e88ff5800c433d6ec392d3d7046a5660633e2b69e3f45a44741d57e45a2764341e0d8ce82d16a05bd734323166c151c946bb18a845fa6f63d83444fc28cb45ee2af416ac493cec5870188d1023bc3f75669ba3bca96e7ce39dec344f765d44c7e1cc19459a848f62ddea41fc1b3d9500bb71002820204e6c48269a2128869c757aaa92b8a8146a85bb745879126d2aa8441664e79561d9c1c1a25190bad0e5b9ba8722cb3546c3f4a4c0ca58227d24bb37f36a7baeef82ad1317cc0ad17c0157e19aaf6e3e95becb286bffe1f3d6814b80291fc6d3080d49e98bbd50b1c5b0fa3c4ee051c8315860c204575b3f69031bfb7d53f803ecc8e778db8ed22c7e19b318a145be40de8f1a9ff363e458f02f7f1e8e87072a2ced30b04334a3466d3a5e30338c82f62ea151f7595f7f8da161da088316086908ea7b6c74b371b1b3df1650831e73d592d4f02f0825b80c55cda9b18d7aa68372726b0f8ed8894c00bb1fcf8ebeabedabf280c1570caaf77d562b23beaa0e1880c673838d9ef85d6d64f3c6e37d06c723b5d4b77a1e00f9365684509c12c58beb34a68d83325c63f091dbc028c8ffe60f05a087f844e20cc4f213108f91beb16a0a9d3dcdd933cb46e689bbec5ee9bca3b1aab7562c6b2d08e75c80256ff3efc1b448f8d282289b59c30bdcf7523def4d2a1271d0a78ff23c92fa065d41f5c3340eb8d244931ee94baf68362936f3d71da7430030ab7d625a673b771292a3b0432fd1e79c7ba081b137ab20932e93363a96bca878ba16e8095323cf38ac403d3573d50cf1edf869f1cb876a881a3f8fc5fac9a8f0735ca7f170d3fbe017bfb0da6b1a18960b634631daa629b70d76e9b0e1360de365dce392611e4dfae", 0x1000, 0xfffffffffffffffd) keyctl$negate(0xd, r0, 0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/zero\x00', 0x20000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000001400)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r5 = syz_open_pts(r3, 0x4000000000000002) dup3(r5, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001300)={0x40, 0x3, 0xaebf57a8192faf1a}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5e}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={[], [], @rand_addr=0x2}, {}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60}}, 0xf0}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getpeername$inet6(r7, &(0x7f0000001340)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001380)=0x1c) [ 781.406921] FAULT_INJECTION: forcing a failure. [ 781.406921] name failslab, interval 1, probability 0, space 0, times 0 [ 781.427169] CPU: 1 PID: 28263 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 781.435111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.444473] Call Trace: [ 781.447083] dump_stack+0x142/0x197 [ 781.450728] should_fail.cold+0x10f/0x159 [ 781.454880] should_failslab+0xdb/0x130 [ 781.458854] kmem_cache_alloc+0x2d7/0x780 [ 781.462991] __d_alloc+0x2d/0x9f0 [ 781.466429] d_alloc_pseudo+0x1e/0x30 [ 781.470283] sock_alloc_file+0xd5/0x2f0 [ 781.474250] ? sock_poll+0x220/0x220 [ 781.477960] sock_map_fd+0x36/0x80 [ 781.481490] SyS_socket+0xf1/0x170 [ 781.485037] ? move_addr_to_kernel+0x60/0x60 [ 781.489433] ? do_syscall_64+0x53/0x640 [ 781.493411] ? move_addr_to_kernel+0x60/0x60 [ 781.497833] do_syscall_64+0x1e8/0x640 [ 781.501719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 781.506554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 781.511728] RIP: 0033:0x45a679 [ 781.514899] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 781.522589] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 781.529850] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 781.537115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 781.544367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 05:22:11 executing program 1: socket$inet(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:22:11 executing program 1: socket$inet(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 781.551619] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 05:22:11 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, 0x0, 0x0) 05:22:11 executing program 2 (fault-call:1 fault-nth:12): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 781.686320] FAULT_INJECTION: forcing a failure. [ 781.686320] name failslab, interval 1, probability 0, space 0, times 0 [ 781.706405] CPU: 0 PID: 28286 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 781.714341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.723737] Call Trace: [ 781.726352] dump_stack+0x142/0x197 [ 781.730018] should_fail.cold+0x10f/0x159 [ 781.734199] should_failslab+0xdb/0x130 [ 781.738193] kmem_cache_alloc+0x2d7/0x780 [ 781.742368] ? lock_downgrade+0x740/0x740 [ 781.746592] get_empty_filp+0x8c/0x3f0 [ 781.750499] alloc_file+0x23/0x440 [ 781.754068] sock_alloc_file+0x11c/0x2f0 [ 781.758234] ? sock_poll+0x220/0x220 [ 781.761973] sock_map_fd+0x36/0x80 [ 781.765630] SyS_socket+0xf1/0x170 [ 781.769166] ? move_addr_to_kernel+0x60/0x60 [ 781.773567] ? do_syscall_64+0x53/0x640 [ 781.777541] ? move_addr_to_kernel+0x60/0x60 [ 781.781973] do_syscall_64+0x1e8/0x640 [ 781.785869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 781.790724] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 781.795914] RIP: 0033:0x45a679 [ 781.799113] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 781.806822] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 781.814091] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 781.821365] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 781.828642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 781.835905] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 [ 782.390144] net_ratelimit: 24 callbacks suppressed [ 782.390148] protocol 88fb is buggy, dev hsr_slave_0 [ 782.400211] protocol 88fb is buggy, dev hsr_slave_1 [ 783.430178] protocol 88fb is buggy, dev hsr_slave_0 [ 783.435408] protocol 88fb is buggy, dev hsr_slave_1 [ 783.590119] protocol 88fb is buggy, dev hsr_slave_0 [ 783.595315] protocol 88fb is buggy, dev hsr_slave_1 [ 783.750141] protocol 88fb is buggy, dev hsr_slave_0 [ 783.755283] protocol 88fb is buggy, dev hsr_slave_1 [ 783.760496] protocol 88fb is buggy, dev hsr_slave_0 [ 783.765546] protocol 88fb is buggy, dev hsr_slave_1 05:22:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380100001000110700000000000000d2b2436cd9f15dcc0000000000000000000000000000000001000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:14 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, 0x0, 0x0) 05:22:14 executing program 2 (fault-call:1 fault-nth:13): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="77b8d85e386819971a70419e234b020cb6699a81dc3a9857b109fd5d21c4d7", 0x1f, 0x8000, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0xfffffdfc, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x5}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:14 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, 0x0, 0x0) [ 784.185234] FAULT_INJECTION: forcing a failure. [ 784.185234] name failslab, interval 1, probability 0, space 0, times 0 [ 784.213445] CPU: 1 PID: 28296 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 784.221367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.230718] Call Trace: 05:22:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) [ 784.230738] dump_stack+0x142/0x197 [ 784.230758] should_fail.cold+0x10f/0x159 [ 784.230775] should_failslab+0xdb/0x130 [ 784.230784] kmem_cache_alloc+0x2d7/0x780 [ 784.230795] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 784.230807] ? check_preemption_disabled+0x3c/0x250 [ 784.230824] selinux_file_alloc_security+0xb4/0x190 [ 784.230840] security_file_alloc+0x6d/0xa0 [ 784.230852] get_empty_filp+0x162/0x3f0 [ 784.230863] alloc_file+0x23/0x440 [ 784.230879] sock_alloc_file+0x11c/0x2f0 [ 784.230888] ? sock_poll+0x220/0x220 [ 784.230905] sock_map_fd+0x36/0x80 [ 784.230916] SyS_socket+0xf1/0x170 [ 784.230930] ? move_addr_to_kernel+0x60/0x60 [ 784.230939] ? do_syscall_64+0x53/0x640 [ 784.230950] ? move_addr_to_kernel+0x60/0x60 [ 784.230960] do_syscall_64+0x1e8/0x640 [ 784.230969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 784.230985] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 784.230993] RIP: 0033:0x45a679 [ 784.230998] RSP: 002b:00007f7f1a12ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 784.231010] RAX: ffffffffffffffda RBX: 00007f7f1a12ec90 RCX: 000000000045a679 [ 784.231016] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000025 [ 784.231022] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 784.231030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f1a12f6d4 [ 784.231036] R13: 00000000004ca336 R14: 00000000004e3190 R15: 0000000000000004 05:22:14 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:22:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@local, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xda7f585445a73b3e) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000002000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) 05:22:14 executing program 2 (fault-call:1 fault-nth:14): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:14 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:22:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x3, 0x33, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:14 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:22:14 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380), 0x0) 05:22:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x717, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffc}, {@in6=@empty, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x0, 0x1000}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) 05:22:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380), 0x0) 05:22:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380), 0x0) 05:22:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 05:22:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 05:22:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYBLOB="9a0081702b257db334c8bf33ba9930f00aa4cd53d284432d908727b1b9104c3b91176e658020111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f338315039e62997f912167d4079af52c5c26084aa28ca7ca427569d27bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9ad1fa57767cd0519d4b76847a56c105cf0deae69b3aac3ad5561ca8a07a296a0342534de3ef95c1331dab532ebaeba16808b78156eca34e1465c21762"], 0x2, 0x2) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000780)=[0xee01, r4, r3]) r6 = getgid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r10, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r9, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r11, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503de62997f912167d4089af57bd2ae483410ca6953671e5cbf47e7a5adff290ada694a9dc4bb9ad1fa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc74"], 0x2, 0x2) r12 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r13 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r13, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_SIOCDELDLCI(r13, 0x8981, &(0x7f0000000340)={'bond_slave_1\x00', 0x8}) r14 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r15, 0x40045431, &(0x7f00003b9fdc)) r16 = syz_open_pts(r15, 0x4000000000000002) dup3(r16, r14, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r14, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r17 = syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') sendmsg$FOU_CMD_DEL(r14, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x44800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r17, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x14}}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2b}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2c008881) getsockopt$ax25_int(r12, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getgroups(0x6, &(0x7f0000000280)=[r5, r6, r7, r8, r11, r18]) 05:22:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 05:22:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x102) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r3}, 0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r4, 0xffffffc1}, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1}, 0x0) 05:22:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0xa05, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x5}}, 0x20}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000600)={0x0, @rc={0x1f, {0x81, 0x2, 0x5, 0x6, 0x8, 0x22}, 0x9}, @xdp={0x2c, 0x9, 0x0, 0x24}, @llc={0x1a, 0x103, 0x8, 0x7f, 0x6, 0x3f}, 0x9d, 0x0, 0x0, 0x0, 0xfff9, &(0x7f00000005c0)='vlan0\x00', 0x1, 0x0, 0x5}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002f40)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000003040)=0xe8) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc)) r13 = syz_open_pts(r12, 0x4000000000000002) dup3(r13, r11, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r11, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000003080)={0x0, @initdev, @multicast2}, &(0x7f00000030c0)=0xc) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r18, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003100)={'vxcan1\x00', r18}) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r21 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r21, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r22, 0x5}}, 0x20}}, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r24 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r24, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r25, 0x5}}, 0x20}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003140)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000003240)=0xe8) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r28, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r30, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r27, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r30}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r31 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r31, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r32 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r32, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r33, 0x5}}, 0x20}}, 0x0) r34 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r35 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r35, 0x40045431, &(0x7f00003b9fdc)) r36 = syz_open_pts(r35, 0x4000000000000002) dup3(r36, r34, 0x0) ioctl$TIOCSETD(r34, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r34, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockname$packet(r34, &(0x7f0000003280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000032c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000004780)={@dev, @loopback, 0x0}, &(0x7f00000047c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000004d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x61c837608fed56}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004800)={0x4c0, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r10}, {0x214, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8f}}}]}}, {{0x8, 0x1, r30}, {0x1c0, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x28f752b3}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r37}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r38}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffe1}}}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x70bd2a, 0x0, {{@in6=@dev, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6, 0x4, 0x33}, @in6=@local, {0x0, 0x0, 0x4}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}}, 0xffffffbf}, 0x1, 0x0, 0x0, 0x800}, 0x40008) 05:22:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1}, 0x0) 05:22:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1}, 0x0) [ 785.422291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 785.481144] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 787.590171] net_ratelimit: 16 callbacks suppressed [ 787.590177] protocol 88fb is buggy, dev hsr_slave_0 [ 787.600296] protocol 88fb is buggy, dev hsr_slave_1 05:22:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2800, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0xe3f56bd247b239a2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x20040400) 05:22:17 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f0000402428080008000440040012002800", 0x26}], 0x1}, 0x0) 05:22:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000003ec0)='/dev/cec#\x00', 0x3, 0x2) poll(&(0x7f0000003f40)=[{r0}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x180, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000400)={r5, 0x5, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r5, 0x7}) dup3(0xffffffffffffffff, r1, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000100)='ppp1vmnet1$.[\x00', &(0x7f0000000140)) 05:22:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendmmsg$nfc_llcp(r0, &(0x7f00000031c0)=[{&(0x7f0000000380)={0x27, 0x0, 0x0, 0x4, 0x1, 0x8, "bb254c1f3126e4ccb6843bfe6e3cde6372541a010013c614e61f5de9e9668af116b9618e3debc6144c2c73076081dba17691553bc5cac5461987237ee1717f", 0x35}, 0x60, &(0x7f0000000480)=[{&(0x7f0000000400)="e96145419cded136ebe30095dc922ee6995fad43435900ef971e0eaf0131ff7cd1d22f7ef5d8e0370f5728953470c70f33171fec426713ba6b765c7996ba133f2d775a497642259c5aa130f1264a2f3a0996115b87396d633820855476ad503b9ba63aaeb39c9689227ee4fe9ad5b677f6388504f2c8457b", 0x78}], 0x1, &(0x7f00000004c0)={0x80, 0x0, 0x8843, "30d7af8db528efab568caa310aa38411f8b9ea013df8b85163e44a3d184843f8fb89c52028ac181124be2a3d5be84d56fb021826e6b9c6fc24e1cd699a0ff07821a6970d3ffa370377d38758117aa564546dae4ab247e64e4433d8308dfe1f265ba8587bbbaaa666ba794f2620dfcd"}, 0x80, 0x8800}, {&(0x7f0000000540)={0x27, 0x1, 0x2, 0x4, 0x1, 0x1, "22e0b7f21276dd5546d5b4062e960dd76ebd1f9910ebd33abe381e36c9e666aacc436b98769424f1f440bfbf7fe17fe81b9ba16c063c02f8d7f3614fda1302", 0x1f}, 0x60, &(0x7f0000000740)=[{&(0x7f00000005c0)="b6b830", 0x3}, {&(0x7f0000000600)="9c0d6f3520544cc3bab6bf423d18b059799085775963a7e234a30784e147a765cd45ff3b56a2b2bfc0367c11713fd1eb0a48b4fd07f3504979000da011e7eb4900ad542c5967a9a866c1382f99facd8039b4ce757ace330fb756adcaae4fb83a1ab0f42d4a092c6308e2417138132058713819b930a133371ecb82ecaf32b13df9c6789560156c70e41e3a3887b42cf3d35c46ac1456cb39be52bcd38c", 0x9d}, {&(0x7f00000006c0)="183b2e3fc19cdf7405233ef9f975e36ca2b3cba9c487ca3872982643195c37896ba909ccd76b93329cc8535a0a1537f099c010a1400f0088fe654f5109e48c3ec2808d7e7d70db9f3d6259f7cae1", 0x4e}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="780000000000000088000000f08d00002d1ff599868887e51fa965be03338a03085c9274eea744777de2f82b7dce7555379d9ce1a440e2d0c02078eeb646b258a2f1db106a9c95f7d3a3e60b53b71b08502c7243b617352778a4c02651483bb7229afd9c44de4fd74ba8423c77af25d27fd1000000000000"], 0x78, 0x800}, {&(0x7f0000000800)={0x27, 0x0, 0x0, 0x1, 0x7, 0x5, "b2ea8c35741683d450937cee5541097190eadb8d9991364b5d45de6a4fbba99da7176ff1207819b9f86e068ce8282ca7606833ecb3ff5a4170ccfc3b7d1d59", 0x7}, 0x60, &(0x7f0000000d00)=[{&(0x7f0000000880)="3467176ac8302780c30eed466fba1584645d10788da19593a565fb8fd802bda1068db1dcf60a2ccb913327b220d16cfaa67eb68d2ac3074d927cacf3b0f00fd043e412080f64decebad4b09455", 0x4d}, {&(0x7f0000000900)="c127f6a260c1e202b09c18c111e3794298a3361276c932d61080dff7cf362ecdf4445de24d6d946ceb35f2c11f6936f8ba90b30c337d282f8c05a876de81211954bea76cd264339b9b065e027eb5c7d62cf962f87953ad4b53d2a995cb6e0b1e946de27d189b0610e17af19542422c98b0c89b1711c41e0233053582b695bc3cdd7c9caa6d62d83993414ed1c0d0462ac5181e1d31246cda262748cd43c808b1a9213ddd5576b18ccc3ccef570935591246d7397d78ad1316953e06ea62ea6398a2e2d90ff294693f1a82c287ff66e417737ba5724a2f860cc64b7b863653be1ef1fc8e01bb7a70b3f965765ac1a474f6749328136ee4ad1", 0xf8}, {&(0x7f0000000a00)="d336c94c465aae8d1cd4e7cf7100569c04ef5f26", 0x14}, {&(0x7f0000000a40)="e80644a1d0e28baf0267131bc805815a23c391f33a0e764ee239ef9a175c2a2dc49b2075538dd9ba297081cdcb6418af293a95ba6348d9f2c4aba968852a76e733951416dcb17d9432dcd0f40aff74c8da06385b246e6ccbc160db", 0x5b}, {&(0x7f0000000ac0)="0f707e4d19ae93d9b4c785574c5d4b7cc5230b522f46ec96a7f32b86caf24cded6db19e088bd3a23e1d67ec581e6a3c5fc381a1967d5950be1b46dd491b9f7a84d26fe8341b4976a46e56da0e2375813e3888231c289745d66dd6a6442f7c22328df6f37018f1321218a3a6374dc3b4dacc6f363f5ccba6752ecdcd1715bd3426ed847f4877b20dbf7f396b1a71de6438be5668bb1342180e671bf9247be1681ad7119564cfc689380ed9d0bbe", 0xad}, {&(0x7f0000000b80)="9ff9d376a7d9347647863edb69d1bccf9233371acebdbecb419d01030a5b95bddbe0bbef5e27c2e50a86aed960919d0e492ab8389e73881d1c898619bcb36146516c899457f6188d4e955643c04937a3a2aadb51d06b3235ee4bc391960a4bbbf16d53cbbaad1b7e0fa788a4c08356050c79303ed05776789c4f6a0a08ec0ba19c7e48eb45bc58d62a40", 0x8a}, {&(0x7f0000000c40)="49bdcfbe5e30936d1521e8dd8b4938439dd78c1630a3171f47c578e4377ab0e30ed009db7f9f93f5e18ca7629c6021f9fe33a0a0c489dd9ad9c9a6636f5cfb34ba070166cbe3248862a7e08f9aba2099790c7c63acb59d6a3908ec17c6e90645fdae0bb1ff7c3e1582658ad3c6df66c1eef8a0afdb01197f928f59", 0x7b}, {&(0x7f0000000cc0)="1c022d465ac25a51f819a03a01daff3fa140a5b2acee", 0x16}], 0x8, &(0x7f0000000d80)={0x18, 0x10a, 0x4a5f, "0d62f2dea9f8"}, 0x18, 0x40}, {&(0x7f0000000dc0)={0x27, 0x0, 0x1, 0x5, 0x0, 0x81, "440a79a883d185b32cad6675e9b60873400e3bf53938170a718be86eb535b3c5f9339f506b60fb14738e168188d0135c01216dd66a5c1ca8f1864831989964", 0x1e}, 0x60, &(0x7f0000002100)=[{&(0x7f0000000e40)="4ae6fd947dbcc6b2217a", 0xa}, {&(0x7f0000000e80)="c70e2e8b962de7d1cedae277349b8d232a1345dc097bb9a5129ad4fdab7ce135dde1d77f033980e44bfa1e6d8895fc6f4bd991225aa3622ff65102a44fd28566cc3e9e10929334303fc889dfcc683e2a215d831120801e1302a893b4b1e476108af93d7af221b5bd46c4d3088deeb7d0b0fd14e72184354f9bcef251c0f2f84aaacb059637e26d991326ff29dfb9", 0x8e}, {&(0x7f0000000f40)="a4b82e8569d62d93888701657712c44c7a5c6d954475b11aa86a9e1f2b7b2b673a1c57e1ec35e03c2903d6ba4684d4900fc16b4255a4a6679b03f3457ce711789b0f9931986d6e51398250bbdaf179b7c8d5d468ee12646b521aaebb6cc0a0dcf12929ebdc73ea35d420c672d97730822f01c53c545160386ae1303021c90e4f4a6434970f5d25a126505b138406982b161fe67987c3a5eacef3ab27ec54deb027", 0xa1}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="15e9cdfcd4bce5e9f2529d0fa25ee6625e7a2df3fa80ff82581d02d8f3b15f830a1d557de277a2f316e840825b7a0b2c5019e42e384784e7597880dc2430a77eb0000d8fae64725a6df94a5daf9cca661e91b42744b93d96a76eaffc672b49a0e6472e11506e049d0fe8948bdb6e6c145b8a1561c4b65a994d44071ea1e7240e7b7263238d802bc04150ed55d0ecf3a4642e908e51b8c3c4d6aa5ef5f4f32a99697546a462c08800ff9ff95fbc116fd4641a0641ca1df6e1061949ca7a8a83818052a959d2c12ea454b701906d972f4a65f7", 0xd2}], 0x5, &(0x7f0000002180)={0x1010, 0x1ba, 0x40, "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"}, 0x1010, 0x4}], 0x4, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x3) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = getpgid(r4) r6 = syz_open_procfs(r5, &(0x7f0000000340)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) dup3(r8, r6, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r6, &(0x7f0000000300)={0xffffff51}, 0x5339c2fa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@remote, 0x4e20, 0xff, 0x4e24, 0xa97, 0x2, 0x80, 0x40, 0x78, r9, r10}, {0x7, 0x46, 0x1ff8000000000000, 0x53a7605f, 0x6, 0x7, 0x75, 0x8000}, {0x1ff, 0xffffffff7fffffff, 0xffff, 0xe49}, 0x7, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in6=@rand_addr="8e56652a01ee7ea8c657ef7e857e8305", 0x4d2, 0x2b}, 0x0, @in=@multicast2, 0x3505, 0x0, 0x3, 0x7, 0x80, 0x80000001, 0x1}}, 0xe8) 05:22:17 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f0000402428080008000440040012002800", 0x26}], 0x1}, 0x0) [ 787.750114] protocol 88fb is buggy, dev hsr_slave_0 [ 787.755246] protocol 88fb is buggy, dev hsr_slave_1 [ 787.910143] protocol 88fb is buggy, dev hsr_slave_0 [ 787.915286] protocol 88fb is buggy, dev hsr_slave_1 [ 787.920447] protocol 88fb is buggy, dev hsr_slave_0 [ 787.925535] protocol 88fb is buggy, dev hsr_slave_1 05:22:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x1, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x4}, @in=@dev={0xac, 0x14, 0x14, 0x19}}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0x6, {0xfffffffd, 0x40, 0x80, 0x3}, {0x5, 0x6, 0x1, 0x2d19}, {0x10000, 0x7}}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d64350000000000000ad346b7ca5d852f8b72f82371531510baf10827f300000000000000000000000000000000000000000000000000000000000000ff07000000000000000000000000000000000000e3c9a1488ef346772264a4b49d001f4a59809ccb5dd1d959cb4a57a6dae5a82ccff2ad302fb84fcbb2a3b1044b0d218c7ddd17c14a4b1548a9f46ddaedcf667bdf753f2c8a6c981697a0293ffdf361d161aa2f6507409991569f061be14c01bc22f2400e5832650e727f13fbac4ba4869057261eedbc48c6f8f56587e8e2baca04c34dab14a413a9"], 0x138}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x100) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$BLKRAGET(r4, 0x1263, &(0x7f00000000c0)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r7, r8, r9) 05:22:18 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f0000402428080008000440040012002800", 0x26}], 0x1}, 0x0) 05:22:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xffffffff, 0x0, 0x0, 0x19}) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0}, {}]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000180)=0x2, 0x4) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={r3, 0x2}) 05:22:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:18 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) 05:22:18 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000600)=""/4096) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001500)=""/233) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x3, 0x400, 0x4, 0xffff]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000001000000000000bf6d3edb412f9412ec00000000000033000000fe800000000000007e850000000000aa00000000000000000000000000000000000000000000000000000000000000000700000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000cfd01006d643500"/240], 0x225}}, 0x0) 05:22:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x783881) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000180)={0x6, &(0x7f0000000140)="4d3b790fb26c"}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8c240, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r4, r2, 0x14, 0x1}, 0x10) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r3, 0x0) dup3(r5, r2, 0x0) [ 788.310114] protocol 88fb is buggy, dev hsr_slave_0 [ 788.315234] protocol 88fb is buggy, dev hsr_slave_1 [ 788.328157] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080)={0x1, 0x3}, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000df300ed50000000000000000007be882fe2f881028876eb7d451e8000000aa000001040000000000000000000000000000000000000000000000000000000000000000e1ff00000000000000000000000000003f000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d6435000000000000000000ffffffffffffffec00"/240], 0x4}}, 0x0) socket(0x10, 0x6, 0x20) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) 05:22:18 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) 05:22:18 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000100)={{0x4, @addr=0x1f}, 0x8, 0x0, 0x5}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x4, 0x0, 0x0, {{@in6=@remote, @in6=@loopback, 0xfffc}, {@in6=@mcast2, 0x4d6, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x80) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x3) 05:22:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) ioctl$TIOCCONS(r2, 0x541d) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r1, 0x0) dup3(r5, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) dup3(r8, r6, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r6, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x2) [ 788.437109] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:22:18 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) 05:22:21 executing program 2: rt_sigaction(0x25, &(0x7f0000000140)={&(0x7f00000000c0)="c441c573dae8663e3643d8847f9bdd3450c4817dee6152c4017d518c2b0d0000004589a10f000000660f3a0a482f00c441fb2da9f2070000430f38f0679cc4c1fc2b5b5a410f0fcfa4", {0x18000000000}, 0x4, &(0x7f0000000000)="c442a9a7caf0422122400f381d4d0a47f6ae00000080f3b500c4a115567700c461fd50dec46205bd1d8baf000047dc423fda5de6"}, &(0x7f0000000200)={&(0x7f0000000180)="c442c1b74699f341ccc4c375482a8e660f38f64cfe00c4024db627660ff882b23a0354470fc3910300000041a90d000000410faa0fb95200", {}, 0x0, &(0x7f00000001c0)="660f1a550066470f381c9757c10000f30f38f61867dfadbf000000c4817d2fc7d2882f233333c4a1bdf8dec4a2913ffcc4c1e55dac007b3e56590f474601"}, 0x8, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$caif_stream(0x25, 0x1, 0x3) r0 = shmget(0x1, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0x4558, 0x40324539, 0x6, 0xff}) 05:22:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x4}}, 0x0) 05:22:21 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) 05:22:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x231f}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:21 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)={0x2, 0x1c, 0xd6, 0x0, 0x4, 0x1f, 0x80, 0xbe, 0xa4, 0xe0, 0x5, 0x3, 0x0, 0x0, 0x9, 0x6, 0x6, 0xc7, 0x20}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000100fe8000000000000000000000000000000000000000000000000000000000000100000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:21 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) 05:22:21 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x60400, 0x154) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0x20000, 0x0, [0x100000001, 0x23be, 0x4, 0x401, 0x4, 0x5, 0xffff, 0x100000001]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1d103485}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0xc4, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7271}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="26769a9f86dfa643b9e9a2b1c9c7b42f"}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000800000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) splice(r0, &(0x7f00000000c0)=0x7f, r1, &(0x7f0000000100)=0x200, 0x8, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x1, 0xe856}, 0xc) 05:22:21 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) 05:22:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x225}}, 0x0) [ 791.486681] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a7}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0xff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x47}) r3 = syz_open_pts(r2, 0x4000000000000002) accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@remote, @remote, @null, @rose, @bcast, @null, @null, @bcast]}, &(0x7f0000000140)=0x48, 0x40000) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) fcntl$lock(r4, 0x7, &(0x7f00000001c0)={0x2, 0x1, 0x9, 0x3f, r5}) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x222081, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="387967f0bddcbb0b702b08150100000000000000fe800000000000000000000000000000000000b200000000000000000000000100"/68, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/299], 0x138}}, 0x0) 05:22:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x28080, 0x0) socket$netlink(0x10, 0x3, 0x4) connect$caif(r1, &(0x7f00000000c0)=@util={0x25, "5d432a1fee626b094fe67d125a777594"}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000074020000000000000000000000000000000000000000000100000000000000000000000000000000d4ea6454fe609f0101ec9cf54abf04f970fc76e2e12217b35de9f816e6e98e8ff69eefbd6ba53d907069424897f0e1b0800055ab1dbdf49e9478953fddfb72151c6e8de97c61b05b72e734bee94f430cca2674d06d63a8c5d06a8628ecf73352c315d3817c0c558ee3fbc58879cff590d23f4cd215ddaaa67337a29ab08d39f7490326ca1379fa06eecc0900"/214, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:21 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 05:22:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @multicast1}, {0x306, @remote}, 0x8, {0x2, 0x4e22, @broadcast}, 'ip6gre0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x40000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x174, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x59230eeb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}, @TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3de}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket$caif_stream(0x25, 0x1, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendto$isdn(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="3507000002000000bfae120b936c1f377662eaeb586a168eae1b377ff0659523f84ce4a4766f6abbd12f05046a0e9a87f70c90a78fc6628b7094524a576d5796dec145bb577f34ca4d391f31b7d2fb48692c03573f298992270ff237e859c10b474d43cc10179b"], 0x1, 0x4000, 0x0, 0x0) 05:22:21 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 05:22:21 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/237], 0x225}}, 0x0) [ 791.634581] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 791.638507] selinux_nlmsg_perm: 7 callbacks suppressed [ 791.638515] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56509 sclass=netlink_xfrm_socket pig=28486 comm=syz-executor.3 05:22:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@getpolicy={0x60, 0x15, 0x800, 0x70bd28, 0x25dfdbfe, {{@in6=@mcast2, @in6=@mcast1, 0x4e23, 0x0, 0x4e31, 0x0, 0xb9a8b415d3e86760, 0x80, 0x0, 0x84, r4, r6}, 0x6e6bc0, 0x2}, [@ipv4_hthresh={0x8, 0x3, {0x6, 0x18}}, @replay_thresh={0x8, 0xb, 0xfff}]}, 0x60}}, 0x0) 05:22:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000000c0)=""/214, 0xd6, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40}) r5 = syz_open_pts(r1, 0x0) dup3(r5, r0, 0x0) 05:22:22 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 05:22:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x400000, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x4}, 0x8000}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr="3c1dcf9298cde2cc837a893a14048cf5", @in=@loopback, 0x0, 0x3}, {@in6, 0x4d4, 0x33}, @in6=@local, {}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) [ 791.800912] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 791.815054] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x5}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', r7}) r9 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001540)={{{@in6=@loopback, @in6=@mcast1, 0x4e23, 0x400, 0x4e24, 0x200, 0x2, 0x20, 0x80, 0x89, r8, r9}, {0x0, 0x2, 0x9, 0xffbd, 0x10000, 0x1ff, 0x0, 0x8}, {0x5, 0xfffffffffffffffc, 0x2}, 0x1, 0x0, 0x1, 0x1, 0x1}, {{@in6=@local, 0x4d6, 0x3c}, 0x2, @in6=@rand_addr="7076853fbc5c7d2edc3727f459cc8921", 0x3500, 0xdc90bae49548e310, 0x1, 0x8, 0x8, 0x863, 0xc75}}, 0xe8) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x4000000000000002) dup3(r11, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000000)={r14}, 0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000500)={r14, 0x1000, "4af20eb39e1738bb716a0eec33ed81436fb2d5ebc0e10ac8e762f3d841db450e9840bc67a843f9835a3c611e3ba617b38f3db00be682669adebf2b05376fdc11490ca72bad0f27b772ca432855a4da2565596a8652bae49b18cc50893f836e386872fd2cacebbb3a4d1d9cedb334a7fd94b2251918b9123e3a9fc0e81a1b5968c0c28aa12253f234ea739f2c0d5a7111f2463f5763b6333f5f736b7b4fbd876e84641dbe7ed7c8c89ed839b2ebe9a316f2c4d1c6f6c76160a7e680317e2300614ad8f9f1c80f93feb8748d8bc20e2f5fff7351eb38347838cf553c482ba9b60c8da53aa3ab1d32176db3788a06688ed43e73a0b435f64f1b73e5c27f5512b6175d280d69f3d37a6da1e5f336c84a51fb238266ac1a7d78f96dff6926ac003bafc5697a1ec92f18a4d75975bf8bb6a6ea21eda8c8f9e806c37e754e731d9449078e88c13abddda39cda24f2bef43138ceb57dbabdade377b78294e3c58d1c0e393aa5c939562208e68c434b890418cb160750abf8a92a127233dda894ee7c205d27ea246b1d1402324565578f21da6de9ddc2e9da15ad81a7dc5ed0ac710215774e16440ccee305dbbbb92f8751a678c738dfac2d205894105698d9a3c825d603e04fa5fd4658b07aa1f99ebe23ace698912af079740d64e0b2366b07639afa63f408ec530777832b48dea66637bade2a02e4d1931c4a96cb9053652c90e23415e1ecc53951f40d076132884c073698d32cac38f81b9d457ff4b01ad7c15c89d32222875bc75c39394e711bd771adad9c757df2734c95295850a15bb6aac5aa91ffcd5173bcda0f3a736893a308cec5205e7f325baef0e635d9c81f2e6600d282c1c33058d5e59ee822908117b20e5f7deb10908a1b60ebf048801c8d644a266456c4b8543ca2ae6cae94fce33a0530af9ad8f60aee83afe1f2706b8ffffdebb6f684ee96ea3c64f372208626514c277bd0b89c97c7b37e1da70c436f0bc0dfe13a360b5818db92e12ef2858dd76f236ab50569beb75997ea1a61e1b8d97c15a75b1ccb13cc67414e5451627862d4acecaa335f4f093ab7e39fb459f624bf28628e20a34f6be51334a4ca06501634f826dab2b3bb01b355b5eee163066f0798e3ac269d0107ae9bfef4813cdce5f1bb8947740ebf8f3f94098e8bb9468127ba3a41af209e917fac970cc82b621e399ae805a08186690bf5822035e7e8b5bfe623496be8262f285e881bccffe778b7fcf60427704bd54ede0ce88bb72e17eebd25e7652e5ab93404c34abd40a7430b344752ff8cb23c42652de2fc081a78840cbe385b12b3e891208905e52f5fc038cba033b0429b7a61f4e78856e51442608562209af2f2bad0990a61f3954887d6d6e732e52fb4832b4ec6bfd6867409f7cd4b55d97186d2b98bdc5072f103924666f26a44f7e1c04e0e1eac25fed47b774cfa03ef402e320e15739ccf3bab9d9d8661413a4ec3a700f669cd7d6dce76ec37d9767fb0fa14b12df6ae8c9f87b356a02a0e9c9f120e6b8f4d345f889f77e054af9133c71537136adde735f1f0005f51bc1f13433de8274b3deb71f4bc44534e7bd5cadad37a771357b5a882ef1e4e9312cf816304c375a8523835a4c043028b1f198b8337a70f882d7e036328dbc48a33a2dad97befe38c5464a674ea6dee9c3415a472498d4c7dd99575a011e83ea46a3d6bb7c1a4cfc7fa522513966093ba8d6464091780194916770a6d9722a2de7172b1240d53a5c1e28b7e80fa92ae3b2dabea396b573197fc5bbcb9c17939a767234ce45f0a829b7d4dbb01f1017dfd5c7758dbe11e2542813e334b5020a2f21cb39f8608e2b02cbc7fe03e466b7d7ec0974c93669f3ae1245b530b453d9a57ecdfe03d6753ab9c485890447904c8fdfb47daaf6b7950b9e39f97d8ea7423cdfee3f182d050eef60992412c16af28c1e0ddc263af22fb5cef07f1c20af03d79292d8885db86cf2c013819aef1f7b6323f386c836bb25f749cd3751289b1ff8cd293274b13763c1816b83849e45095ffcce2c3786afa9c7b991d9008932307d7a2d4962bdc5582cf9e0f7d5d56d0cf61edd52691e7e90257e2c6510d8c4e5d89bfb4d4afde665f2631a22f398586e0c7c5d7a10bdd4258680ba0cb26c405c6f58e2c389d76aebd5e79f964d6324586f8dfc336ffcdf12a0ca0637d1bc129cd1e310db9f35642120ccad823478db0a50512b6a69240d87cbb8daf1428c51d4164b0a5c6011692ed01a1fbe2c7143d0be5adc651661021df88edba4a93d6c06bbb68403ebb70ba886e66099d6b5362c01dd0ed2320b5df666193d9ceecc9b33689031a2b860baf1865296d74bf39f72716f0a9de83998db4c6db8ed8a1624897e040dcd87f91d742aca8fc5c14896905ae1d055a3d8226e119ff4caa284a44a1521edf2600609146d9670b114c4ce67283ac6caf6aa55468d98446916c7ba563e1306f392b555c925590186b12518fd97ca24b370b56eeee8ca434055814491013699fb01cfbc1ceaccdb114b593b2a2fa0b329f812ac22b96f4ef9975bf70e9f1364a7af7a49db9245ec576147c54e35a839516d1746f8c2984d545bb6a2f8e1778c4dbb3e6e5995e460b300fba73596f109bdf31584729ea5c5db4a3414ee47209f9abb07092bc5cd6a9bb3c9554bdc832c01b20da96fc0aad9a54ee8bf654ddd170732b02660b23e1731715574732f62150ae922545913dc07c78bafdd44f14f6d0e745d6452afc1f6bd252a52b4693271b8b44f9e291264c40d44789ac3604920f882b8e711debab4078c0d872058230e042d6235cee35e058ce1c3c89609cb135f28bf075806a129ef5836332d7a31a9df2a5ddb4d02e29052bf4c3501bab10ca964a8292060545dc7eeaa8aa48dcf62c171b17973c68c95dbaa7d99b8944cfa15d7bd6ad92c9a5724cef468ed1d7c75cdc61e1a6f49cebb0d20262d9dea30f5745f538d495bdcbb30eca414bf753ee19d0b9f53e4ea5ff1232f4148169e89b483955df16a6a3e3c033e7e8c747c4353ff978a29b9f5cbf54c47c656273efd5ecb47163eda2c7e2d0e2e19e31fb67937703b4047f2299d3f59cdc3299abe29ce751c42413473338a3448df708b9fcdb4737f766b5ce18b76afea91210e7aed366d6fcfe8151f82feaac28a94aca07f1b62f3d0bf4d3b0c47a2d42740ffc099c5c664d853cc117a35518081464a050458fb88c19a53c5bf8eb3f57cbfb13187ff21d847c1f61792a861ab45ec9ff39b16a08197164ac0652ef05c82e4afd67bc1d2c78ac5e71a374dbaa078e4c1f36b17f0b03cf3f87171036dec894aa6f0246018731be73fc85b456c223913b5580ee46639ce326603af2d10c2314525f60f39e36cb7ac4eb1c5713c7c5a6b77c741b3aca63180bac9b927d36f357d2b87d0fb0379d155cbffd22366840d149bdf685ecbd28e1ef16279c288c4c112c48732c6f2be99a9ede69a5030556508c08bc7e7b19aa0c4efea390ed4685dcdc7bc3f586f8a88a2312a5c172a694fed0d81a6fef87b192fa8bfe9283d8371efe279b7765e132a41618b424dc8f8489a6051d594bee8c93177982941c0f16dc637996212cd58fd144a25bc7cb3ee583118e3a330b3716660e46adbaffcda36195cd91483996968b8e505847caafde3b34cc2d47fef350d59b9352fc43f8e791eee8d06ba30afc7950aa9ab506b942fa6c4d8a9f38a665e68ea2258adf4b8574ade6654b8591e62fea2ca61770bbb4ce5d2f558c0bb94e63b72db47911bba1612ffc4c1679b6a111aad5510ddf6d7c8128a980d9eb1219440af8abaef539cb19afeccc4ecae2f5fc77ade1dbabf2ce980880378dfc282127e843dd7bd7f71ad8b974a405b7d0f8c0b3f2e164c4d42f4d23a0b102eeff9b432a7fd2fa85ef0bf671c0ae062361ea9e35c16dcf746476691966bb137b19e6b1c6afebaac0b9c11d3588a104aa0f13a0da4ab225d9aa071e966054de58243b44a05c59c6c67551f66ac062a10a073597b8067597662777ee2c9cbf477777a18b5e3f14d2740d24ed373d6989ae4c798c97b237a7144b0d4b313e2d5f242f23a1b5aca386f45d853d0e85cd7dbdbc23854708cdaba594a94f73e698d0539e034adbf07e951c38e9fecbc4eb73b98366acd45ba290231849ed8066adcb217c85e098c2e588eca70226f12af081611dd18c408fad017019cb066f30db12b266c61c5db29fb3e7ce0720f76873d5c4c7a2e612059af1439d9ed1552e8fdecf1ae9046c4e855f9ab72b0206a0af623a8c14f70328a20863c6c055b468459bc44b43dab45c5e955cc176a3b28d922a3e64b384902f54eeaf17094e26f1061d1d551c629e7edb9f6c5f86e39a5956dad600af5e57461dcb6c5a7321cf842f5128bc9a3023b699f8709e457615c8142429aa1bb8a31264f161f896caf35596b4783bdf9106194754b72b2870c5c8605a34b301674411736ec4dae197cc48b9d8b4d32332cbf5c2cc7949f63f1c052ed267e929919a34374945fb741ecbf90cea660a5901402657e5890aa937d651d151d51ef6d68a3377eb422ea26e747bca2827c703602f661a8d4df68d78edd57b60a49895b04903c9106e9c9c64504df57f8f122b5a13c77eacade4fececea1440995702c94d9be5b64cc173954ab867a9b7453d01ef0aed698422ee0704280b70f7dba48ba87963809882a597e23e91a8e525f8c9cc76eaa2be6c9efc3c3caf6bdee1615cf5480e3a0749cacaa844b5c45d97144d9de2940a3bb7751e5e17d8b52b3135ad0f191860d5de6075fdcd0db8f3d0f5ce2688ebc24aa2316cc52955941c48cdcbadbb83f20febf4abed119a6b97f70f8a1c39dd739e415d04c572eeac4e0e96adb38408c28f4f03722dcdb4ca64a097488d1af06ab5669e9ab5b3483bb36e096f0b478ce6c319656db7604b1f680f9c0ac822eb96c49c86cb0f441f887e54b4d4b68fc12bf22f745015e85a5ceffa7e271a0c799e649589a68293bc0af03f6bfffb5b558a2c5f7d27f347c6d66861a51c556bf47470cce3d2a7f9b08dcb845e010ae9db047b10d3550a11d93697643d6a56c274a20d7904a51e797bfde56f5459ea1625fedc9849b45f152a9c6d8d71a821dd9e07d58a09eb34b33ad96d1ee6947018132a3697bcd054d27184f9ef6ed0f2d5027e2cfd389baec6efa19f4f194ec11bd7d6b3cb3713dbd59b27797e0ee7a38b758ab7f85a3e41727f47db92fcf4fe8e169439457379fd0868012807a1a8e92d139fcc639664ceaf1ff765065c1189a36a167a4ed33dc00f2e9fcf616719d09fccc869759071ba4d75ee6aa826004bdf69d7e462b5f38f9ad19ac5a097d18402bc88b08183662068d570db829397da5d811dee1bd776661352627b95cf8ff260c9be1ad6f2fa8d006cd42847cf1dcf8cdab8976af3db2a54ac42fa3bba50f77c82bfd3d3f8622251c7d37010bf320a93537b8bc74f49a9edd164ff1814f5966200e0dd1c75269e6365c3e37056bf441793eac9491f44a39c6ce22eaa10d59f6d81974d24aec0f8505369609e7b075a66559b00c2952ada307fd4c79808d5b5abbe963352c773407b417a08eacaf42fb1b57cd482c2f272f736cceeefe09ad79288424bbe53c191c5cd83325da4b0c1f18df96e3ce99431cc5813d86ac482aa7575a4b8bbbb986715a34ad88d2d04d56481cca45e117d8354b90de56a22424a2953081931677b667e371fa96c5e4b659cd53bc7c3f3a133d5333a1162db10b2dab846748cb68d29ae5f05c08504cad77f478cc78044ba6ac81fc4e"}, &(0x7f00000000c0)=0x1008) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r15 = syz_open_pts(r2, 0x4000000000000002) dup3(r15, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2b, 0x4, 0x0, {0x2, 0x2, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000100766d6163286465732d67656e657269632900"/240], 0x138}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @multicast2}}, [0x8, 0x8, 0x83e, 0x6, 0xfa, 0x7, 0x7, 0x8000, 0x7, 0x40, 0x0, 0x7f, 0x0, 0x8, 0x401]}, &(0x7f00000001c0)=0x100) 05:22:22 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 05:22:22 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 05:22:22 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) [ 792.790191] net_ratelimit: 24 callbacks suppressed [ 792.790198] protocol 88fb is buggy, dev hsr_slave_0 [ 792.800323] protocol 88fb is buggy, dev hsr_slave_1 [ 793.830139] protocol 88fb is buggy, dev hsr_slave_0 [ 793.835292] protocol 88fb is buggy, dev hsr_slave_1 [ 793.990111] protocol 88fb is buggy, dev hsr_slave_0 [ 793.995241] protocol 88fb is buggy, dev hsr_slave_1 [ 794.150136] protocol 88fb is buggy, dev hsr_slave_0 [ 794.155315] protocol 88fb is buggy, dev hsr_slave_1 [ 794.160515] protocol 88fb is buggy, dev hsr_slave_0 [ 794.165612] protocol 88fb is buggy, dev hsr_slave_1 05:22:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000000c0)) 05:22:24 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 05:22:24 executing program 3: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:24 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 05:22:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x6aa, 0x0, 0x0, 0x0, 0x11, 0x3f, 0xff, 0x4, 0x0, 0x0, 0x0, 0x4000}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x3f}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x10000, 0x5, 0x4, 0x1000000, {0x0, 0x2710}, {0x3, 0x0, 0x5, 0x6, 0x8, 0x7f, "a8f27eda"}, 0xfffffffd, 0x2, @planes=&(0x7f0000000080)={0x3, 0xfffffffd, @userptr=0xfffffffffffffff7, 0x1ff}, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000280)) r6 = syz_open_pts(r2, 0x4000000000000002) dup3(r6, r1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r11, 0x4000000000000002) dup3(r12, r10, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r10, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r13 = getpgid(0x0) write$P9_RGETLOCK(r10, &(0x7f0000000300)={0x25, 0x37, 0x1, {0x2, 0x4, 0xd, r13, 0x7, 'filter\x00'}}, 0x25) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {r14, r15/1000+30000}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0x138, 0x138, 0x138, 0x138, 0x0, 0x390, 0x390, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000140), {[{{@ip={@empty, @loopback, 0xffff00, 0x1fefffe01, 'rose0\x00', 'ip6gre0\x00', {}, {0xff}, 0x32, 0x2, 0x40}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7454, [0x20, 0x401, 0xf0, 0x2, 0x81, 0x1], 0x34, 0x70}, {0x1ff, [0x1000, 0x4, 0x5, 0x3, 0x8, 0xfe], 0x2, 0x1f}}}}, {{@ip={@local, @empty, 0xffffffff, 0x0, 'ip6gretap0\x00', 'team0\x00', {}, {}, 0x33, 0x0, 0x10}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0xc8, 0x2, 0x2}}, @common=@inet=@dscp={0x28, 'dscp\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x91135d5d19542b62, 0x6c, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x20, 0xf, [0x2f, 0x2f, 0x26, 0x21, 0x1f, 0x1, 0x39, 0x8, 0x22, 0x3, 0x12, 0x2d, 0x12, 0xf, 0x1a, 0x16], 0x3, 0x6, 0x1f}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 05:22:25 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 05:22:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/154) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x176, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in6=@dev, @in6=@loopback}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x4}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r7, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xee6a9f01d1540a83}, 0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1400080}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r7, 0x210, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) r8 = dup(r0) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f00000000c0)={0x9, 0x100, "c9b4b5c579d018c103a685d182638bd19bb40f398da60ef77abc6ae36c677beb", 0x6, 0x8, 0xd0, 0xff, 0x214}) 05:22:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58a06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x240042, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) 05:22:25 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac05e11}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 05:22:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x3504, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x1, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x8010, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x988d3370d288630e) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000000c0)={{0x34973e38795d2c2a, 0x0, 0x3, 0x0, 0x6}, 0x9, 0xffffffffffff8001}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x3f, 0x5c, "ebaa1cf211490edbcf5a52c5b3bccca0f66ceecb7653a31bfd26b38263bdd554098289096864d7511a6d47a7ab921a53413c8a04c1a009b09081efe977b06d375e302c1a0685de5ca42e5c45e6b83d0b2c813eb4c3820316197a1b1e"}) socket$caif_stream(0x25, 0x1, 0x3) 05:22:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r5 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x0, 0x19, 0x4, 0x70bd2c, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x4e21, 0x9, 0x4e23, 0x7, 0x2, 0x0, 0x100, 0xb4edb3d262edb394, r4, r5}, {0xffffffffffffff81, 0x3ff, 0xd39, 0x9, 0x3, 0x3, 0x7fffffff, 0x8}, {0x0, 0x6, 0xce, 0x3}, 0x1a2, 0x6e6bba, 0x6}, [@encap={0x0, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e24, @in6=@dev={0xfe, 0x80, [], 0x13}}}, @replay_esn_val={0x0, 0x17, {0x3b3, 0x70bd27, 0x70bd2b, 0x70bd28, 0x70bd2a, 0x80, [0x1ff, 0x1, 0x2, 0xfffff7ae, 0x0, 0x7ff, 0xb5]}}, @lastused={0x0, 0xf, 0x1}]}, 0x225}}, 0x0) 05:22:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000400)={0x3, 0x1, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {0x0, r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) [ 795.261972] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 795.286052] batman_adv: batadv0: Adding interface: veth11 05:22:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x4}, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x800000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 795.292020] batman_adv: batadv0: The MTU of interface veth11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.316875] batman_adv: batadv0: Not using interface veth11 (retrying later): interface not active [ 795.338884] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2011005}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040a0}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae91, 0x0) dup2(r1, 0xffffffffffffffff) accept$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x804000, 0x0) open(&(0x7f0000000300)='./file0\x00', 0xd97df792d08763d6, 0x113) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6, @ANYBLOB="0400000000"], 0x20}}, 0x0) 05:22:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010001307000000000000f221954200000000000000e90000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) [ 797.936482] audit: type=1400 audit(1575264148.101:864): avc: denied { create } for pid=28622 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 05:22:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7a}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x70bd2c, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}, 0xfffffffffffffef2}}]}, 0x225}}, 0x0) 05:22:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x114, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0xffff, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x8000}, {0x0, 0x8000000, 0x0, 0x2}, {}, 0x0, 0x0, 0x2, 0x4}, [@lifetime_val={0x24, 0x9, {0x5, 0x7fff, 0x20, 0x8}}]}, 0x114}}, 0x0) [ 797.979677] audit: type=1400 audit(1575264148.101:865): avc: denied { write } for pid=28622 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 797.990128] net_ratelimit: 16 callbacks suppressed [ 797.990134] protocol 88fb is buggy, dev hsr_slave_0 [ 798.017233] protocol 88fb is buggy, dev hsr_slave_1 05:22:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0xffffffc0, 0x4) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000300)=""/98) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38913a8790e132991a00001000b0a204d924e886060000fe8000000000000000000000000000000000000000000000000000000000000100"/71, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1e) 05:22:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000}, 0x0) [ 798.150144] protocol 88fb is buggy, dev hsr_slave_0 [ 798.155292] protocol 88fb is buggy, dev hsr_slave_1 [ 798.188901] QAT: Invalid ioctl 05:22:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x65, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x3f, 0x0, 0x7}}) 05:22:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000e7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) [ 798.194225] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57744 sclass=netlink_xfrm_socket pig=28644 comm=syz-executor.3 [ 798.207306] QAT: Invalid ioctl 05:22:28 executing program 0: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x9789, 0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fec1696bb7eddb7d6826e1098b18b480000000000000000000000000000000000000000000000000000000000001000020", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:28 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x1a000) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe800000000000000000000000000000000000000000c4703ff938841202c25000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16], 0x4}}, 0x0) r5 = accept4(r4, &(0x7f0000000280)=@caif, &(0x7f0000000300)=0x80, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x9, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x2) 05:22:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fcntl$getown(r2, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000180)='fdinfo\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendto$inet6(r4, &(0x7f00000000c0)="2629640a5e11f52a85e5114b172e60fe8a6fbe4e0b2fcb4ff3fefd1d5ea45129e2b50802f95defe40161e40660338b0b8b54e1b1121d9c2dbd4280771f418232e2d17c644573d43771561c9de78510a858cffa5b2fba72f9536c2c88e36534286ad9d2e83c3582574eeab2e9505e99611bd46b0bbb918e8c1931836b8e1dbb83d7c24c47a760c5f5c46378729675966eb4a76ccd7eb029964c4a69951c445660b8eaa178427e9777f7c7846e569afd9f6b", 0xb1, 0x30040001, 0x0, 0x0) r7 = syz_open_pts(r1, 0x0) dup3(r7, r0, 0x0) [ 798.269783] Unknown ioctl 1077171216 [ 798.291470] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 798.310143] protocol 88fb is buggy, dev hsr_slave_0 [ 798.315239] protocol 88fb is buggy, dev hsr_slave_1 [ 798.316893] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 798.320390] protocol 88fb is buggy, dev hsr_slave_0 [ 798.320422] protocol 88fb is buggy, dev hsr_slave_1 05:22:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae91, 0x0) dup2(r1, 0xffffffffffffffff) accept$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x804000, 0x0) open(&(0x7f0000000300)='./file0\x00', 0xd97df792d08763d6, 0x113) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6, @ANYBLOB="0400000000"], 0x20}}, 0x0) 05:22:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x2b8, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x208, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/R\x00\x00\x00$\x00\x00\x80\x00', 0x600b82, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000080)=0x7fff) 05:22:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getsa={0x28, 0x12, 0x4, 0x70bd2a, 0x25dfdbfd, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xa, 0x55}}, 0x28}}, 0x4080) [ 798.363863] Unknown ioctl 1077171216 05:22:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x100}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x10) 05:22:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000800000000000000010000000100000001000000000000000000010000000000090000000000000007000000000000000000000000000000000000000000000084040000000000000000000000000000ae599073812b4b23496dcbdaaedc0f820a284525483fa991213465065d8697d35050ae6fee2487aa529038c3ff694fd9d7"]) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa32afc142b006e26) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x353100, 0x0) [ 798.710121] protocol 88fb is buggy, dev hsr_slave_0 [ 798.715312] protocol 88fb is buggy, dev hsr_slave_1 05:22:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000000c0)=0x7) 05:22:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000070033000000fe80000000000000000000000000008a000000000000000000000000000000000000403da6e3efddaabf31950c550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x880080, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @initdev}, &(0x7f0000000100)=0xc) 05:22:31 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r1, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x9, 0x2f00000000000b88, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) 05:22:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd}]}, 0x30}}, 0x0) [ 801.167783] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:31 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$void(r0, 0xc0045878) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x4070bd25, 0x4000, {{@in6=@dev={0xfe, 0x80, [], 0x10}, @in6=@loopback, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@empty, 0x0, 0x33}, @in6=@local, {}, {}, {0x2}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0xffe9, 0xd9, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22a00, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0xe588972bda7031db) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf0}, {@in6, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, [], 0x11}, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = shmget$private(0x0, 0xd000, 0x200, &(0x7f0000ff2000/0xd000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000180)=0xe8) r3 = getegid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r7 = socket$inet6(0xa, 0x2, 0x2) recvmmsg(r7, &(0x7f00000012c0)=[{{&(0x7f0000000700)=@rc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/163, 0xa3}, {&(0x7f0000000840)=""/83, 0x53}, {&(0x7f00000008c0)=""/232, 0xe8}, {&(0x7f00000009c0)=""/161, 0x53}, {&(0x7f0000000a80)=""/30, 0x1e}, {&(0x7f0000000ac0)=""/25, 0x19}, {&(0x7f0000000b00)=""/126, 0x7e}, {&(0x7f0000000b80)=""/222, 0xde}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/163, 0xa3}], 0xa}, 0x8561}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/172, 0xac}, {&(0x7f0000000ec0)=""/77, 0x4d}], 0x2da, &(0x7f0000002b40)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000000f80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001000)=""/104, 0x68}, {&(0x7f0000001080)=""/219, 0xdb}], 0x2, &(0x7f00000011c0)=""/10, 0xa}, 0x100}, {{&(0x7f0000001200)=@nl=@proc, 0x80, &(0x7f0000001280)=[{&(0x7f0000003b40)=""/4096, 0x1000}], 0x1}, 0x3}], 0x4, 0x0, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKDISCARD(r8, 0x1277, &(0x7f0000000580)=0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r6, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r9, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120f81ac26b37b9ba93d2b592e4445bb23f33831503de91abe7592167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9a3dc00fc86a5f60a000a257767cd0519d4b76847a56c105cf0dea2e6fd4534789126c455c1e52f469d853fc7467e70fc139b8ee9ed1730e0cf9c1ae617f64004900"/155], 0x2, 0x2) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r10, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fremovexattr(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="ba4f5c91d0d0ac66"]) r11 = getpid() tkill(r11, 0x9) sched_setaffinity(r11, 0x8, &(0x7f0000000000)=0xf2) r12 = gettid() ptrace$setopts(0x4206, r12, 0x0, 0x0) tkill(r12, 0x3c) ptrace$setregs(0xd, r12, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r12, 0x0, 0x0) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x80000) r14 = getpid() tkill(r14, 0x9) sched_setaffinity(r14, 0x8, &(0x7f0000000000)=0xf2) ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f0000000680)={[], 0x1, 0xfffffff8, 0x800, 0x2, 0x81, r14}) r15 = getpgrp(r12) shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x20, r2, r3, r5, r9, 0x200, 0x7}, 0xfffffff9, 0x8, 0x2, 0x40ccb2b9, r11, r15, 0x7}) 05:22:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) setsockopt$rose(r0, 0x104, 0x3, &(0x7f00000000c0)=0x7f, 0x4) [ 801.346983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:22:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa0}}, 0xf0}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) [ 801.393923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 801.432193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:22:31 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000fe01000000000000f03759cc0600000000000000000000000000000000000000000000000100ff25864a390300000000000000000000000000000000000001000000000084a9b81bae9461e411b5e265590e1a8f1cd59f176867c43c5abf910a2c539cfded52136f26317d512a9f62c7df6f44d50100deb1be1029446056a473fb054634309f53d882edf6779f987f81f65c446ac56d5f4e80da594ad7c5cd1d2101", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x141000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000280), 0x4) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20200400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200004c8}, 0x40090) 05:22:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4080, 0x0) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) [ 801.545602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:22:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r4 = semget$private(0x0, 0x8, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) semctl$GETZCNT(r4, 0x1, 0xf, &(0x7f0000000600)=""/4096) syz_open_procfs(r2, &(0x7f00000000c0)='limits\x00') semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000001500)=""/233) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000180)=""/104) r6 = syz_open_pts(r3, 0x4000000000000002) dup3(r6, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000440)=&(0x7f0000000400)) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000140)=0x3f, 0x4) write$selinux_create(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a78656e5f6465766963655f74287330202f7573722f7362696e2f6375dab17bd7195bcc30f3027cab0d8ec7c62b3624bf20d4559a2070732d62726f777365642030303030a381be96e6f67bcd09a3858165ecf74a9284ec210d15770c2fc2ee3b49a26e3a87e192d32a0b6d6a9d067463252f05b8629058a84cb0aa1b0093381c966ab5f738cfd5859ff216c69aa740a011f96b5454dc4ade82ad6a55b726856d4c5c8bb6cfe806457d"], 0x56) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x200000, 0x0) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000280)={0x0, 0x9, 0x7fffffff, 0xb7, 0x5, 0x5a, 0x4, 0x1f, 0x3, 0x80000000, 0x5, 0x6}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) 05:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x4000, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 801.608020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 801.620669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000670013070000000000000000fec34c25b06a4df2a05839800000000000000000000000000000000000000000000000000000000000fcffffff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e43d9d765cf794d676ce80a92c08379d4f78a21cfbe35427f8a053bfebfc7c58ee37b255450b7a8954e1aa6c8759e779bb5f126337596166000d8709b32b0302a1da252197a94629b5f4fb012b1548992e4253a970c7d9b290771234cf7999a51b5185b57b1750932e5e2d74c6164fb1aff295315db4930dc6b78e69754796bf0b00"/145], 0x0, 0x9f}, 0x20) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000015000/0x1000)=nil) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x20000000000b04, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000002c0)=@gcm_256={{}, "a8e92fbccbe265d7", "cb5558049eb0205e40dc6cb84a4d15db44cdf17b9fb5d6a6d68a1d832546cb9e", "db441cd8", "65f6e21c57367b73"}, 0x38) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4cab38b3a4cbb04f) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000003, 0xff], 0x1f004}) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_submit(0x0, 0x40000000000000fc, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000077000)=""/133, 0x18) connect(r5, &(0x7f0000000580)=@caif=@dbg={0x25, 0x5d, 0x40}, 0x80) execveat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000140)='selinux]cgroupvmnet0eth1\x00', &(0x7f00000001c0)='SEG6\x00', &(0x7f0000000340)='SEG6\x00', &(0x7f0000000380)='/dev/kvm\x00', &(0x7f00000004c0)='/dev/kvm\x00'], &(0x7f0000000740)=[&(0x7f0000000680)='user:\x00', &(0x7f00000006c0)='/dev/kvm\x00', &(0x7f0000000700)='SEG6\x00'], 0x400) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:22:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x7, 0x3010, 0x3}) 05:22:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/162, &(0x7f0000000000)=0xa2) socket$caif_stream(0x25, 0x1, 0x3) [ 801.799827] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=103 sclass=netlink_xfrm_socket pig=28747 comm=syz-executor.5 05:22:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000dd000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d6435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045d491f52ef10c7c27227757352e46778289557ce1102793b7d7a37d2e841af99eb3ea9c0d8767e782dd6a473e7fc250ed8a5acf0c4ba44f23d565e8a6316fa30d01ad0387cad7f63d710efb6ab2f0b195b009cbf9aec32bbc79dbb934bce829acc0b3935c63503b46bc0f47baea3d94c6a00eac67f608c383fbe9007c9ce1fa4a3b6a3540a74dcc6ea593a778cf7f4ce96d134ec1049de0f807"], 0x225}}, 0x0) [ 801.941432] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 801.954245] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:22:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000020000000000000000000000000001000000000100000000000000000000000000000000d852f6bb57c6bc77d33d113dcefefb4fb1f72c2100a0947997ad3e9ce0e2af75821f72512ea853506104f51b47eca36badeec03a77c4d973241daa641ef5b865e80180935b29e6569e676741ff3d3ebd7fb92380000000000000a4654dadcedff60480b24afe32298d162034bf6110eeaa7ff3471553d7978f5fdaa82e06d3f4c736031cc39115", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) dup3(r8, r6, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r6, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x4000000000000002) dup3(r11, r9, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r9, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000001c0)={r12, 0xdb4}, &(0x7f0000000200)=0x8) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @multicast1}, 0xfcae5bdac13b940c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0xffffffffb8b855a7, 0x7}) r13 = syz_open_pts(r5, 0x4000000000000002) dup3(r13, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KDSKBLED(r4, 0x4b65, 0x1) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f00000003c0)=@migrate={0x1160, 0x21, 0x200, 0x70bd27, 0x25dfdbfe, {{@in=@remote, @in6=@loopback, 0x4e23, 0x9, 0x4e23, 0x3, 0x8, 0x60, 0x80, 0x54c09ce6b9235ca8, 0x0, r14}}, [@sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x2, 0x1000, "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"}}, @algo_auth_trunc={0x104, 0x14, {{'cbcmac-aes-neon\x00'}, 0x5a8, 0xc0, "c8db9e94540db11e62185f17a7dc6989df387b4fdce4cda9024c90edc4c19f3a91f4d01a4ca06383e40564cae885b15401fe152ef43f603db95bab1c7bd14706a19ebc504d05acf2a9c307a8ca29a9e69ab191e913e2495ea3e527d9d2ed63b00c55f774bbac891a087f676eebd92c837a37071d3466410787eeb9a7b594e56db23cb303cbfc57df2f165d65d412ea03f2914cacc5695774821eead6d07e19679c780f766ed37f877a90244ba6edcb5779e8a45784"}}]}, 0x1160}, 0x1, 0x0, 0x0, 0x40004}, 0x84) [ 801.989962] audit: type=1804 audit(1575264152.151:866): pid=28761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir943637522/syzkaller.nCfGv7/972/bus" dev="sda1" ino=16605 res=1 05:22:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e43d9d765cf794d676ce80a92c08379d4f78a21cfbe35427f8a053bfebfc7c58ee37b255450b7a8954e1aa6c8759e779bb5f126337596166000d8709b32b0302a1da252197a94629b5f4fb012b1548992e4253a970c7d9b290771234cf7999a51b5185b57b1750932e5e2d74c6164fb1aff295315db4930dc6b78e69754796bf0b00"/145], 0x0, 0x9f}, 0x20) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000015000/0x1000)=nil) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x20000000000b04, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000002c0)=@gcm_256={{}, "a8e92fbccbe265d7", "cb5558049eb0205e40dc6cb84a4d15db44cdf17b9fb5d6a6d68a1d832546cb9e", "db441cd8", "65f6e21c57367b73"}, 0x38) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4cab38b3a4cbb04f) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000003, 0xff], 0x1f004}) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_submit(0x0, 0x40000000000000fc, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000077000)=""/133, 0x18) connect(r5, &(0x7f0000000580)=@caif=@dbg={0x25, 0x5d, 0x40}, 0x80) execveat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000140)='selinux]cgroupvmnet0eth1\x00', &(0x7f00000001c0)='SEG6\x00', &(0x7f0000000340)='SEG6\x00', &(0x7f0000000380)='/dev/kvm\x00', &(0x7f00000004c0)='/dev/kvm\x00'], &(0x7f0000000740)=[&(0x7f0000000680)='user:\x00', &(0x7f00000006c0)='/dev/kvm\x00', &(0x7f0000000700)='SEG6\x00'], 0x400) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 802.072421] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 803.190129] net_ratelimit: 24 callbacks suppressed [ 803.190135] protocol 88fb is buggy, dev hsr_slave_0 [ 803.200161] protocol 88fb is buggy, dev hsr_slave_1 [ 804.230113] protocol 88fb is buggy, dev hsr_slave_0 [ 804.235235] protocol 88fb is buggy, dev hsr_slave_1 [ 804.390132] protocol 88fb is buggy, dev hsr_slave_0 [ 804.395230] protocol 88fb is buggy, dev hsr_slave_1 05:22:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x58602, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x1}, 0x4) 05:22:34 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306050368fe07602b00003f0e430a001400020045b300070300000319001a00120002000e00010006000300"/57, 0x39}], 0x1) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, @hci, @llc={0x1a, 0x7, 0x0, 0x0, 0x4, 0x0, @broadcast}, @isdn={0x22, 0x0, 0x0, 0x1f, 0xbb}, 0xb2bc, 0x0, 0x0, 0x0, 0xb4fc, &(0x7f00000008c0)='erspan0\x00', 0x400, 0x800}) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x22, 0x0, [], [{}, {0x801}]}) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306050368fe07602b00003f0e430a001400020045b300070300000319001a00120002000e00010006000300"/57, 0x39}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001300)={{{@in=@loopback, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000001400)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306050368fe07602b00003f0e430a001400020045b300070300000319001a00120002000e00010006000300"/57, 0x39}], 0x1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x22, 0x0, [], [{}, {0x801}]}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x700}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0xb, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:22:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180)={0x9, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0xb, 0xfff, 0x3}, &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x7}}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r7, 0x4000000000000002) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f0000000540)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x10, &(0x7f0000000380)={&(0x7f0000000080)=""/184, 0xb8, r6}}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:34 executing program 3: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)="92c4eda5cc9a262ce0479ed6ddb8f33c65101cf5b26afa86", 0x18, r0}, 0x68) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xc9e1eda0cb21dfb6, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x1, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {0x0, r4, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, [], 0x2b}, 0x8}, r4}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) 05:22:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0) read$usbmon(r1, &(0x7f00000000c0)=""/6, 0x6) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000100)={'veth1_to_bond\x00', 0x80}) [ 804.536863] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 804.550099] protocol 88fb is buggy, dev hsr_slave_0 [ 804.555197] protocol 88fb is buggy, dev hsr_slave_1 [ 804.560323] protocol 88fb is buggy, dev hsr_slave_0 [ 804.565381] protocol 88fb is buggy, dev hsr_slave_1 05:22:34 executing program 3: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000002340)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=ANY=[@ANYBLOB="38010000100013070000000000000000fe800000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000057a42ee8747fec35c0341162df543619993185febc1253bdf46af51ab296c9c81a2b5316ec57d63b058da99468a7a8b7e52b34ffa27d239e8456e9d756e2509ddc68930c07f2d557d24fbd48f7beb0ba2ae513a54e8bb2e91462ad3249df29dd1c8266b6fd8b1e2ee7c93283ae36f09ca93638d3744239a3b63e4f270a584eb1535d45689824000493d7ce781d16", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000233000000fe8000000000000000000025c7a029c833d1f534b000000000aa00000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010001d060000000000000083630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000003a0000000000480001006d643500"/250], 0x225}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x10b5c2, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000002c0)={0x0, 0x0, 0x2080, {0x6000, 0x2, 0x3}, [], "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", "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"}) eventfd(0xfffd) 05:22:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40142, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x80000000}, &(0x7f0000000100)=0x8) [ 804.591589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pig=28797 comm=syz-executor.1 [ 804.625432] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 804.724374] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 804.725589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pig=28812 comm=syz-executor.1 05:22:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0xfffffd7e, {{0xa, 0x4e23, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfc8}}}, 0x88) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x7d13912d8dc40e9b, 0x0) 05:22:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x1}, 0x8) 05:22:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e2c1f602e6861fa84292cf732d6b38010000100013070000000000000000fe800000000000000000000000000000000000000000000000000000000000ff440d010000420800000000000000000087165eb232", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f737f94d5"], 0x4}}, 0x0) socket$alg(0x26, 0x5, 0x0) 05:22:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600fd08000000000000f81a5f9eadfc"], 0x14}}, 0x0) 05:22:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000004c0)=')+{\x00', 0x4) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000000c0)={"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"}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6=@mcast2, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:37 executing program 1: tkill(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x225}}, 0x0) 05:22:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xbb, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6=@rand_addr="000000000000560000005f2950fd00", 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$snddsp(r1, &(0x7f0000000080)="c03910671f036963862418fe6d33ec133db99be04741cd0a17dfee0194330338435a805c2e01412c2f1d539e329a1c685c581d5bca15cf76913f376adaf2f07b7849744fb899da797b5fa60eaa7619fe5788926bcace921e4fa95541", 0x5c) 05:22:37 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x10002, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r8, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') ioctl$TCFLSH(r3, 0x540b, 0x3ff) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r10, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000280)=0x201, 0x4000000000dc) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') ioctl$KVM_S390_UCAS_UNMAP(r9, 0x4018ae51, &(0x7f00000000c0)={0x8000, 0x7ff, 0x2}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x81800004}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r11, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000060}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r11, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}}, 0x40) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x6, @rand_addr=0x5, 0x4e21, 0x2, 'none\x00', 0x0, 0x0, 0xf}, 0x2c) 05:22:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/rpc\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x124, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x6}, {}, {}, 0x0, 0x2, 0x2}, [@replay_esn_val={0x34, 0x17, {0x6, 0x70bd27, 0x70bd26, 0x70bd25, 0x70bd25, 0xd4, [0x7, 0xc779, 0xfffffff9, 0x9, 0xa6, 0x5]}}]}, 0x124}}, 0x0) 05:22:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000000000810000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x400c820) [ 807.529025] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:22:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/214, 0xd6}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000002c0)=""/251, 0xfb}, {0x0}], 0x2}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/156, 0x9c}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 05:22:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getrlimit(0xb, &(0x7f0000000080)) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000340)={0x8, 0x9, 0x4, 0x0, {r10, r11/1000+30000}, {0x0, 0x2, 0x80, 0xd8, 0x1, 0x40, "794cd946"}, 0xffff, 0x2, @planes=&(0x7f0000000300)={0x7, 0x10001, @mem_offset=0x1f, 0x200}, 0x4}) r12 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r12, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r13 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r13, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRES32=r1, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC=r6, @ANYRES16=r12, @ANYRESDEC, @ANYRES32], @ANYRESHEX], @ANYRESHEX=r3, @ANYRESDEC=r13, @ANYRESDEC=r4], 0x8}}, 0x0) r14 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x299d6fd8e7f1a8e3, 0x0) r15 = memfd_create(&(0x7f0000000000)='/dev/dlm-monitor\x00', 0x6) fcntl$F_SET_FILE_RW_HINT(r15, 0x40e, &(0x7f0000000280)) ioctl$VIDIOC_ENUMAUDOUT(r14, 0xc0345642, &(0x7f0000000100)={0x2, "1e896b9d30504aa3ba60808d70d37139dc04cfadb16f70a9d6c069412df6a779", 0x0, 0x1}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r16 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r16, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x2) r17 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r17, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r18 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r18, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fchdir(r18) 05:22:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x210002, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fcntl$setlease(r2, 0x400, 0x2) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503de62997f912167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9ad1fa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc7467e70fc139b8"], 0x2, 0x2) write$FUSE_ENTRY(r1, &(0x7f0000000180)={0x90, 0x0, 0x3, {0x4, 0x1, 0xffffffff, 0x2, 0x8, 0x2, {0x1, 0x7, 0x9, 0x7, 0x9, 0x7, 0x10000, 0x5, 0x4, 0x7a6, 0xffff, r3, r6, 0x4, 0xfff}}}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'bond_slave_0\x00', {0x2, 0x4e21, @multicast1}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$caif_stream(0x25, 0x1, 0x3) 05:22:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) recvfrom$rose(r0, &(0x7f0000000200)=""/126, 0x7e, 0x40000002, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket$caif_stream(0x25, 0x1, 0x8003) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x480000, 0x0) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x45, "993ecc", "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"}}, 0x110) [ 808.390149] net_ratelimit: 16 callbacks suppressed [ 808.390154] protocol 88fb is buggy, dev hsr_slave_0 [ 808.400258] protocol 88fb is buggy, dev hsr_slave_1 05:22:38 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000001091903000000000000000208000000"], 0x14}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:22:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x2001000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x80000006}]}, 0x10) [ 808.550134] protocol 88fb is buggy, dev hsr_slave_0 [ 808.555300] protocol 88fb is buggy, dev hsr_slave_1 [ 808.720135] protocol 88fb is buggy, dev hsr_slave_0 [ 808.725293] protocol 88fb is buggy, dev hsr_slave_1 [ 808.730456] protocol 88fb is buggy, dev hsr_slave_0 [ 808.735528] protocol 88fb is buggy, dev hsr_slave_1 [ 809.110110] protocol 88fb is buggy, dev hsr_slave_0 [ 809.115245] protocol 88fb is buggy, dev hsr_slave_1 05:22:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:40 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6ba7a95048317940}, 0xc, &(0x7f0000000280), 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) 05:22:40 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101040, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffe, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r1, 0x0) 05:22:40 executing program 0: fchdir(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000100000ff0000000000005facf5dc917ad6e78de8a1ab1fac4f3d000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000ecf65299a93b2afd00000000000000000000000000000000d700"/247], 0x225}}, 0x0) [ 810.666688] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x4000000000000002) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) capget(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x4, 0x280000, 0x10001, 0x4, 0x5}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x0, 0x1000}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'wp384\x00'}}}]}, 0x138}}, 0x0) 05:22:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:22:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000060033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) modify_ldt$write2(0x11, &(0x7f0000000100)={0x100, 0x20001000, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) [ 810.741903] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 810.769648] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 810.906632] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure 05:22:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x400, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@multicast2, 0x0, 0xff}, @in=@multicast1, {}, {0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newaddr={0x20, 0x14, 0x800, 0x70bd25, 0x25dfdbfe, {0xa, 0x40, 0x9782acae55a644c8}, [@IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) 05:22:41 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6ba7a95048317940}, 0xc, &(0x7f0000000280), 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) 05:22:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xd9, 0x0, 0x0, 0xff, 0x0, 0xfffffffffffffffd, 0x1c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x2, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x5) r2 = syz_open_pts(r0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x3, 0x808440) 05:22:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x8, 0x4) socket$caif_stream(0x25, 0x1, 0x3) 05:22:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x2, 0x1, 0x4, {0xa, 0x4e20, 0x6, @empty, 0x9}}}, 0x32) 05:22:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x40080) 05:22:41 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r1, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x6000, 0x0) getsockname$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r7, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r8, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff0d00000000000005000000000000000600000000000000", @ANYRES32=r5, @ANYBLOB="000000000400"/28, @ANYRES32=r0, @ANYBLOB="00000000012100"/28, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000600"/28, @ANYRES32=r2, @ANYBLOB="000000000000001000"/28, @ANYRES32=r8, @ANYBLOB="000000000100200000ecd9eb06057c19630000"]) 05:22:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x3}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 05:22:41 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6ba7a95048317940}, 0xc, &(0x7f0000000280), 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) 05:22:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x701}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x482120}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0xfffffffffffffd10, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x26d, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_PROP={0x14}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d4f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60000}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4080}, 0x8050) [ 813.590124] net_ratelimit: 24 callbacks suppressed [ 813.595152] protocol 88fb is buggy, dev hsr_slave_0 [ 813.600262] protocol 88fb is buggy, dev hsr_slave_1 05:22:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6836, 0x29, 0x4, 0x8000}, {0x4, 0x86, 0x8, 0x10001}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) timerfd_create(0x0, 0x79e942766e2fd882) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:44 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r1, 0x0) 05:22:44 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x10002, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r8, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') ioctl$TCFLSH(r3, 0x540b, 0x3ff) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r10, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000280)=0x201, 0x4000000000dc) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') ioctl$KVM_S390_UCAS_UNMAP(r9, 0x4018ae51, &(0x7f00000000c0)={0x8000, 0x7ff, 0x2}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x81800004}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r11, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000060}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r11, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}}, 0x40) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x6, @rand_addr=0x5, 0x4e21, 0x2, 'none\x00', 0x0, 0x0, 0xf}, 0x2c) 05:22:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0x3, 0x15, {0x55, 0x3f, 0x2, {0x8, 0xfff8}, {0x3}, @rumble={0x0, 0x3}}, {0xa1, 0xffc0, 0x0, {0x7, 0x3}, {0x3, 0x1f}, @period={0xb6, 0x8e1, 0x1, 0x6, 0x9, {0x6, 0x8, 0x4, 0x3ff}, 0x4, &(0x7f0000000100)=[0xd392, 0xa408, 0x7, 0xfeff]}}}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r0, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4401, 0x0) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f00000000c0)={0xc697, 0x8, 0x7f, 0x7, 0x4d91}) dup3(r5, 0xffffffffffffffff, 0x0) 05:22:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x1000}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe801a000000000000000000000200000000000000000000000000000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = dup2(0xffffffffffffffff, r1) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032cbd7000ffdbdf2501000000080002000001000010000400020e0000e58700000400000000000000000000000400040008001300090000000800050002000000"], 0x48}}, 0x20000000) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x440080, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) openat$cgroup_int(r3, &(0x7f0000000300)='notify_on_release\x00', 0x2, 0x0) fsetxattr$smack_xattr_label(r6, &(0x7f0000000280)='security.SMACK64\x00', &(0x7f00000002c0)={'-@[md5sum\'wlan0posix_acl_access'}, 0x20, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000000c0)={0x1f, 0x9, 0xff, 0x0, 0x2, 0x9, 0x3f, 0x0, 0xef, 0x8, 0x2, 0x9, 0x0, 0x200, 0x4, 0x2, 0x20, 0x20}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r10 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x4e22, 0x8, 0x4e22, 0x0, 0xb, 0x20, 0xa0, 0x4676bc7dea91744b, 0x0, r10}, {0x100000001, 0xc0f6, 0x7, 0x6e, 0x10001, 0x8, 0x100000001, 0x6}, {0xfff, 0x7, 0x0, 0x2}, 0xfffffffb, 0x6e6bc0, 0x1, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d5, 0x33}, 0x8, @in=@loopback, 0x3504, 0x1, 0x2, 0xc1, 0x8, 0x0, 0x3}}, 0xe8) [ 814.385822] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 814.411153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:22:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x225}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) r2 = getpid() tkill(r2, 0x9) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0xf2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0xa, 0x0, 0xfffffffb, 0xcf, '\x00', 0x6}, 0x6, 0x20000000, 0x4, r2, 0x4, 0x8000, 'syz1\x00', &(0x7f00000000c0)=['nodev}.\x00', 'md5\x00', 'md5\x00', 'md5\x00'], 0x14, [], [0x3, 0x4, 0x5, 0x1]}) 05:22:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000180)={0x0, @data}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) 05:22:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr="072b6e3e0e0de0c5f38da35e01cbb09c", @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0xffffffffffffff48}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3, 0x3}, 0x10) 05:22:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)="889908da42d9f0cb20a7c64b19a51942bd92d3b41d1c7c36f76df6e73f2de79549caca510a818dbfe96065018f370e6e5db08b297457698efd12269200c7a4c15879791bf6348f4edee1a5a00b8ee7e0d8960485c7a5060d7652fc26e1e7db5b1b7c8654609e90b163925bf37d2639b098d7ff2bdbf7ba211787dc4dde2ef25b43e6e9359aa0c1e7737e60fb4f2f8d3e7a78d9fa0c463c046ed87c26eac1aa1f22aee10b4dd8cb99e74c0e549badbb9db1becbb34361c923bf76f4d523ee353104468945dc7937155fcd5517f87e1b14eb3df5ed0839768b7330a97181164051d1d4e7ebbbca40c195664c1ce184b4bccc"}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYPTR64=0xfffffffffffffffd, @ANYRES64, @ANYRES32, @ANYRESOCT=r1], 0x5}}, 0x0) 05:22:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000480)) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) [ 814.630135] protocol 88fb is buggy, dev hsr_slave_0 [ 814.635252] protocol 88fb is buggy, dev hsr_slave_1 [ 814.790190] protocol 88fb is buggy, dev hsr_slave_0 [ 814.795329] protocol 88fb is buggy, dev hsr_slave_1 [ 814.960128] protocol 88fb is buggy, dev hsr_slave_0 [ 814.965261] protocol 88fb is buggy, dev hsr_slave_1 [ 814.970439] protocol 88fb is buggy, dev hsr_slave_0 [ 814.975510] protocol 88fb is buggy, dev hsr_slave_1 05:22:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xde34090d8e3694bb) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000140)={0x6, 0x7fff, 0xbe}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200781, 0x1) fchmodat(r2, &(0x7f00000000c0)='./file0\x00', 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendto$inet6(r3, &(0x7f0000000500)="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", 0x1000, 0x4080001, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) 05:22:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x8, 0x6) 05:22:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180)={0x9, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0xb, 0xfff, 0x3}, &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x7}}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r7, 0x4000000000000002) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f0000000540)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x10, &(0x7f0000000380)={&(0x7f0000000080)=""/184, 0xb8, r6}}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:47 executing program 2: r0 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x70bd2a, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) dup3(0xffffffffffffffff, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r1) keyctl$revoke(0x3, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r1, 0x38, 0x90}, 0x0, &(0x7f00000000c0)="bd2718da294a68f592df8fc95db67be9c15bdadf3d4f893e023d91e6745197e36e0413d157c60c1042e508cccf4fac2e12fe000b743d1cc8", &(0x7f0000000100)=""/144) 05:22:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) 05:22:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x1, 0xfff}) 05:22:47 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0xd37feb7dbc7665b3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0xd3, 0x7}) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) 05:22:47 executing program 0: mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x120000, &(0x7f0000000080)={[{@mode={'mode'}}, {@mode={'mode', 0x3d, 0x40}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x4586000000000}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x8}}], [{@pcr={'pcr', 0x3d, 0x4}}, {@hash='hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x39, 0x38, 0xd9c41dedcf030937, 0x62, 0x31, 0x64, 0x37], 0x2d, [0x9e, 0x0, 0x31, 0x63], 0x2d, [0x32, 0x32, 0x33, 0x63], 0x2d, [0x30, 0x6, 0x33, 0x32], 0x2d, [0x32, 0x30, 0x35, 0x37, 0x33, 0x35, 0x35, 0x3875cbc3c08f6870]}}}, {@subj_role={'subj_role'}}, {@audit='audit'}, {@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x9}}]}) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r0) keyctl$revoke(0x3, r0) r1 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='\x00', r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000002c0)={r1, 0x7c, 0x5b}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'sha1\x00'}}, &(0x7f0000000380)="01ec5ddb75c1cbb75ff58fbf797e289ba4574ada92a024d960eb0dd43eaa675bc0ed2e00aae701c2c43fdefce115e29622e08f11df35236bfa9c37a5ea854712990b3158e0c921ccf3515c77c9cc50bd69e3ca49624bf96773149cf0a1bd14d31658c506bff55f61e0ee54b945b81bcb1c9c63d1f0de2e6c71656a43", &(0x7f0000000400)=""/91) socket$nl_xfrm(0x10, 0x3, 0x6) 05:22:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x100) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000140)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000009000000000000000000000000000000000000000000bfa0000001000000b60000f5a403c5291e104031e3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x4}, 0x1, 0x0, 0x0, 0x84a}, 0x20000000) [ 818.790106] net_ratelimit: 16 callbacks suppressed [ 818.790112] protocol 88fb is buggy, dev hsr_slave_0 [ 818.800236] protocol 88fb is buggy, dev hsr_slave_1 [ 818.950110] protocol 88fb is buggy, dev hsr_slave_0 [ 818.955212] protocol 88fb is buggy, dev hsr_slave_1 [ 819.110163] protocol 88fb is buggy, dev hsr_slave_0 [ 819.115303] protocol 88fb is buggy, dev hsr_slave_1 [ 819.120451] protocol 88fb is buggy, dev hsr_slave_0 [ 819.125503] protocol 88fb is buggy, dev hsr_slave_1 [ 819.510121] protocol 88fb is buggy, dev hsr_slave_0 [ 819.515233] protocol 88fb is buggy, dev hsr_slave_1 05:22:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x1b0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) r6 = dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000200)=r10) dup3(r2, r0, 0x0) ioctl$CAPI_GET_PROFILE(r6, 0xc0404309, &(0x7f0000000240)=0x5efb) 05:22:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x5}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', r7}) r9 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001540)={{{@in6=@loopback, @in6=@mcast1, 0x4e23, 0x400, 0x4e24, 0x200, 0x2, 0x20, 0x80, 0x89, r8, r9}, {0x0, 0x2, 0x9, 0xffbd, 0x10000, 0x1ff, 0x0, 0x8}, {0x5, 0xfffffffffffffffc, 0x2}, 0x1, 0x0, 0x1, 0x1, 0x1}, {{@in6=@local, 0x4d6, 0x3c}, 0x2, @in6=@rand_addr="7076853fbc5c7d2edc3727f459cc8921", 0x3500, 0xdc90bae49548e310, 0x1, 0x8, 0x8, 0x863, 0xc75}}, 0xe8) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x4000000000000002) dup3(r11, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000000)={r14}, 0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000500)={r14, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r15 = syz_open_pts(r2, 0x4000000000000002) dup3(r15, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2b, 0x4, 0x0, {0x2, 0x2, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:50 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000003000000000400"/88], 0x58) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x73}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socket$caif_stream(0x25, 0x1, 0x3) 05:22:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0xa, 0x8, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x7}, [@typed={0x8, 0x2d, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r3, @ANYBLOB="0500000000870000"], 0x20}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x1f0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x100, 0x12, {{'morus1280-avx2\x00'}, 0x588, 0x60, "afc4f9178e211f47028a280aa68c68cf3ef36d034b6556f599bb4628e4874d887c56d9816a30c2cbd4430ce2e3db15bb95031181b9f3f7958355f07b3eaaeaeea03a9451f9a614a0d31764b81948a01368eb7c8877ee69de4df13c6cea06476928346a4afdd172e0a1987382e8a5dab1aca98d4284ca9b56dfa8087c7884cc9c7a96fd602b6b8f7be34f00b611dd74c2be6b480b2d8bd3c2baed48dfc0bd36419494fcfb90b01f7ad6c741f41f33b4439e"}}]}, 0x1f0}}, 0x0) 05:22:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:22:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8000, 0x80, 0x7, 0xd, 0x9}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x1, 0xff}, &(0x7f0000000140)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000003000000fe8000000000000000000000000000000000000000000000000000000000000100000000000020000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffff33000000fe8000000000000000000000000000aa0000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/230], 0x138}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 05:22:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x69}, 0x28, 0x0) 05:22:50 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x1) syz_open_pts(r2, 0x4000000000000002) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000340)={0x3, [0x7, 0x3, 0x8]}, 0xa) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000380)=0x6) fcntl$setpipe(r4, 0x407, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendto$inet6(r1, &(0x7f0000000100)="94a8ad6b7dbdbd04efeebd89b8a80460de40c939a2d95cac00888faf0281b215f320f5225376f348058e37494297a06d113a9c06b020a8bd9a238a9cb9e6ab88e478a208de9a770a89c8b40876e9e819187bc85e1c65f7667f44706f103c10ec7ed16f1c4b4a1ec90763835cb899d9", 0x6f, 0x4000000, &(0x7f0000000240)={0xa, 0x4e23, 0xf1, @empty, 0x9}, 0xffffffffffffff1e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x100000000, 0x8001}) 05:22:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {0x0, 0xfffffffc}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:22:50 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x408000, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="ed3e884632c6e96fab4e9c0112fc787dd0e7ee8241ce99277f4d021bc73b539d18acc3bfd63a3afd998b38270608b68c2deaa4ef976c2216f5ec3e65ba932ed0397da8bf9e668d1dc982541483dedca0c1c5091c10fca4788932d296190abfb734bcb3840727d9fed4dc60f140e577b53bbc627726012bd28dd44ba815504ef7ae3972859c2d0ab4f4c8b1830dfbdbb60996", 0x92}, {&(0x7f00000001c0)="fe14c4ae801a579b6bd4d76734fc6462d95fc8daca6da19c0ac76da3debd4b9e1c0b5ca6f59d7046cb496de86327b7a2", 0x30}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff7f00ee00000000840000a35e0008000000fe880000000000000000000000962a1f"], 0x20, 0x40}, 0x10) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x400, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$FICLONE(r1, 0x40049409, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:22:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@rand_addr=0xffffff7c, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x7fffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) socketpair(0x1, 0x1, 0x40, &(0x7f0000002840)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000028c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x15620280}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x3c, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048000}, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7fc0, 0x180}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={r5, 0x8, 0x101, 0x6}, &(0x7f00000001c0)=0x10) r6 = socket$isdn(0x22, 0x3, 0x25) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000200)={'caif0\x00', 0x10001}) 05:22:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x110, r3, 0x3f) dup3(r2, r0, 0x0) 05:22:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000009dd6bc6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000080ffffff0000000000000000000000000000000000000000000000000000000000000012f8aa9600"/240], 0x225}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x181082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x7, 0x9, "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", 0x20, 0x6, 0x40, 0x9, 0x8, 0x81, 0x2b}, r5}}, 0x120) 05:22:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000000c0)={0xb, {0x4, 0x1, 0x8}}) 05:22:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:53 executing program 4: gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005900)=[{{0x0, 0x3a5, &(0x7f0000000800)=[{0x0}, {&(0x7f00000003c0)=""/168, 0xa8}], 0x2bd}}], 0x1, 0x12000, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400000000000581, 0x0) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r7 = dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) r9 = gettid() tkill(r9, 0x2000002f) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) gettid() ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000140)) r10 = getpid() tkill(r10, 0x9) [ 823.114074] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 05:22:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0xc3730349eb3acd35, @perf_config_ext, 0x33f550bb1fdb9da4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat(r6, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000140)={r8, 0x20}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r8, 0x1}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f0000000600)={r8, &(0x7f00000003c0)=""/221}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000000)={r8, &(0x7f00000000c0)=""/232}) 05:22:53 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2ff28b6980e9342f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xaf, 0x0, [], {0x0, @reserved}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0300000000000100000008000400020000009bb83d1fe343e927ad854c092500392bb0da4f8c55ddbabb87da542bafa150db6b2ef6069b7eb15893b9dc2ff3fb9e1169e1447ea18164435222ba49a30c249da49d310f1e4fc049f3db4a61026c8184379f4e7861270ed06fb0312aad0357d28f829844"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e21}]}, 0x28}, 0x1, 0x0, 0x0, 0x654a8054d7009f52}, 0x40) 05:22:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x1b}, @in6=@loopback, 0x0, 0x800}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {0x3}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x6}}, 0x0) 05:22:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR64, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT=r2, @ANYBLOB="5e11b9bec809bd5cc4f76680b57a8b4436c33e255a786844a8c475ab5e8121c6b616b732b9dc1bddcc19cc684d86af3b9c512b4d29735d0d1fdfa6a0595d25b9408e8608455e47ebb022f9c0a7debb7546dcde2efe6f6f579977236469d9daab56223bc07ee60232317515baa0ec733e5928117cd57ae22f64b5cfbfd8ad1478067e9a3419566fa782df2b239950872071fd9813c06ade5fd79ff0eb865c996eee8f63a9aaafcc461822dcae9bb3666148a4c090365b1df0e02a8254fa778218a73a420845c0bc10edf8a9ca91a8aefdbf5134a1c8", @ANYRES64=0x0]], @ANYBLOB="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"], 0x4}}, 0x0) 05:22:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) accept4$unix(r1, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000140)=0x1ff) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000081000000fe8000000000000000000000000000aa0000005cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000020000000000000000000000480001006d6435000000000000000000000000000000000000000000000000000000000000000000a44191638d423aba14ed1408b8ac00"/240], 0x4}, 0x1, 0x0, 0x0, 0x560a7a9f34ef30ef}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x80000, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x200c00, 0x40) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f00000000c0)) 05:22:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 05:22:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe800000000000000000000000000000000000000000000000000000000000010000000000200000000000000000000059c7957e05030c9c5de6137f7767d0c7ffe053689b775d59932493a2a0d45899b313e7e7920cf91c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) [ 823.619785] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 823.990126] net_ratelimit: 24 callbacks suppressed [ 823.990131] protocol 88fb is buggy, dev hsr_slave_0 [ 824.000267] protocol 88fb is buggy, dev hsr_slave_1 [ 825.030164] protocol 88fb is buggy, dev hsr_slave_0 [ 825.035260] protocol 88fb is buggy, dev hsr_slave_1 [ 825.190168] protocol 88fb is buggy, dev hsr_slave_0 [ 825.195255] protocol 88fb is buggy, dev hsr_slave_1 [ 825.350149] protocol 88fb is buggy, dev hsr_slave_0 [ 825.355267] protocol 88fb is buggy, dev hsr_slave_1 [ 825.360414] protocol 88fb is buggy, dev hsr_slave_0 [ 825.365492] protocol 88fb is buggy, dev hsr_slave_1 05:22:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000200)=0xc3e) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000010030007000000000000f9d36c392988f2b6320a8af1d19e320000fe8000000000000000800000e0000000000000000000000000000000000000000100000000000000000000000000000000f752", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0xffffffffffffffff) 05:22:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6=@mcast1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'tgr192\x00'}}}]}, 0x138}}, 0x0) 05:22:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r8 = openat(r5, &(0x7f0000000240)='./file0\x00', 0x305a82, 0x2c6) sendmsg$kcm(r8, &(0x7f0000000840)={&(0x7f0000000580)=@vsock, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)="966a228f4319d1b80f27ef852183ac07e39689b20f2becd6bc9e96c224bd24727d333997299483acb21d4256a8127f0f43f0071d05f5779f7c082411bb4aab942cef14343b5f9be2fb2ed85289a74894d4abbd39e6fb7e50beb0e26268930080e85e2c406ea0acc5e2", 0x69}], 0x1, &(0x7f0000000680)=[{0xb8, 0x117, 0xfffffffc, "9da2f9ff64e7503e593b860c56848a79c7922606cd608ce78fc10a156623cbd6b9d4482da68ae0470dbc0699ed942981f0aac26d66dc10b629052e3098060b9457cc59e3244c3969d3e21175c42bf7a6d5e50f825b6d3e57ac35b86243d682afaf872d90d5152da1b9c7191748c94b791026da0075aba77419c8d8fd02c086ec9e145e4ffe55b02d9143658db62651556976b6b40269e28b5f87c7473453227d3d4bc487379e"}, {0xf8, 0xff, 0x1, "51c9aab7cece7364cc02a918714997f2ec855a97177865494ca7d88b50cc8a341557ba9f91b20eb80ee40d2d9a672723584723228f6e3999903ac641b7918e21b28c775e5fa047553bd75b4d44cde134fd9cd4006e96e799918d6e149a0d6c048853c21ec94d30e513093d2c46ab6aceaee77f639d42e6492d1ef638ad18b8e37748bfaca080c5e18045da654ccaf847fc7abd446bf074e97484ce0558359f90be8d21e0ec8f2327c34aebdf96adff9442013edab2606dce853d0beef999f8fa2bee83c7bed82cac9e9d47c677f4c2198ac308668f9f1ec69153cd1d6bddf1bcd9613965"}], 0x1b0}, 0x8000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x6, [[0xcda6, 0x0, 0x7fff, 0x4, 0x80, 0x3f, 0x2, 0xef70], [0x3, 0x4, 0x8, 0x20, 0x7f, 0x5, 0x4, 0x2], [0x3f, 0x3f, 0x1, 0xffffff00, 0x0, 0x3f, 0xecc, 0xb80000]], [], [{0x8, 0x1, 0x9}, {0xffffffa4, 0x9, 0x5}, {0x8be0, 0xda7, 0x4}, {0x6, 0x9, 0x3ff}, {0x7, 0x5, 0x1}, {0x3, 0x6, 0x6}, {0x6, 0xffff, 0xfd8}, {0xffff, 0x4fbf7159, 0x6}, {0x8, 0x3, 0xc02}, {0x3, 0x6, 0x7}, {0xd0a1, 0x6, 0xf9}, {0x100, 0x2, 0xfffffeff}], [], 0x3}) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000001c0)="f04d215705c84ab466") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="d70ebcd027240458aa46000001000000000000", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000000)={r11}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x401, 0x5, 0x18201, 0x2, 0x1, 0x8, 0x435, 0x3, r11}, &(0x7f0000000100)=0x20) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x5, 0x2, 0x54, &(0x7f0000ffc000/0x4000)=nil, 0x10001}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r12, 0x1}, 0x8) socket$caif_stream(0x25, 0x1, 0x3) [ 826.213231] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=784 sclass=netlink_xfrm_socket pig=29209 comm=syz-executor.3 05:22:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}}, 0x4082) 05:22:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0xc, @win={{0x81, 0x866, 0x1}, 0x0, 0x3ff, &(0x7f0000000080)={{0x8, 0x9, 0x7, 0xfa}}, 0x6, &(0x7f00000000c0)="98487eefe847ec1dc2fc007b300fe6181bb2b8e18dce2329db5e7ce4f8672a7d96d310586c656e186c5d45481903c198262db6ff983d600c0f5300af91dfb8a4eb37", 0x8}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010001307000000000000000000000000000000000000000000000000000001000000000000000d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:22:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffc}) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x4) r6 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x68, 0x481) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x81000000) dup3(r2, r0, 0x0) 05:22:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'bridge_slave_0\x00', 0x80}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r4, 0x100, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ib={0x1b, 0x228c, 0x6, {"ab8db2fed625efaa5a7272780aaf5443"}, 0x100000000, 0x1c000, 0x1ff}}}, 0x118) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x4d3, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x20000000, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x880, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x200) 05:22:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 05:22:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/adsp1\x00', 0x101000, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmmsg$unix(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="e3f447b11c2f22f002f8a4fa60dbd4a097afcb17f5dacc40a607f5374e4f0ad61f5f114c8f4bb65e509544ea3febe6a1cea8e7613e6c2281b05db9f6d9179cc0cdaef68f763a085a6e01e9f63e1d155d450f2e6f38862430e5f34f6e9397ec5688b6601d1e9dae6d316464e176dee4bc3d9c2838", 0x74}, {&(0x7f0000000280)="b9a6aa8518c52e4cc67efafb0bb3ea3355cede88dde2525ee86c9656c19904460a839d99e7f45d8fe6270517df96faf0427e17be3dbbda29b21a28d7e31d9750842a81c484778bf3690cf14cbf407a4aa13acf008090dc4c47524ed22884359d813fc41efe21dbf288d8d6ffd40044c3131d618fc9cc05f582be877c1c93dc66019da54ec1079e5f0c084efd76812167e3f205ee26e2", 0x96}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000001c0)="c38d539d008ebc4c0e679e3b8a88734ec80648d85af69add612aafac39d20084762c9ca78434f959d33a825ff7844e9fa70aab0f8bfd2bc87e11080c0cd189919452d27f3ec9", 0x46}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000340)="86bd12e70889e502ab79100cac14bb59c4e934fbf2fd01d8eb4a4bca9119581fa3544cabeae74ed69db05004ae8407798a2151a6acff167930e35eb5e6facbd01c8c2ac365c468a499f21c797ba32dbc8991583d530db19efbce2e57c0568928b65dfc50e2ead1f60b425e58685023014dd5962feddb7ef02695cbaf7c24b43229427ac944ea11472d9092918336716c", 0x90}], 0x6, &(0x7f0000002580)=[@rights={{0x2c, 0x1, 0x1, [r1, r2, r3, r0, r4, 0xffffffffffffffff, r5]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x48, 0x4c000}], 0x1, 0x4010) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f00003b9fdc)) r10 = syz_open_pts(r9, 0x4000000000000002) dup3(r10, r8, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r8, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) bind$unix(r8, &(0x7f0000002600)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r11, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x40, &(0x7f0000000000)=0x6, 0x4) r12 = syz_open_pts(r7, 0x0) dup3(r12, r0, 0x0) 05:22:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0xc3730349eb3acd35, @perf_config_ext, 0x33f550bb1fdb9da4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat(r6, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000140)={r8, 0x20}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r8, 0x1}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f0000000600)={r8, &(0x7f00000003c0)=""/221}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000000)={r8, &(0x7f00000000c0)=""/232}) 05:22:59 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x181, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r3}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockname(r2, &(0x7f0000000300)=@can, &(0x7f0000000600)=0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0x5, 0x100000001, 0x7, 0x9, 0x1ff, 0x9, 0x7ff, 0x5, 0x7fffffff, 0x0, 0x2, 0x9, 0x0, 0x8, 0x3]}, &(0x7f0000000280)=0x100) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) prctl$PR_SET_FPEMU(0xa, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={r10}, 0xc) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="62ad8800ef6e6fce2fd52aa31037aeade3ace964097bbfda36c230f687dd48f3a391891422bd3e6fa238cc7f7e8429", 0x2f}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="3000000000000000840000000100000005000800dd8e00000010000009000000050000000100000018000000", @ANYRES32=r3, @ANYBLOB="180000000000000084000000000000004000fbff0200f1661800000000000000840000000600000001000000000000003000000000000000840000000100000003000200090000001f0000000900000001000000fcffffff01000000", @ANYRES32=r7, @ANYBLOB="30000000000000007a000000010000000000e9fa7925fc28e5e906000002009b0800f04500"/52, @ANYRES32=r10], 0xc0, 0x801}, 0x4000000) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:59 executing program 2: socket$caif_stream(0x25, 0x1, 0x400003) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) dup3(r8, r6, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r6, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f00000000c0)={0x7, 0xffff}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001300)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000001400)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@local, 0x4e22, 0x6, 0x4e23, 0x4, 0x2, 0x0, 0x40, 0x84, r9}, {0x1, 0x10001, 0xffffffffffffff11, 0xffffffffffff5c2c, 0x9, 0x6, 0xfffffffffffffe01}, {0x4, 0x5, 0x7, 0x7}, 0x5, 0xfffff801, 0x1, 0x2, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x1, 0x0, 0x5, 0x4, 0x5}}, 0xe8) [ 829.190121] net_ratelimit: 16 callbacks suppressed [ 829.190126] protocol 88fb is buggy, dev hsr_slave_0 [ 829.200375] protocol 88fb is buggy, dev hsr_slave_1 [ 829.350133] protocol 88fb is buggy, dev hsr_slave_0 [ 829.355297] protocol 88fb is buggy, dev hsr_slave_1 05:22:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr="00000000000e3c0400000000000600", 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0xbb827fb5f698b52d, 0x4e22, 0x4e20, @in=@multicast2}}]}, 0x10c}}, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/68, 0x44) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00') getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) readahead(r1, 0x6, 0xc3a) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r5 = fcntl$dupfd(r3, 0xfdeea44b52d34b5d, r4) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000580)) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r7 = dup3(r2, r6, 0x80000) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r8, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000001c0)={0x40000010}) [ 829.510142] protocol 88fb is buggy, dev hsr_slave_0 [ 829.515662] protocol 88fb is buggy, dev hsr_slave_1 [ 829.520835] protocol 88fb is buggy, dev hsr_slave_0 [ 829.526035] protocol 88fb is buggy, dev hsr_slave_1 05:22:59 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getpeername$tipc(r7, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0xde}) r10 = syz_open_pts(r2, 0x0) dup3(r10, r1, 0x0) 05:22:59 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202400, 0x111) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x2, 0x2, 0xb0a}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 05:22:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) socket$vsock_dgram(0x28, 0x2, 0x0) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000200)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) getsockname(r0, &(0x7f0000000340)=@hci={0x1f, 0x0}, &(0x7f00000003c0)=0x80) r12 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r12, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fstat(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x428e5014}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@migrate={0x148, 0x21, 0x2, 0x70bd25, 0x25dfdbfd, {{@in=@loopback, @in6=@local, 0x4e20, 0x0, 0x4e21, 0x9, 0xa, 0x0, 0xe0, 0x0, r6, r10}, 0x0, 0x1}, [@coaddr={0x14, 0xe, @in=@multicast1}, @sa={0xe4, 0x6, {{@in=@empty, @in=@remote, 0x4e22, 0x200, 0x4e21, 0x1, 0xdfd08814d9290452, 0x20, 0x80, 0xc, r11, r13}, {@in=@broadcast, 0x4d5, 0xed4a92475cbf5b79}, @in6=@dev={0xfe, 0x80, [], 0x21}, {0x401, 0x3, 0x3, 0x101, 0x1, 0x9c, 0x4, 0x3}, {0x40, 0x5, 0x2, 0x101}, {0xfffffff8, 0xfffffffd, 0x80000000}, 0x70bd28, 0x0, 0xa, 0x3, 0x81, 0x1cd0749c0faa3b69}}]}, 0x148}, 0x1, 0x0, 0x0, 0x804000b}, 0x8000) 05:22:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = getpid() tkill(r3, 0x9) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0xf2) syz_open_procfs(r3, &(0x7f0000000180)='wchan\x00') dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="dc6f3bf85d50a46990871acafc79853a72c7b64a83f6e1b35e1f9f463b9c70ea556c0ff33da1546da2108d839c463ad850717a220cc671a4e3ec8032e042124446e141efbb02f0a789a5", 0x4a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ipddp0\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x5, 0xf0}}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:22:59 executing program 5: r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x3, 0x2) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r7 = eventfd(0x80000000) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r8, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r10, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r11, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x3e783dd2dd2ccd94, 0x0) r13 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r13, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r14 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r14, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r15 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r15, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r16 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r16, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000540)=0x0) r18 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r19) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r22 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r22, 0x40045431, &(0x7f00003b9fdc)) r23 = syz_open_pts(r22, 0x4000000000000002) dup3(r23, r21, 0x0) ioctl$TIOCSETD(r21, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r21, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xb8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x3}, 0x0, 0x0, &(0x7f0000000800)={0x2, 0x9, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x10002}}, 0xfffffffffffffe8c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000280)='./cgroup/syz0\x00', r24}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, r21, 0x0, 0x4, &(0x7f0000000640)='md5\x00', r24}, 0x30) r26 = geteuid() r27 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r28 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r28, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r27, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r27, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r29, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503de62997f912167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9aeafa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc7467e70fc139b8"], 0x2, 0x2) r30 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r30, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r31 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r31, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r32 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r32, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r33 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)=0x0) r35 = geteuid() stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r37 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r37, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r38 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r38, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r39 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r39, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r40 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r40, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r41 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r41, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r42 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r42, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001040)={0x0}, &(0x7f0000001080)=0xc) r44 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r44, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r45) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000010c0)={0x0, 0x0}) r47 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r47, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r48) r49 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r50 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r50, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r50, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r49, 0x0, &(0x7f0000001700)=ANY=[@ANYRESHEX=r51, @ANYBLOB="9a0081702b25bf9d7faaa55d1c101418a541f2b952c634fa52ae84f67db334c8bf33fa9930f00aa4cd53d284432d908727b120111acdb1ade7247f249107a771ec24ddc26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503de62997f912167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9d69d4ce221a4dc4bb9ad1fa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc74"], 0x2, 0x2) r52 = accept$nfc_llcp(r0, &(0x7f0000001600), &(0x7f0000001680)=0x60) r53 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r53, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r54 = syz_open_dev$evdev(&(0x7f00000016c0)='/dev/input/event#\x00', 0x280000000000, 0x183402) r55 = syz_open_dev$sndseq(&(0x7f00000017c0)='/dev/snd/seq\x00', 0x0, 0xc102) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001800)=0x0) lstat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001c00)=0x0) r60 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r61 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r61, 0x40045431, &(0x7f00003b9fdc)) r62 = syz_open_pts(r61, 0x4000000000000002) dup3(r62, r60, 0x0) ioctl$TIOCSETD(r60, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r60, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_IP_XFRM_POLICY(r60, 0x0, 0x11, &(0x7f0000001c40)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000001d40)=0x7c) r64 = getgid() r65 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001dc0)={&(0x7f0000001d80)='./file0\x00', 0x0, 0x10}, 0x10) r66 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r66, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r67 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r67, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r68 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r68, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r69 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r69, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r70 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r70, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r71 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r71, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r72 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/ptmx\x00', 0x204800, 0x0) r73 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r73, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r74 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r74, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r75 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r75, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r76 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r76, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001e40)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000001f40)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000002140)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="2f7fd9c911a5dd60ae3e18ecc7f4b1ba966a05faade6044a010d31167e576e8af6e6b2ceb796c53b695d8718b0cb6b55ce9d178076fb6814dcfc495635c06feef9c2240383341161be19554c8be00aafac7f646b1950f34df7949d54c02f392c6a0859085a3b26d15c66b0f6f96be80d76054f404164fbde3fd0622bbd72534d73413bb92a879506437c7286ad895ec5fc3103ac405d0900d03246", 0x9b}, {&(0x7f0000000240)="47bcb894f55f72d380e763e98b3880baa88cfefa560f6f4251c29bb614d4a360adc79bee7e0b5c04cdc090c403f715efe0578b9828b3048eb16273f633a4e398b0a074957faa5a3898e2684ba70561c3e8b57f717e1b76ad4009d511ddb886fafd916f42dd93788ed85a29e795e00a1a7787ec34aaa8d26e6517c13ef8d90a65ffce1c2364e5599586a548a13a399bfe10068e4e2e972b2dcd5b71026d932f99bc8da51b18140ff2d364686559", 0xad}, {&(0x7f0000000300)="dbfd9cc0a03aa46515f0c9a127ce44a1332b48665c496bdf9089f11ac30176b306c9870b8af9d7027d213f5a4e992c", 0x2f}], 0x3, &(0x7f00000006c0)=[@rights={{0x38, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, r5, r0, r6, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r7, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r8, r9, 0xffffffffffffffff, r0, r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r10, r11, r12, r13, r0, r14, r15, r16]}}, @cred={{0x1c, 0x1, 0x2, {r17, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, 0xffffffffffffffff, r31]}}, @rights={{0x18, 0x1, 0x1, [r32, r33]}}], 0x130, 0x9}, {&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000880)="4ff2933bdaab6ebad0b2b67c32274e67889c1fa74b894bab7c07f85e11938d8b4760ce5b6b5b4f4cac531f7bd9a1cfb7ad730df0b1cecabfe41a4f6b7af03f8a8aaaa434e5bcdb802f66710f9cf67c66b6cb96085e38f243a5bbb4cf3441d95948489bfd56c82b57ad10f469bd1b04323efadecbb3a5f7efa153175b28a92f62c406f9e6380a5947b5612e40d0ecb847e03f8276224f31283f556be95cd5283daff14d5e8897eb382f34ee172e9f11be0a41ea52bd048f29fb4d09e3b9ef1233d6ebaea22dec5ed0", 0xc8}, {&(0x7f0000000980)="1c3dcaa34533d7d346e7747d65201de5bc86f84b979b3260edc4262123a84045fb112778e0e5f771c1fdc03bc2a35e1eb35b90c0089e187aa96df6927d4675d70b1318878cff56d5895c9e39308bc737287a4cf7c918e20efe21256eea6cce6eba5c0f174f513e61b3f3e112eafb1dbcc1781504d8b7570107da6f4e7be6eec9f43b7c6fe15aad793452536027612ba961883d", 0x93}, {&(0x7f0000000a40)="24d97250eaf2c7d91f532213479d2cbcd3458a4140989538b1756653a907fa0de13f70338ef83a885f90187c72e1a5ae94e9fdc126670a2a277fb7bf205ef6577a2a041af58179032bfd44e3ae5e432015e0bb39bec2b9452c52a260692229f4f8e4b4a49dc917e18beb0ce0", 0x6c}, {&(0x7f0000000ac0)="8c1a0e88c0", 0x5}, {&(0x7f0000000b00)="b04ecf67364b923697b305a85b2393816c5be0fe4b485ed1d3cd11a049fe80e8b13d8ed8efc89afcf38e59a02c3e29744882e0447da5bbb439bddef1f74e3e4c4bf2de95cc819b38ff929502fc3322b9325e2254d2fe25bf6f80ede99519e49024d739fb1499c6341d615d3efeb9204d7495778f40d2151871b06800a8f8ab5a7e43e1dbef6845bfd4ede853e0c00d31da17a7db88d7a56d7b8bcc25fb9b956eced17d64b6a0d3e48d8a2eb0e6908d44e9582c4e082360b56e1bd1f03efe4edd54d7ca0a09bcfc6b4f52c8ceba9da796709b371cad3b8714c1ee83893d0d382735b8fb3286bc08a78bbb13378464166fca3a960fbe64", 0xf6}, {&(0x7f0000000c00)="d2c397599c8c6a6bf8e713b61020720b850046921abedd58df8ea053ef9372761a2a27", 0x23}, {&(0x7f0000000c40)="d3d6d7443cd474850dc2202c9a373436af1d9f55bd770187a43edee117a4bb6725c1526599348fd891a0e8600cde551f7c0dde0f1b606fc6ce10d2d97d777a9943d7171aa94c1d95c0f1cf6d", 0x4c}, {&(0x7f0000000cc0)="3d8cd06ad24b238c79ab2b8e235bff3a7bc3ac9248d22001dab330ec59d5f63b75f2d0554ff4f376f44415a97745f219f199f8114021277fa0be4f8a89ed4a6a86023d3d8cda74cdef2423ee3e2192f87b8861a619a5630cfc180c6f22ac608c7935cb1ecb0686799e5618c9871a221bc408c119fcbf5a921af3399b60d3732fd4114688da0e7a23e9c47ad04554781cfa4f203fa0eab8c55ea9416242f72652d715c9fb11638597b5cf06f583c26df924e904d7964ec0", 0xb7}, {&(0x7f0000000d80)="eda11f441c79064ffed41c27eb32b7a622a3db6559faee7cdc6f42b526992a7b9d229385b46dd349b0ac5e4657e29564acaf702183064ccfcbdd454567f2a65e81157b35a10bfb059eb71666f2abef688e0370b7b0909feec95f42c213bd886d3a852e4f9929afc4468cd7c677dbb614710fde50243587c0e5aeeb1b758faff4d7abac737915d323f71b66131f4c3f0f3e3d741f072efaaad97739a0733a010c86802d3ddbb245ef1ed9355a7779256dc9756fcba40ce7f779acf9ba6fcb387244011d67db2f4c9f2068f58496ffff967e05c05c6f099da3e2c4ed91ae4d07764fa9812be50560e3a74d", 0xea}], 0x9, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {r34, r35, r36}}}, @rights={{0x18, 0x1, 0x1, [r37, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r38, r0]}}, @rights={{0x24, 0x1, 0x1, [r39, r40, r0, r41, r42]}}, @cred={{0x1c, 0x1, 0x2, {r43, r45, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r46, r48, r51}}}], 0xc0, 0x6286345c8897e0c9}, {&(0x7f0000001200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001280)="77a653da67a46353895337cd483ad8b8a64f82f3276c4b69c5713aceb2aa8b585c225f9a46420808a5f198d05adeeb23c07f4dbd78e7b958d0a1221abb1677d1becb817b8cb983db21d7f5463cc0776ec1691a8f76886b84338182013ceade55a5eebaebe5d1c64c5c0815aff50b0ca1", 0x70}, {&(0x7f0000001300)}, {&(0x7f0000001340)="f96e9a8ea8128e6a", 0x8}, {&(0x7f0000001380)="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", 0xfe}, {&(0x7f0000001480)="ce5a953e67b0ca226c49c4e696ea64645c049d9710ff495d630a5356144bf5eafad7117087c299e5d71d1c30a827231590394f5151d029ca0ecb05eab404bf2ec95f207ef6655f4960ed511d883a7774789ac7d9aee9f501f94c55186062bf0f508ce899ea9480cadd9b64f97c346a5c8a626e41f8af2c85115fb71b50bbae2779931d2a63445c9812656fca72902485ce30baae5891c092596c46ce66267a866f22415766276790e81e6d079ca5aab154d3524f75ae4277668d43f94faedeb9ebf63bde703b1bf2fa62a74b7b786a1e1bce98cc73a205f7529303f0294a5bc59e3833065fc49db24e9e610978", 0xed}], 0x5, &(0x7f00000019c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r52, r53, 0xffffffffffffffff, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r56, r57, r58}}}], 0x48, 0x2004c810}, {&(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="9af90d4c4ca08ef3d3fb7e065cad298dfa55336d2e9731b7e505e1f7d8c9c62187ba21ae3769b7d6b0711820f6b4efa40df6ce3061f5532d63a22515f26fc165a3f45b0dfcd9111c884e9c46bf4865f8ab288dc8e5e25928edae9e1e1661f734f7b7fcc48cac87c69ca0421d10f8194900b86a7e280e8644d6a3eafc61ef0b7e97", 0x81}, {&(0x7f0000001b80)="980b09434c8c1acddc0c7d1445", 0xd}], 0x2, &(0x7f0000002000)=[@cred={{0x1c, 0x1, 0x2, {r59, r63, r64}}}, @rights={{0x24, 0x1, 0x1, [r0, r65, r0, r0, r66]}}, @rights={{0x24, 0x1, 0x1, [r67, 0xffffffffffffffff, r0, r68, r69]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r70, r0, r71, r72, r73, r0, r74, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r75]}}, @rights={{0x14, 0x1, 0x1, [r76]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r77, r78}}}], 0x118, 0x1}], 0x4, 0x20000410) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r79 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r79, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r79, 0x801c581f, &(0x7f00000000c0)={0x8000, 0xfffffffe, 0x2458e15f, 0x7, 0x8}) 05:22:59 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x8) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000240)=0x100) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') r2 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x4701, 0x20a01) connect$nfc_llcp(r2, &(0x7f0000000400)={0x27, 0x0, 0x1, 0x0, 0x7, 0x7, "d436f242c0cef6db0b973c7520224e06ab4e87c67b92335bda81e43af6a5c84f66ac84918cff4f55028764369792d4de2920918a0cc175a452717b1e52dcf7", 0x3d}, 0x60) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x310, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc060000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d9f8a2107de0daa1ea4473a6ad00000000000000000000003f0001476d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee000000000000"], 0x4}}, 0x0) 05:23:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) poll(&(0x7f0000000080)=[{r1, 0x1143}], 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380100001070000000000000001749805d8efa84bc13070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) [ 829.910150] protocol 88fb is buggy, dev hsr_slave_0 [ 829.915390] protocol 88fb is buggy, dev hsr_slave_1 [ 829.937263] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28688 sclass=netlink_xfrm_socket pig=29296 comm=syz-executor.0 05:23:02 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x225}}, 0x0) 05:23:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000000000000000000000000000aa0000c40000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008cd4fbc120ea080443"], 0x4}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$midi(r2, &(0x7f0000000300)="77fd7ab5fc6541914fc0bc1e04585154c320c255c1d77e25bfa28a2841be61ee79fcae876f50a2706dd58f0b447f146c1b7f5200620a026ce85a70ac3be53513f4ee4c374eb612559f4ffe8c57c4a2f15f047d90578f677808bfb04acf839c2fbfb394e4c08d2e93711f243d4d5fbd0b3e5744543ea7005848c1682d9d762ba65479ee72f17275c9e3a0cffe989b0f69747b2fe0e3fdaeacd3bdeb4f9f9cc3c7f4345df78f986ddcb9c6e0cf17ecbd9c0c9bba90", 0xb4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsetxattr$security_selinux(r3, &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:var_lock_t:s0\x00', 0x20, 0x2) 05:23:02 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, r0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x7685db7a6c88967b, &(0x7f0000000240), &(0x7f00000000c0)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/103, 0x67}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r5}) 05:23:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xff, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x7, 0x8000]) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newsa={0x17c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x4}, {}, {0x0, 0x7}, 0x0, 0x0, 0x2}, [@algo_auth={0x8c, 0x1, {{'md5\x00'}, 0x220, "628c6976ddce497e6a617c60754093a6c38529e55667cfa59c3f9913fb1aecd74c48deb04e0d9ce16c5a597db6a4d54dc57aa6a7df27de159128661d93cade9b15871f9c"}}]}, 0x17c}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x44000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) [ 832.348133] FAULT_INJECTION: forcing a failure. [ 832.348133] name failslab, interval 1, probability 0, space 0, times 0 [ 832.379939] CPU: 1 PID: 29313 Comm: syz-executor.1 Not tainted 4.14.157-syzkaller #0 [ 832.387871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.397227] Call Trace: [ 832.399838] dump_stack+0x142/0x197 [ 832.403486] should_fail.cold+0x10f/0x159 [ 832.407643] should_failslab+0xdb/0x130 [ 832.411611] kmem_cache_alloc_node+0x287/0x780 [ 832.416195] __alloc_skb+0x9c/0x500 [ 832.419826] ? skb_trim+0x180/0x180 [ 832.423459] ? netlink_autobind.isra.0+0x1c9/0x290 [ 832.428419] netlink_sendmsg+0x874/0xc60 [ 832.432515] ? netlink_unicast+0x650/0x650 [ 832.432531] ? security_socket_sendmsg+0x89/0xb0 [ 832.432542] ? netlink_unicast+0x650/0x650 [ 832.445803] sock_sendmsg+0xce/0x110 [ 832.449508] ___sys_sendmsg+0x70a/0x840 [ 832.453475] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 832.458219] ? __fget+0x210/0x370 [ 832.461662] ? find_held_lock+0x35/0x130 [ 832.465716] ? __fget+0x210/0x370 [ 832.469279] ? lock_downgrade+0x740/0x740 [ 832.473417] ? __fget+0x237/0x370 [ 832.476876] ? __fget_light+0x172/0x1f0 [ 832.480899] ? __fdget+0x1b/0x20 [ 832.484254] ? sockfd_lookup_light+0xb4/0x160 [ 832.488732] __sys_sendmsg+0xb9/0x140 [ 832.492521] ? SyS_shutdown+0x170/0x170 [ 832.496500] SyS_sendmsg+0x2d/0x50 [ 832.500029] ? __sys_sendmsg+0x140/0x140 [ 832.504082] do_syscall_64+0x1e8/0x640 [ 832.507958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 832.512794] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 832.517976] RIP: 0033:0x45a679 [ 832.521156] RSP: 002b:00007f587b11bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.528862] RAX: ffffffffffffffda RBX: 00007f587b11bc90 RCX: 000000000045a679 [ 832.536122] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 832.543376] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 832.550628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f587b11c6d4 [ 832.557897] R13: 00000000004c8e1c R14: 00000000004e0748 R15: 0000000000000005 05:23:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) prctl$PR_GET_DUMPABLE(0x3) dup3(r2, r0, 0x0) 05:23:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xffff, 0x800) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000001c0)=0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0x6, 0x1}, 0x1, 0x27, &(0x7f0000000200)="df486b579b9f29f90839d4395561828b0669855625b0f640e6e4e76fad700f3e05f610f012fcff03344bb49a13a6fbc629f1392488eef874e8cef841aeb5473a257239d96cfeb8a63eb0db304e90784758e8f260d4d8c88e8cd11ca841db5cd8c3e816f6423d54f0dab90649344cfc5a366809a58efca63667", 0x79, 0x1, 0x10001, 0x24, 0x5, 0x80000000, &(0x7f0000000600)="5ed49391c50e854b48e607029655d645468cc213d8d1cbd058853c5bad7dfd799231ca3a4bc5e83dd8570a2ac08e1cf7f31fb03166a29b73f5730b87fa6f5431dcf793f5aff1a7858ba259045312d3", [{0x9, 0x10000, 0x8}, {0x80000001, 0x1000, 0x81}, {0x3, 0x4, 0x3f}, {0x3, 0x8, 0x80000000}, {0x2, 0x9, 0x1}, {0x80000000, 0x1, 0x6}, {0x80000000, 0x5, 0x1ff}, {0x7b14, 0xffffff2a, 0x7}, {0x0, 0x1, 0x77}, {0x8, 0x9, 0x6}, {0x20, 0x6, 0x5}, {0x9, 0x10001, 0x69c}, {0x7, 0xffffff7f, 0x828f}, {0x9b12, 0x0, 0x401}, {0x4, 0x6, 0x80}, {0x3, 0x40, 0xcc}, {0x8001, 0x0, 0xffff9a61}, {0x9, 0xfffffdf8, 0x1}, {0x400, 0x1, 0x200}, {0x7fffffff, 0x40, 0x664e}, {0x100, 0xffff7fff, 0x80000000}, {0x2, 0x1, 0x38b1}, {0x401, 0x8, 0x9}, {0x715f6745, 0x2, 0x8}, {0xfff, 0x0, 0x6}, {0x100, 0x400, 0x3}, {0x6c837c7a, 0x8, 0xa1}, {0x1, 0x7, 0x2}, {0x6, 0x7ff, 0xfffffbff}, {0x8, 0x3, 0xffffffe1}, {0x5, 0x3, 0x8}, {0x2589, 0x8, 0xe6}, {0x7ff, 0x7, 0x7ff00}, {0x99f, 0x8000, 0x4}, {0x2, 0x9, 0x4}, {0x40, 0xbb83, 0x8000}]}) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x40, 0x2, 0x9, 0xdbdd, r2}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYBLOB="d100000017786ca585e05167988a84d9cd8ebffbbf2a89b82cdeadb5f5c93a71e0529b585013b4fb3b9092cd6fe2338d42c878d938cf47b43994a65fe23ba659a4fcc474ebe4559c7ba809c315250b75e72baa8758373157356d1c81f4436eae1e719dd46dfde62cf9a0155825feb09daba4872c201abf91281fa71361e4a0cb8ce21ceccf05c300e5672acdbeb90229acfeefaf849f1450e89ea4bc01c1c1c03de450d9841c99b94e0f615c7d260d05fcb5a65ef1a58d1caf3e8d22fa0c6705cee89d88cc8e8dd6ed8ce46c4f08ea162ae1947abfd3cd579c2e385ceca4a5f118c1"], &(0x7f00000002c0)=0xd9) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$UI_DEV_CREATE(r7, 0x5501) 05:23:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@flushpolicy={0x24c, 0x1d, 0x300, 0x70bd29, 0x25dfdbfb, "", [@sec_ctx={0x9c, 0x8, {0x98, 0x8, 0x1, 0x7f, 0x90, "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"}}]}, 0xac}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000280)={0x9, 0x3, 0x80, 0x0, 0x3, 0x0, 0x2, 0xfb, 0x8, 0x6, 0x7, 0x5, 0x0, 0x20, 0x80000000, 0x1, 0x4, 0x20, 0x7}) 05:23:03 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 832.887519] FAULT_INJECTION: forcing a failure. [ 832.887519] name failslab, interval 1, probability 0, space 0, times 0 [ 832.899494] CPU: 0 PID: 29336 Comm: syz-executor.1 Not tainted 4.14.157-syzkaller #0 [ 832.911741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.921105] Call Trace: [ 832.923706] dump_stack+0x142/0x197 [ 832.927371] should_fail.cold+0x10f/0x159 [ 832.931563] should_failslab+0xdb/0x130 05:23:03 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x1a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af25, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) open(0x0, 0x0, 0x0) creat(0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:23:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000800000000000000000000000000000000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8080000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) [ 832.935553] kmem_cache_alloc_node_trace+0x280/0x770 [ 832.940677] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 832.946161] __kmalloc_node_track_caller+0x3d/0x80 [ 832.951082] __kmalloc_reserve.isra.0+0x40/0xe0 [ 832.951093] __alloc_skb+0xcf/0x500 [ 832.951102] ? skb_trim+0x180/0x180 [ 832.951112] ? netlink_autobind.isra.0+0x1c9/0x290 [ 832.951122] netlink_sendmsg+0x874/0xc60 [ 832.951136] ? netlink_unicast+0x650/0x650 [ 832.951151] ? security_socket_sendmsg+0x89/0xb0 [ 832.951159] ? netlink_unicast+0x650/0x650 05:23:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KDSETLED(r1, 0x4b32, 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 832.951170] sock_sendmsg+0xce/0x110 [ 832.951180] ___sys_sendmsg+0x70a/0x840 [ 832.951191] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 832.951202] ? __fget+0x210/0x370 [ 832.972087] ? find_held_lock+0x35/0x130 [ 832.972102] ? __fget+0x210/0x370 [ 832.972117] ? lock_downgrade+0x740/0x740 [ 832.972130] ? __fget+0x237/0x370 [ 832.972144] ? __fget_light+0x172/0x1f0 [ 832.972153] ? __fdget+0x1b/0x20 [ 832.972167] ? sockfd_lookup_light+0xb4/0x160 [ 832.985364] __sys_sendmsg+0xb9/0x140 [ 832.985380] ? SyS_shutdown+0x170/0x170 05:23:03 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 832.985400] SyS_sendmsg+0x2d/0x50 [ 832.995415] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 832.997800] ? __sys_sendmsg+0x140/0x140 [ 832.997816] do_syscall_64+0x1e8/0x640 [ 832.997826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 832.997844] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 833.023671] RIP: 0033:0x45a679 [ 833.031929] RSP: 002b:00007f587b11bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.031938] RAX: ffffffffffffffda RBX: 00007f587b11bc90 RCX: 000000000045a679 05:23:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002540)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/134, 0x86}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/223, 0xdf}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000002280)=""/102, 0x66}, {&(0x7f0000002300)=""/161, 0xa1}, {&(0x7f00000023c0)=""/88, 0x58}, {&(0x7f0000002440)}, {&(0x7f0000002480)=""/177, 0xb1}], 0xa, 0x4ffe087b) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002600)={0x0, 0x0}) r4 = getpid() tkill(r4, 0x9) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0xf2) tgkill(r3, r4, 0x21) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000002440)='/selinux/access\x00', 0x2, 0x0) [ 833.031943] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 833.031947] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 833.031952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f587b11c6d4 [ 833.031957] R13: 00000000004c8e1c R14: 00000000004e0748 R15: 0000000000000005 [ 833.180360] FAULT_INJECTION: forcing a failure. [ 833.180360] name failslab, interval 1, probability 0, space 0, times 0 [ 833.205802] CPU: 0 PID: 29353 Comm: syz-executor.1 Not tainted 4.14.157-syzkaller #0 [ 833.213735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.223100] Call Trace: [ 833.225707] dump_stack+0x142/0x197 [ 833.229352] should_fail.cold+0x10f/0x159 [ 833.233517] should_failslab+0xdb/0x130 [ 833.237498] kmem_cache_alloc_node+0x287/0x780 [ 833.242085] __alloc_skb+0x9c/0x500 [ 833.245699] ? skb_trim+0x180/0x180 [ 833.249375] ? rtnetlink_rcv_msg+0x3fb/0xb70 [ 833.253784] netlink_ack+0x21c/0x9a0 [ 833.257490] ? netlink_sendmsg+0xc60/0xc60 [ 833.261717] netlink_rcv_skb+0x2fc/0x3c0 [ 833.265766] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 833.270336] ? netlink_ack+0x9a0/0x9a0 [ 833.274213] ? netlink_deliver_tap+0xba/0x8f0 [ 833.278698] rtnetlink_rcv+0x1d/0x30 [ 833.282400] netlink_unicast+0x44d/0x650 [ 833.286449] ? netlink_attachskb+0x6a0/0x6a0 [ 833.290855] ? security_netlink_send+0x81/0xb0 [ 833.295432] netlink_sendmsg+0x7c4/0xc60 [ 833.299484] ? netlink_unicast+0x650/0x650 [ 833.303717] ? security_socket_sendmsg+0x89/0xb0 [ 833.308460] ? netlink_unicast+0x650/0x650 [ 833.312680] sock_sendmsg+0xce/0x110 [ 833.316382] ___sys_sendmsg+0x70a/0x840 [ 833.320348] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 833.325094] ? __fget+0x210/0x370 [ 833.328542] ? find_held_lock+0x35/0x130 [ 833.332592] ? __fget+0x210/0x370 [ 833.336050] ? lock_downgrade+0x740/0x740 [ 833.340191] ? __fget+0x237/0x370 [ 833.343648] ? __fget_light+0x172/0x1f0 [ 833.347612] ? __fdget+0x1b/0x20 [ 833.350980] ? sockfd_lookup_light+0xb4/0x160 [ 833.355463] __sys_sendmsg+0xb9/0x140 [ 833.359248] ? SyS_shutdown+0x170/0x170 [ 833.363229] SyS_sendmsg+0x2d/0x50 [ 833.366753] ? __sys_sendmsg+0x140/0x140 [ 833.371934] do_syscall_64+0x1e8/0x640 [ 833.375814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 833.380652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 833.385836] RIP: 0033:0x45a679 [ 833.389011] RSP: 002b:00007f587b11bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.396706] RAX: ffffffffffffffda RBX: 00007f587b11bc90 RCX: 000000000045a679 [ 833.403962] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 833.411222] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 833.418485] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f587b11c6d4 [ 833.425739] R13: 00000000004c8e1c R14: 00000000004e0748 R15: 0000000000000005 [ 833.448492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 834.390099] net_ratelimit: 24 callbacks suppressed [ 834.390103] protocol 88fb is buggy, dev hsr_slave_0 [ 834.400156] protocol 88fb is buggy, dev hsr_slave_1 05:23:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:23:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = msgget$private(0x0, 0x242) msgctl$IPC_RMID(r1, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x40000, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000240)={'nlmon0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000300)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) bind$rose(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @mcast2}, @in6={0xa, 0x4e24, 0x4ca, @mcast1, 0x8}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e26, 0x3, @rand_addr="000300", 0x100000000}, @in={0x2, 0x4e21, @local}], 0x74) getsockname(r6, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000140)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 05:23:05 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 835.399595] FAULT_INJECTION: forcing a failure. [ 835.399595] name failslab, interval 1, probability 0, space 0, times 0 [ 835.411116] CPU: 0 PID: 29367 Comm: syz-executor.1 Not tainted 4.14.157-syzkaller #0 [ 835.419019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.428380] Call Trace: [ 835.430120] protocol 88fb is buggy, dev hsr_slave_0 [ 835.430976] dump_stack+0x142/0x197 [ 835.436024] protocol 88fb is buggy, dev hsr_slave_1 [ 835.439599] should_fail.cold+0x10f/0x159 [ 835.448719] should_failslab+0xdb/0x130 [ 835.452699] kmem_cache_alloc_node_trace+0x280/0x770 [ 835.457808] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 835.463263] __kmalloc_node_track_caller+0x3d/0x80 [ 835.468202] __kmalloc_reserve.isra.0+0x40/0xe0 [ 835.472877] __alloc_skb+0xcf/0x500 [ 835.476505] ? skb_trim+0x180/0x180 [ 835.480135] ? rtnetlink_rcv_msg+0x3fb/0xb70 [ 835.484550] netlink_ack+0x21c/0x9a0 [ 835.488259] ? netlink_sendmsg+0xc60/0xc60 [ 835.492487] netlink_rcv_skb+0x2fc/0x3c0 [ 835.496547] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 835.501124] ? netlink_ack+0x9a0/0x9a0 [ 835.505009] ? netlink_deliver_tap+0xba/0x8f0 [ 835.509490] rtnetlink_rcv+0x1d/0x30 [ 835.513193] netlink_unicast+0x44d/0x650 [ 835.517249] ? netlink_attachskb+0x6a0/0x6a0 [ 835.521641] ? security_netlink_send+0x81/0xb0 [ 835.526202] netlink_sendmsg+0x7c4/0xc60 [ 835.530256] ? netlink_unicast+0x650/0x650 [ 835.534484] ? security_socket_sendmsg+0x89/0xb0 [ 835.539221] ? netlink_unicast+0x650/0x650 [ 835.543448] sock_sendmsg+0xce/0x110 [ 835.547154] ___sys_sendmsg+0x70a/0x840 [ 835.551122] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 835.555869] ? __fget+0x210/0x370 [ 835.559303] ? find_held_lock+0x35/0x130 [ 835.563345] ? __fget+0x210/0x370 [ 835.566795] ? lock_downgrade+0x740/0x740 [ 835.570951] ? __fget+0x237/0x370 [ 835.574398] ? __fget_light+0x172/0x1f0 [ 835.578353] ? __fdget+0x1b/0x20 [ 835.581706] ? sockfd_lookup_light+0xb4/0x160 [ 835.586188] __sys_sendmsg+0xb9/0x140 [ 835.589978] ? SyS_shutdown+0x170/0x170 [ 835.590124] protocol 88fb is buggy, dev hsr_slave_0 [ 835.593967] SyS_sendmsg+0x2d/0x50 [ 835.593975] ? __sys_sendmsg+0x140/0x140 [ 835.593987] do_syscall_64+0x1e8/0x640 [ 835.594001] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 835.599037] protocol 88fb is buggy, dev hsr_slave_1 [ 835.602547] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 835.602556] RIP: 0033:0x45a679 [ 835.602562] RSP: 002b:00007f587b11bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.602572] RAX: ffffffffffffffda RBX: 00007f587b11bc90 RCX: 000000000045a679 [ 835.602579] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 835.650843] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 835.658113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f587b11c6d4 [ 835.665435] R13: 00000000004c8e1c R14: 00000000004e0748 R15: 0000000000000005 [ 835.673734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:05 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000300)={0x8000, 0x1, 0x7ff, 0xc3, &(0x7f00000000c0)=""/195, 0x90, &(0x7f00000001c0)=""/144, 0x50, &(0x7f0000000280)=""/80}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={[], [], @rand_addr=0xca}, @in6=@loopback, 0xffff}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2, 0x3}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:23:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext, 0x21402}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5) dup3(r1, 0xffffffffffffffff, 0x0) 05:23:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendmsg$inet6(r4, &(0x7f0000000940)={&(0x7f0000000100)={0xa, 0x4e24, 0x2ace, @rand_addr="7a115aad092a392a68af6c8ae87f37c5", 0x207}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000140)="4070747f2b485c887847b64f6be25c1a404a4162b5dd850d241fb9ec7554617dd2c9b198d43c8faaae766c531d9daf176fd46d", 0x33}, {&(0x7f0000000180)="00634d07a193addf88f895af1f123d93b1cb1457cd0699785d893f67b955a0ef566f2edfbce758ca28bfc14d6f96ecb9766d5aea2aa6ce1171b3f47395d48b5152c0d6ac", 0x44}, {&(0x7f0000000200)="daa7b66f7c67aa2c1e89f542a331ec38ad7c8770d82e7564ea711e8eff90e7c8d0c21e9af265f28e04173a3f9b570c841903ed863f53a65b99b412849b0e78ae976848776471079ae23a0e24d7532bff552b5c12dde01edd3837da39fd7487fe67b2e33172085f31d28b319b89bc27b5aaa77f4f3867b7b56936c7c3520f410d22066f3ba298358e0d593d4cae9b0f6ca6a986bd9e7d104bdc0b46ae06d6", 0x9e}, {&(0x7f0000000300)="0fd497107bb300b372ced0706f4aa543b9ee4fe809f73bc0868bb5ffe3e1464e2b6e7d5a3172be3aa2baf57421ce9e366fe114952a85a52aab7b2a9d1f9d5dca5284571d7cea5332f55a3ba3b5289e8d28d21a89dfa97aae01762f590b6dff44516eddd632143c23", 0x68}, {&(0x7f0000000380)="d0620d46273d036f328bb68b43f8382ca62ddad1", 0x14}, {&(0x7f0000000500)="ad02a1512a11e643c474ce2d559a260474", 0x11}, {&(0x7f0000000540)="8da386bac1dd32b900e095e7fe2ceef01b4c136938b0522483bcd3b57d3cc4bc4bb3c2259920945aed03d0d55966ea1f849ac59de06bd94b52c856ddbf96e995b70d1c22d645b3836237f2aa5e41a4afb47e6f4e4f7080e4d8f0ae000f621a144bc42adedbb4ce7c9e2e7121be3b280fce656af18c86cc7421fc2bdaa4d2b90ae93d116317b595873f31f0f73588178408966e90b5ef294c91b3d913edb41f", 0x9f}, {&(0x7f0000000600)="221d3d397e7e7e1569b051881556ce01b223c2e0ec8a7fbae593ce987f31c8d83f1a79f58f2b7dff0bfb9bcc22b3e50959b0ed9bac280bae5cc0434b1c28593d86cd98b56410ecce20d3b38e45c9493d0e0c90faadc7532e2265786758424080801523815b26f87d5ae752e4a483580411e1a5eb8400ca7194895b940079416e0ce9150d3ff1ff2a734331e4e6f0dbd4a805c9ca0ccd086a8b40ad88db4f0af5b8539c7152a21c14e6f0d02488779ace485bbd2e52379c652579e9b2e8ff496891f4e95ee82e7b403925648069b5f685d24eb62fe0cdd1ca8b83fe9f5a05480640a3ee010ecbdcd3e05c4cac32ebdd756f", 0xf1}, {&(0x7f0000000700)="dc4a32e7b1402f9c40ccee3f5d31e2c430376e972215b685eaaea85c2f6fccd849ea24279c274fce986132d948602999107ff38e8e7ca34a4c80e53aa70f8ae940356e37ee5ae3a5c35d736c940eafd07cf377361cd91a74bdda63fbf87c41ba8403465caf3569dd14eaf3f5b839a9af970a92a6b27a82f452ac7536dbbcb9d8aaf9b421507571318d1e315a7b403ab05883451ce0715f8da83d9dc1ff21ba771a85193d2ee275bd9b7234d30dd5acf6a5de662d7b38424fd90560f1397dc86a9fa83c42195bfe67c4161b20880939f0e75218", 0xd3}, {&(0x7f0000000800)="a6d8a2034c5cd1c9a53c826cea4ff5b661283db568b9ab6b6e4a8aced0a19fe5e9e9bf", 0x23}], 0xa, &(0x7f0000000900)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x30}, 0x44040) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010001307ddfffffffffffffffe7800000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:23:05 executing program 1 (fault-call:3 fault-nth:4): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 835.760116] protocol 88fb is buggy, dev hsr_slave_0 [ 835.765209] protocol 88fb is buggy, dev hsr_slave_1 [ 835.770349] protocol 88fb is buggy, dev hsr_slave_0 [ 835.775391] protocol 88fb is buggy, dev hsr_slave_1 [ 835.819680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x4, [@struct={0x3, 0x5, 0x0, 0x4, 0x1, 0x1, [{0x7, 0x3, 0xc230}, {0xe, 0x0, 0xffffffc1}, {0xd, 0x2}, {0x7, 0x2, 0x2}, {0x4, 0x2, 0x50}]}, @datasec={0x6, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x9, 0xffff}, {0x2, 0x9, 0xffff}, {0x3, 0x252e, 0x2000}, {0x1, 0x7ab, 0x4}, {0x4, 0x6, 0x20}, {0x7fff, 0x9e53, 0xff}], "0f"}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000140)=""/52, 0xbc, 0x34, 0x1}, 0x20) pwritev(r1, &(0x7f0000000680)=[{&(0x7f00000001c0)="f00c77456e88bf82a9c0b85bc2eb2d43e7e3994b87f1b6a1c266d262f959f79cf92814e5897d195b9b9ce5c2", 0x2c}, {&(0x7f0000000200)="057aa33f89ff9a77a187bd3622fb4a8f92d8f0720976155ad19248babb38a9915dc45d409feee1e5310d8dba86bd5292ef4d80e7cf4594b3c9276b7f0bc85d7ac94c365b97ddcd021b9cea97b0d23ea8755d1461377fd1c38bbd20957e0221ac7847", 0x62}, {&(0x7f0000000280)="ad031c08c698", 0x6}, {&(0x7f00000002c0)="d735cb1e1b436ebc7544b2f387e57d8946585a1c82822c81ef68ecdf2d06b22c9764baf5d793fa7f94f14ee30a5411f96c79b0b7cdba3bb31274ec1ea20bef5cd07c4597df946046ed322774f250894aac69400b0b39cf87b9752ef65d0a8f9d71d148adc447c3f4ab97a15c2901618b244624bc2a1ac7ce802bd675081c550c95392ac9c82add166779f702e1166025e55d07938a50373654ec6cd20fbc6ee00c491ba845ace7f1201cab8f48ea265592144cfe65e4147e78497b3ee29c3bb6627fd6401b17f998e3255810ff0865cd42e04ff3c8c631ba5cbec7675c3044a25e9805f85b56ab1a56e2", 0xea}, {&(0x7f0000000500)="9e5291177246a30f0fd4a9fcf860e90904f8c7bb0c40ef3f2ea9ccc896a68de3af0ce2648aac33ad38fae737b442d54cba9b1623bf48bb141f9a70a3dbb20aa86ca06abdd2cf5a690921dc120199f868b6b6407b277e4ddc9d38d5b3805e0e1a577a26c6594ac9d60fdf3b67ac8f2c1e69ad5ce497cd769c6fa95179c51b86da9352e6", 0x83}, {&(0x7f00000005c0)="299f043187decce39b2af087f5130159dd26289a51f065fc9a2deb78dcc3cd18c923eec8ce94b9beec3550742fa5b8dcc20405f6bdef64b0f9dd4c9f24fc577cf10b79ae2c0db5d6b7384b4a87a4be055976aa529d3dfbf33cf73e5e26e3a666b9d9669eea4f84e8bee26202bec5dfd97807ae4fafd3b75a644c1e335a046312a838e4554691f86a7feaa699", 0x8c}], 0x6, 0x2) [ 835.904267] FAULT_INJECTION: forcing a failure. [ 835.904267] name failslab, interval 1, probability 0, space 0, times 0 [ 835.961019] CPU: 0 PID: 29380 Comm: syz-executor.1 Not tainted 4.14.157-syzkaller #0 [ 835.968954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.968960] Call Trace: [ 835.968984] dump_stack+0x142/0x197 [ 835.984544] should_fail.cold+0x10f/0x159 [ 835.988703] should_failslab+0xdb/0x130 [ 835.992851] kmem_cache_alloc_node+0x287/0x780 [ 835.997448] __alloc_skb+0x9c/0x500 [ 836.001080] ? skb_trim+0x180/0x180 [ 836.004710] ? rtnetlink_rcv_msg+0x3fb/0xb70 05:23:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000006500"/240], 0x225}}, 0x0) [ 836.009114] netlink_ack+0x21c/0x9a0 [ 836.009126] ? netlink_sendmsg+0xc60/0xc60 [ 836.009141] netlink_rcv_skb+0x2fc/0x3c0 [ 836.009153] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 836.009165] ? netlink_ack+0x9a0/0x9a0 [ 836.009181] ? netlink_deliver_tap+0xba/0x8f0 [ 836.009194] rtnetlink_rcv+0x1d/0x30 [ 836.009203] netlink_unicast+0x44d/0x650 [ 836.041882] ? netlink_attachskb+0x6a0/0x6a0 [ 836.046306] ? security_netlink_send+0x81/0xb0 [ 836.050904] netlink_sendmsg+0x7c4/0xc60 [ 836.054974] ? netlink_unicast+0x650/0x650 [ 836.059205] ? security_socket_sendmsg+0x89/0xb0 [ 836.063965] ? netlink_unicast+0x650/0x650 [ 836.068205] sock_sendmsg+0xce/0x110 [ 836.072101] ___sys_sendmsg+0x70a/0x840 [ 836.076074] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 836.080829] ? __fget+0x210/0x370 [ 836.084288] ? find_held_lock+0x35/0x130 [ 836.088353] ? __fget+0x210/0x370 [ 836.091819] ? lock_downgrade+0x740/0x740 [ 836.095976] ? __fget+0x237/0x370 [ 836.099436] ? __fget_light+0x172/0x1f0 [ 836.103410] ? __fdget+0x1b/0x20 [ 836.103426] ? sockfd_lookup_light+0xb4/0x160 [ 836.111258] __sys_sendmsg+0xb9/0x140 [ 836.111268] ? SyS_shutdown+0x170/0x170 [ 836.111292] SyS_sendmsg+0x2d/0x50 [ 836.111300] ? __sys_sendmsg+0x140/0x140 [ 836.111313] do_syscall_64+0x1e8/0x640 [ 836.111323] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 836.111338] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 836.111346] RIP: 0033:0x45a679 [ 836.111350] RSP: 002b:00007f587b11bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.111365] RAX: ffffffffffffffda RBX: 00007f587b11bc90 RCX: 000000000045a679 05:23:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 05:23:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0xffbe}, {@in6=@dev={0xfe, 0x80, [], 0x1e}, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0xf8c}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:23:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:23:06 executing program 1 (fault-call:3 fault-nth:5): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 836.111371] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 836.111376] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 836.111380] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f587b11c6d4 [ 836.111385] R13: 00000000004c8e1c R14: 00000000004e0748 R15: 0000000000000005 [ 836.279999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 836.293873] FAULT_INJECTION: forcing a failure. [ 836.293873] name failslab, interval 1, probability 0, space 0, times 0 05:23:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x2, 0x81, 0x7, 0x8, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x100, 0x2, 0x0, 0x1, 0x7, 0xffffffff, 0x9}, 0x0, 0x6, r0, 0x1) socket$caif_stream(0x25, 0x1, 0x3) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80100) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) [ 836.362724] CPU: 1 PID: 29409 Comm: syz-executor.1 Not tainted 4.14.157-syzkaller #0 [ 836.370823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.380186] Call Trace: [ 836.382792] dump_stack+0x142/0x197 [ 836.386443] should_fail.cold+0x10f/0x159 [ 836.390606] should_failslab+0xdb/0x130 [ 836.394575] kmem_cache_alloc_node_trace+0x280/0x770 [ 836.399673] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 836.405116] __kmalloc_node_track_caller+0x3d/0x80 [ 836.410040] __kmalloc_reserve.isra.0+0x40/0xe0 [ 836.414703] __alloc_skb+0xcf/0x500 [ 836.418315] ? skb_trim+0x180/0x180 [ 836.421928] ? rtnetlink_rcv_msg+0x3fb/0xb70 [ 836.426326] netlink_ack+0x21c/0x9a0 [ 836.430036] ? netlink_sendmsg+0xc60/0xc60 [ 836.434262] netlink_rcv_skb+0x2fc/0x3c0 [ 836.438310] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 836.442889] ? netlink_ack+0x9a0/0x9a0 [ 836.446769] ? netlink_deliver_tap+0xba/0x8f0 [ 836.451257] rtnetlink_rcv+0x1d/0x30 [ 836.454956] netlink_unicast+0x44d/0x650 [ 836.459003] ? netlink_attachskb+0x6a0/0x6a0 [ 836.463408] ? security_netlink_send+0x81/0xb0 [ 836.467979] netlink_sendmsg+0x7c4/0xc60 [ 836.472031] ? netlink_unicast+0x650/0x650 [ 836.476255] ? security_socket_sendmsg+0x89/0xb0 [ 836.481005] ? netlink_unicast+0x650/0x650 [ 836.485228] sock_sendmsg+0xce/0x110 [ 836.488938] ___sys_sendmsg+0x70a/0x840 [ 836.492902] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 836.497645] ? __fget+0x210/0x370 [ 836.501085] ? find_held_lock+0x35/0x130 [ 836.505129] ? __fget+0x210/0x370 [ 836.508574] ? lock_downgrade+0x740/0x740 [ 836.512716] ? __fget+0x237/0x370 [ 836.516162] ? __fget_light+0x172/0x1f0 [ 836.520124] ? __fdget+0x1b/0x20 [ 836.523477] ? sockfd_lookup_light+0xb4/0x160 [ 836.527958] __sys_sendmsg+0xb9/0x140 [ 836.531744] ? SyS_shutdown+0x170/0x170 [ 836.535720] SyS_sendmsg+0x2d/0x50 [ 836.539243] ? __sys_sendmsg+0x140/0x140 [ 836.543293] do_syscall_64+0x1e8/0x640 [ 836.547178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 836.552015] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 836.557188] RIP: 0033:0x45a679 05:23:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x701}, 0x14}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r6, 0x4000000000000002) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r7, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r7, r5, 0x80000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="5dc8f437daeb87e1aeda538910812a83", 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_opts(r10, 0x0, 0x9, 0x0, 0x0) fsetxattr$security_selinux(r10, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xd4, r11, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4880}, 0x84000) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xd8, r11, 0x601, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff4e}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2}, 0x24cd0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x10c, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x59401f7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_ADDR, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xc758}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000007}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28d57a3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf94}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3800000}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x42000) [ 836.560362] RSP: 002b:00007f587b11bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.568059] RAX: ffffffffffffffda RBX: 00007f587b11bc90 RCX: 000000000045a679 [ 836.575322] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 836.582588] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 836.589843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f587b11c6d4 [ 836.597108] R13: 00000000004c8e1c R14: 00000000004e0748 R15: 0000000000000005 05:23:06 executing program 1 (fault-call:3 fault-nth:6): r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x200000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = syz_open_pts(r1, 0x0) dup3(r3, r0, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="65786563205d3a70726f635cf49943d1765d5c73797374656d73797374656d776c616e312e00"], 0x26) [ 836.727935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xfffffffffffffff0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:08 executing program 1: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfb) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") capset(&(0x7f0000000080)={0xf1504, 0xffffffffffffffff}, &(0x7f00000000c0)={0x4, 0xff52, 0x6b, 0x1000, 0x5, 0x1000}) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="f85d9f5a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000200)={r2, 0x0, 0x4}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x5, 0x4) 05:23:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = getpid() tkill(r1, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xf2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fadvise64(r4, 0x7, 0x3, 0x2) r5 = syz_open_pts(r3, 0x4000000000000002) dup3(r5, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) open(&(0x7f0000000180)='./file0\x00', 0x100, 0x238) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140)) r6 = getpid() rt_tgsigqueueinfo(r1, r6, 0x7, &(0x7f00000000c0)={0x16, 0x9, 0x9978}) eventfd2(0x4, 0x1000) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r7, r0, 0x0) 05:23:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) msgget(0x0, 0x0) [ 838.819022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:09 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getpeername$netlink(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000500)=""/4096) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {0x0, 0x0, 0x80}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:23:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000001f00000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:23:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsync(r1) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r0, 0x0) 05:23:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x3, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x2, 0x66, 0x3}) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r11, 0x4000000000000002) dup3(r12, r10, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000140)=0x13) r13 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r14, 0x40045431, &(0x7f00003b9fdc)) r15 = syz_open_pts(r14, 0x4000000000000002) dup3(r15, r13, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r13, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$P9_RATTACH(r13, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x7e9f31a8db47b5b1, 0x3}}, 0x14) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100880}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc3c71665dfd59a93, r3, 0x110, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40015}, 0x4000) 05:23:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x80, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 839.590123] net_ratelimit: 16 callbacks suppressed [ 839.590130] protocol 88fb is buggy, dev hsr_slave_0 [ 839.600218] protocol 88fb is buggy, dev hsr_slave_1 05:23:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c010000100013070000000000000000fe800000000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:dhcpc_state_t:s0\x00', 0x23, 0x1) 05:23:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:23:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000000000000000000000000000000000000033000000de8000000000000000000000000000aa00000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d81c0ea6504a0a8e3a10000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006d643500"/240], 0x138}}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) 05:23:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000100013070000000020000000fe8000000000000000000000000000000000000000000000000000000000000100000400"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000010000aa0000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de0000000000000000000000000000000000000000000000020000000000000000000000480001006d6435005b62c331fb0840b0694e370000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000f765bd3744950899fec2882b551f237b0ac2a6ffee08ff333db63a0292da82fcdd053c26584615d83338dce417979b78297fa27019402a5abc1501a5626896f931046e3443edf968cd64bf99bdb8d2238823e88c43d4149461530d6e16ece3b7787783a77811b688896acd2ec55f437d53c16c046b8d11a76de6509e0cbe71fdaa21bb036440d369fbb25e2362d700dd7c3d5861bdc98d1018d9e6acc30b70b27fe3a167d9907d985a7bb94213b58e7557e01a4412ea83adf50f6733100a8754bc110d05d936ae297560c829ecf6015b77e26591da18d001cb49d27d4f05c00c33436625b1d11a060000007b8165bc8ca7bfae952c2221b2bd3c0fed4f047bef1d394e70356c00a1c7bcbf3b52b8297f1b965568ce95016f15cdd62740ea3ca337e06fcb478e793dfad9a514407706ee200f2dfbb837b02df2ee335e20"], 0x4}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x448001, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x800, 0x4, @empty, 0x10000}}}, 0x88) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x10000, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) [ 839.685386] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.700709] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 839.727136] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.728162] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 839.750206] protocol 88fb is buggy, dev hsr_slave_0 [ 839.755294] protocol 88fb is buggy, dev hsr_slave_1 [ 839.910152] protocol 88fb is buggy, dev hsr_slave_0 [ 839.915237] protocol 88fb is buggy, dev hsr_slave_1 [ 839.920382] protocol 88fb is buggy, dev hsr_slave_0 [ 839.925424] protocol 88fb is buggy, dev hsr_slave_1 [ 840.310102] protocol 88fb is buggy, dev hsr_slave_0 [ 840.315221] protocol 88fb is buggy, dev hsr_slave_1 05:23:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x300342, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xa, 0x0, 0x9, 0x3f}, 0xa) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) 05:23:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r5 = syz_open_pts(r1, 0x0) dup3(r5, r0, 0x0) 05:23:12 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101000, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x8001) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x7, {{0xa, 0x4e22, 0x3f, @loopback}}}, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$selinux_validatetrans(r4, &(0x7f0000000300)={'system_u:object_r:syslogd_initrc_exec_t:s0', 0x20, 'system_u:object_r:syslogd_initrc_exec_t:s0', 0x20, 0x8001, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x89) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000240)=0x9) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000004000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c0e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002ef2ef81430749cf48d17e10000000000000000000000480001006d64350000000000000000000500"/251], 0x138}}, 0x0) 05:23:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0xf1, 0x3, 0x4, 0x40000000, {0x0, 0x2710}, {0x3, 0x2, 0x3, 0x7d, 0x3f, 0x6, "5b7a89a9"}, 0x6, 0x1, @planes=&(0x7f0000000080)={0x80, 0x80000000, @fd, 0x6}, 0x4}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:12 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt(r2, 0x563, 0x8, &(0x7f0000000040)=""/110, &(0x7f00000000c0)=0x6e) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:12 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x1, 0x0) write$eventfd(r2, &(0x7f00000001c0)=0x6, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0815030000000200000071c9d69cad93a104c43f5f1b551530c4259b37609c9c77be6affffffffb64b2021f8584f3c160110c9c88066cb1fd91f1ff9b232a3abdb5fdf4ae9c8fc02a9c300119d423941b9a806c3159861f22b3e8e82e2e4") r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x1000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000040)="bcc1caad37a1ca060e32eca099d549ccee1b1932c78b5bad84c55bf6b72446137dfd3f757d168701e6d67ba037c9b1b1e97a95d8c6eeb337831eb206da") r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) dup3(r8, r6, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x24d40, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000540)={@sco={0x1f, {0x0, 0x81, 0x2, 0x3, 0x1, 0x9}}, {&(0x7f0000000440)=""/245, 0xf5}, &(0x7f0000000300)}, 0xa0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xd) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000240)={0xa, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) write$P9_RATTACH(r6, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x4) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 841.881473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 841.892778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 841.948257] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 841.970903] audit: type=1400 audit(1575264192.141:867): avc: denied { write } for pid=29508 comm="syz-executor.1" name="net" dev="proc" ino=110356 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 841.997104] audit: type=1400 audit(1575264192.141:868): avc: denied { add_name } for pid=29508 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 842.021560] audit: type=1400 audit(1575264192.141:869): avc: denied { create } for pid=29508 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 842.025722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.045867] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000140)={&(0x7f0000000000), 0x9c2, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) socket$caif_stream(0x25, 0x1, 0x3) 05:23:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{0x80, 0x0, 0x3, 0x1f, 0x20, 0x7f}, 0x1, 0x80, 0xfff, 0x3f, 0x9, "1ce04028c21df9d58c9f215f627d23e3af14abd60053d2da379214c1ec1baf976c258faa92443ed79f0e0b00dbb4e3f5ed2a395db9c4971e1976b0925d83fc028ff52b060f3a86461341da9f373c10769198976a3b1552eeea811c11147d830fe6a19eb807f5e5aebcc7c961cabdbba72593fec3e599bde26b0453109fa62c97"}) socket$caif_stream(0x25, 0x1, 0x3) 05:23:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) fanotify_init(0x9, 0x8000) 05:23:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000300)) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000000c0)=0x3f) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0xb5) 05:23:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@mcast2}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x4}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2}, [@algo_auth={0xfffffffffffffdb8, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:23:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x21c542, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xb) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r3, r0}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x9, 0x7fff, 0x3, 0xfffffffa, 0x10, 0x3f, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xcdf1}) dup3(r4, r0, 0x0) 05:23:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x468}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r1) keyctl$revoke(0x3, r1) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r2) keyctl$revoke(0x3, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000080)=@chain={'key_or_keyring:', r2, ':chain\x00'}) [ 844.870121] net_ratelimit: 24 callbacks suppressed [ 844.870125] protocol 88fb is buggy, dev hsr_slave_0 [ 844.880161] protocol 88fb is buggy, dev hsr_slave_1 05:23:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x8012) [ 844.948044] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:23:15 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x84000, 0x0) connect$netlink(r0, &(0x7f0000000100)=@unspec, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x10004000000002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r5, 0x0, 0x32, 0x0, &(0x7f00000001c0)=0x3a7) open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x225}}, 0x0) 05:23:15 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x20800, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@remote}, {@in6=@local, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x2}, 0x0, 0x4, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 845.023067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x307, 0x2, {0x10000, 0xfffff001, 0x4, 0x5}}) r6 = syz_open_pts(r1, 0x0) dup3(r6, r0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x5, 0x0, 0x2}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f00003b9fdc)) r10 = syz_open_pts(r9, 0x4000000000000002) dup3(r10, r8, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r8, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000200)=0xfffff4b9) syz_open_pts(r7, 0x4000000000000002) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000140)) 05:23:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x701}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9be63d8bca161235}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, r5, 0xd, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4001000}, 0x800) fcntl$getown(r1, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:15 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10800, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000140)={0xd1, @multicast1, 0x4e24, 0x0, 'none\x00', 0x14, 0x28, 0x9}, 0x2c) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000040)) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 845.257580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.274399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.830141] protocol 88fb is buggy, dev hsr_slave_0 [ 845.835311] protocol 88fb is buggy, dev hsr_slave_1 05:23:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) 05:23:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'dummy0\x00', @remote}) 05:23:16 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xef394) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000440)=""/200) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) lstat(0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) socket$pppoe(0x18, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x2, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffffd}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions='default_permissions'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@smackfshat={'smackfshat', 0x3d, 'tls\x00'}}, {@permit_directio='permit_directio'}]}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) [ 845.990136] protocol 88fb is buggy, dev hsr_slave_0 [ 845.995309] protocol 88fb is buggy, dev hsr_slave_1 [ 846.014611] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 05:23:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000280)={0x0, @bt={0x9, 0x12773dba, 0x1, 0x2, 0x4, 0x5, 0x10001, 0xffffffbe, 0x7fff, 0x7, 0x3, 0x200, 0x7fffffff, 0x2554, 0x9}}) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff9a, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000040000000100000000000000000000000000000000000000000000000000000000000000e84538e8d3294c8677023411721586e3e47139f478b75f03c422f7470278d647c8a76602c6f32dc057baa009ca3be986ed8138f5428afcb1eb56e485295f6f670be7bad357cf8add3f30271801e3ee21ca561905ee83efa29321", @ANYRES32=0x0, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16, @ANYPTR, @ANYPTR, @ANYRESHEX=r1]]], 0x4}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 05:23:16 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000180)={0x30, 0x1, 0x1, 0x1ff, 0x3, 0x400, 0x3, 0x100000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000002a5200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0xa, 0x5, 0x0, 0x0, 0x0, r2, 0x0, 0x383}]) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fcntl$dupfd(r5, 0x406, r6) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000140)) io_destroy(r3) munlockall() 05:23:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x3, 0xffff6b93}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) [ 846.083974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:16 executing program 3: pipe(&(0x7f0000002ec0)={0xffffffffffffffff}) accept4$packet(r0, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002f40)=0x14, 0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x40) [ 846.150135] protocol 88fb is buggy, dev hsr_slave_0 [ 846.155294] protocol 88fb is buggy, dev hsr_slave_1 [ 846.160442] protocol 88fb is buggy, dev hsr_slave_0 [ 846.165529] protocol 88fb is buggy, dev hsr_slave_1 05:23:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f0000000080)=@llc={0x1a, 0x335, 0x6, 0x7, 0x81, 0x4, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="38a004c78bbae6d0742941a6faf3efb92f69b23e8ac5a8d560f7334c8018c2686b97ca826162437ef43f85836566a13a4cef88b3b8d81695054d35bdf9628ad178164aad8c05f0b4d03586da664c04cd4cc28f7d0aff87321be9489574a2e3e1e9c3f6b0e13a04ff0f1de8a850dc5863910923fbc9af6e12ad07aa140e1ee5325c3393fd2eba1b5c00e6c5629dbe71eec0a844c888a972bfe44bc2960fc97b96f9c8cc4e83f17c7618cb74f5849b4d04c18fcb55fd787c69842f1e42a8ffdebe1a17f72352184f24e70f820065daea1fd3520a273e7ebb42ab533e928f86c59aeeca2246933b4ec2bec1148aa2dfcc02486a10c6d0c5ae", 0xf7}, {&(0x7f0000000200)="d32311cc6cbaa2c65b6b9b14d765e63e29eb5d59a0606c83962e2cca42dd067054a2a1a4bc115f424a1e61fbab5cb2c84d518bf2676180fcf36de608a3606ce855799d905d6139062788c3677b40866f64e9e3d867311e3dee", 0x59}], 0x2, &(0x7f00000002c0)=[{0x78, 0x109, 0x100, "2d5dc3b6ffcbf3baa3bfb16b630d93d83681347caa0e5ce60b19545cbd611582d652039f24e35a18dbd21f582c4cca4b3577083487e6f3eef69654a78701088bae77182c5cc52172fe05920b890a5a260a27ba5179bf4de8415c3bbc83212e0d16425731"}], 0x78}}], 0x1, 0x800) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000380)=0x65) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x1000)=nil) 05:23:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x5, 0x3, 0x9, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000080)=""/125, &(0x7f0000000100)=0x7d) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0x8, 0x1, 0x1f, 0x40}, {0x4, 0x6, 0x8, 0x2}, {0x0, 0x6, 0x0, 0x1c}, {0x7, 0x40, 0x7, 0x4}, {0x1, 0x7, 0x1f, 0x8}, {0x7f, 0x1, 0x8, 0x2}]}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) accept4$netrom(r2, 0x0, &(0x7f0000000000), 0x800) r5 = syz_open_pts(r1, 0x0) dup3(r5, r0, 0x0) 05:23:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000010000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0x5) 05:23:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x8, "88409219064cec93"}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x80, {{0xa, 0x4e24, 0x100, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}, 0x6}}}, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) 05:23:19 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400100, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x110010) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) 05:23:19 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xf45}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="03000400da000300ffff0104"], 0x10) [ 849.036415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:19 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e22, @broadcast}, 'syz_tun\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x3e60}}, 0x30) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x8, 0x200}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x1}, 0x8) 05:23:19 executing program 2: ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f00000000c0)={0x3, 0x1, @raw_data=[0x800, 0x1, 0x1f, 0x800, 0xff, 0x78, 0x0, 0x10001, 0x100, 0x8001, 0x0, 0x7ff, 0xfff, 0x7, 0x1, 0x100]}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r1 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r2, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xee6a9f01d1540a83}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7008fbdbdf25020000001c00020008000b000200000008000e004e2100000800090004000000"], 0x30}, 0x1, 0x0, 0x0, 0xc093c52a75b7a262}, 0x20008046) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000300)=ANY=[@ANYBLOB="0540000009000000ff0f00000000000081004b0400000000030000e4770000000400002100000000ffff000000000000070000000000000003005c6e000000000800000000000000fdffffff00238cf8ec2e8a62ef090c550e1e08c80000000800000000000000"]) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$snddsp(r3, &(0x7f0000000140)="e4536976cb7a4044c7101fbf7ce9fd3555ab953acd33bc15d6abb71831c99efd71b09f0eef83e2b72ab52c80ff42577e92df1e0e3a0dd9b233a60a578ac665740c258eb248bf0a928137de86ee4a3254b1417c40011b4af690b275c4c8fcff45cd5114f8bdc24e91112670ff901a092906b3748eeba68d107838cd2a795cb83dff2f68458b51d8e6a39b9fe4ee7e5310db71bf34ed1c1903509e1dd82b78dfdf3f24aa60753c27e8ae2334092ab2b5a4acf59e45860b1df5c3765e7ca45bcd1601c41c4c46b5b8c87629df6964f85fe1fda0df953dc4d6117f0d69689291ed55866938091571917b318593c276890940a43db895958e01dfee", 0xf9) 05:23:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x40, 0x80, 0x0, 0x0, 0x1390}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x101002, 0x0) connect$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) [ 850.000135] net_ratelimit: 16 callbacks suppressed [ 850.000157] protocol 88fb is buggy, dev hsr_slave_0 [ 850.010229] protocol 88fb is buggy, dev hsr_slave_1 [ 850.150128] protocol 88fb is buggy, dev hsr_slave_0 [ 850.155243] protocol 88fb is buggy, dev hsr_slave_1 [ 850.310138] protocol 88fb is buggy, dev hsr_slave_0 [ 850.315276] protocol 88fb is buggy, dev hsr_slave_1 [ 850.320524] protocol 88fb is buggy, dev hsr_slave_0 [ 850.325588] protocol 88fb is buggy, dev hsr_slave_1 [ 850.710120] protocol 88fb is buggy, dev hsr_slave_0 [ 850.715319] protocol 88fb is buggy, dev hsr_slave_1 05:23:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x1f}, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x30}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40040, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010001001de02bb3163a39a4b28b17bba9225cb70c2aa713496c030ed3a2b7a6cd253b423b3ba5f2753cb5535f5b897e67ecf292093de36f0ab68be81afd0efb9f6457247762b934e14312ee25218d428a204578713e4b391d2369fb7cd1", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r4, 0xbf, "4fa715ef8bac3a5ebb39f5e4394907c0529879bb2433ebdd7327f9232c5ef561de40bdb4cdf6cf92e0548f9dfe66190a196218405d8c9ea517f6667e658614e041931a89406fc7b685cd1f0451d36b4f795e82a627597c5cfe1bef0868e371755aa56f4b2b2c59ffddf5f7410b4b2f3edcdf893e30a82e5350a50d8695379f93a0353cd83e551cef2032ca344792869a794ea0f15b92efe4e381695216b31e5869b42c50b5fb81b1a47ac58943ccbc45bba1b0360e52e0401735003ef91428"}, &(0x7f0000000240)=0xc7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r5}, 0x8) set_tid_address(&(0x7f0000000100)) 05:23:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x0) dup3(r5, r3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) dup3(r8, r6, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r6, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$P9_RWSTAT(r6, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) 05:23:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000180e3e000000fe80000000000000000000000000000000000000000000000000000000005e18ca86b439853fdb468500010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:23:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:23:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xfc, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x2}, [@lastused={0xc, 0xf, 0x100000000}]}, 0xfc}}, 0x0) 05:23:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100000fe80000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000e3ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:23:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x80000001, 0x4, 0xdfd, 0x3f, 0x6d, "3957e9ad085a785b4477e45fa994080eceb28b", 0x7, 0x9}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:22 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r2 = creat(&(0x7f0000000040)='./file0\x00', 0x11) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0x8) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000140)=""/142) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r4 = dup3(r1, r2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 05:23:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000001c0)={0x2, 0x10001, 0x8001, 0xffffffc2, 0x1, 0x4}) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9b0000, 0x81, 0xffffff00, [], &(0x7f00000000c0)={0x990902, 0x8001, [], @p_u8=&(0x7f0000000080)=0x71}}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000080000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000100"/240], 0x225}}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000140)) 05:23:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@remote}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x200, 0x13bb, 0xf08, 'queue1\x00', 0x81}) 05:23:22 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000100)) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 852.149663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x3, 0x9, 0x6, 0x6, 0x2d}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000)) 05:23:24 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x61be5fa3c45196a7, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) uselib(&(0x7f00000000c0)='./file0\x00') ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x50200, 0x0) write(r4, &(0x7f00000003c0)="63f2b92ca3e75a5f2908e9d078bb7f6e97e58ec4526b9e5df617fcec3990bbfe26b9d8f8cb201f4f2358c5821436bf0330982f8b21bbbbcf1048bcc513621f023d4de7172b0fb203be3857a54c3a526f0bbe5cc753922d7c3b72e0cd8b999b2e574409000ce158febd2e2c6040826090a8514693e6652c3a16101b29e2647345c9c4546552e53726b3e29221bae79bdde8be43df05285fc8f7e28f9e568d46e23d10d0479891fd9125165a", 0xab) r5 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="6db36c6e0ce40c435183439a"], 0x2a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80000000}) r6 = socket$inet(0x10, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r7, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000200)) sendmsg(r6, &(0x7f0000000380), 0x0) 05:23:24 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000009000000f47b8d28be077876dcedbbb9d235a22fe3884483a839c2e1c353f3f1629cdcb3cd7f0bb4c46d74049b41ecfde5b16cd63092f154ee33bae493f0c8"], 0x501000) socket$caif_stream(0x25, 0x1, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet6_dccp_int(r4, 0x21, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0xc003, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000001c0)=0x400) 05:23:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x40000, 0x0) 05:23:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "51f193899d31945ad534e50ef2877b8d"}, 0x11, 0x1) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:23:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000280)={0x7, 0x0, 0x0, 0x5, 0xb, 0x1, 0x0, 0x4, 0x7, 0x9, 0x6, 0x8}) r4 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x10) ioctl$TCGETX(r4, 0x5432, &(0x7f0000000200)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000180)=0xffed) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x156, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="dbfeffff100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000000000dfd3cfbd980436b700000000000033000000fe8000000000000000000000000000aaa6d80000000000000000000000000000470600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcfc877e69262c1072d0afe30343ef458c8dbc9705"], 0x138}}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r9, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$FICLONE(r9, 0x40049409, 0xffffffffffffffff) 05:23:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r3 = getpid() tkill(r3, 0x9) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0xf2) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x81142, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, r3, 0xfffffffffffffffc, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x0) dup3(r7, r5, 0x0) 05:23:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) dup3(r2, r0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 05:23:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x4000000000000002) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 05:23:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0x1f) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r1, 0x0) 05:23:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000080)={0x1f004, 0x9f000}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000007cd79edfff219a0b0000000000fe800000000000000000000000000000000000000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x225}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x1, 0x0, 0x0, 0x6, 0x0, 0x1}) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x3) socket$caif_stream(0x25, 0x1, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r4, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000180)={0x15134ef4b703a5e2, 0x2}) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40002) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 855.270116] net_ratelimit: 24 callbacks suppressed [ 855.270121] protocol 88fb is buggy, dev hsr_slave_0 [ 855.280228] protocol 88fb is buggy, dev hsr_slave_1 05:23:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 855.324158] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 856.230099] protocol 88fb is buggy, dev hsr_slave_0 [ 856.235233] protocol 88fb is buggy, dev hsr_slave_1 [ 856.390146] protocol 88fb is buggy, dev hsr_slave_0 [ 856.395261] protocol 88fb is buggy, dev hsr_slave_1 [ 856.550163] protocol 88fb is buggy, dev hsr_slave_0 [ 856.555294] protocol 88fb is buggy, dev hsr_slave_1 [ 856.560442] protocol 88fb is buggy, dev hsr_slave_0 [ 856.565497] protocol 88fb is buggy, dev hsr_slave_1 05:23:27 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800, 0x6f) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r2, &(0x7f0000000040)="ab09a7f69db1a841639555393344ea2e91703a5eb828923c56e09befafd9631bb5245a3a2d17ccf0661c7bdd86e97864844d43fed81f5aa776d387a3ab6c292762688d6231a3a63fd118499297e63bf5edba9f674430c9baccf0bf66aa4652abe29fa3c85dc0cfe31c5b79821c0086969111333fd4715a273042a1cddbb3f0006afe039304254f74b7a11ee560ab88fa1bb2c3ef47dfee249f27c2263eaf83088ce5f2bb35235e4add289f00af7f9a1dadc1ca913df2", 0xb6, 0x40, &(0x7f0000000140)=@l2={0x1f, 0x2, {0x5, 0x1, 0x2, 0x9, 0x7f, 0x2}, 0x1b, 0xa6}, 0x80) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x100000001, 0x0, 0x1}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x3) recvfrom(r0, &(0x7f00000000c0)=""/227, 0xe3, 0x20, 0x0, 0x0) 05:23:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe45800000000000000000000000000000000000000000000000000000000001000400000000180000000000bb1186ce", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) 05:23:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) iopl(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) [ 857.419541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400000, 0x0) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 05:23:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000888ff7b86dfb4b639ec4a9c7576ec2dc8ea306b01c9b2875a4f6830afd16944d36d3d668b4b9eaea00000000000000e120eacf", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0xfffffffffffffdae) 05:23:27 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendto$inet(r1, &(0x7f0000000040)="a12ccf10aa2beedc3e16dc10aea9440c74f2ee83e2f2692140e02bf1f56639c0e2e048069ff2248af845ef22175bc9a69849f29e73243a277a5084cc8318d5f96dc5cd1cb961191ddf773d1ddff2f4f41f3619cc0e060008da86145027949acec8895a04c6a500ffeba6e23fb132eb124ae70277f699e8e36a3ba8d29185e579", 0x80, 0x24000000, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r4, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x7851a2, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000140)) 05:23:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x1, 'batadv0\x00', {}, 0xfff7}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "29fd918fc59b0e3c", "817b4b0dcea8d8a68958359ad1ec07b83d5c43a00637bc0bc44ad518701cc8fe", "07853526", "ac1212aa2aeea1ad"}, 0x38) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000140)={'veth1_to_bridge\x00', {0x2, 0x4e23, @loopback}}) 05:23:27 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x27ac920d42b44a74}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x7427ededd67e0fa9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00\xcf\xb4\x9b\x92\x8c\xe1\xc9UZ\xec\xa2\xd2:\xa6wa\xf4\xaf^\xdd:\xf2=\x1f:\xbe\xf41Q\xb8k\xc7@\xd88\x1b\xae\x18O\xcd_/\x1d\xca\xe6\xf7\xc3u:\xdd\xc5Tg\x89]Yo\xe1\xfc0Q\xe5\x0eKW\xf1\xd6bh0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503de62997f912167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9ad1fa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc7467e70fc139b8"], 0x2, 0x2) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r8, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r10 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r12 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r13, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r12, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r14, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503de62997f912167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9ad1fa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc7467e70fc139b8"], 0x2, 0x2) r15 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r16 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r16, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r15, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r15, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r17, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503de62997f912167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9ad1fa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc7467e70fc139b8"], 0x2, 0x2) setgroups(0x7, &(0x7f0000000500)=[r7, r9, r10, r11, 0xee00, r14, r17]) r18 = syz_open_pts(r4, 0x4000000000000002) dup3(r18, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) fsetxattr$security_evm(r1, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "53399dbdd11c21b372e5c66f0e398754"}, 0x11, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x1}) dup3(r2, r0, 0x0) 05:23:28 executing program 0: socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r0, &(0x7f0000000140)={0x0, 0x100000039, &(0x7f0000000000)=[{&(0x7f0000000380)=""/110, 0xffffffd9}], 0x1, 0x0, 0x4a}, 0x2f04) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) ioctl$TCGETX(r6, 0x5432, &(0x7f0000000180)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)={0x68, 0x29, 0x2, {0x80000000, [{{0x8, 0x3, 0x7}, 0x8, 0x6, 0x7, './file0'}, {{0x45d3d4c3f5f2fedb, 0x0, 0x2}, 0x3b, 0x86, 0x7, './file0'}, {{0x0, 0x3, 0x6}, 0x8, 0x8, 0xfffffd0e, './file0'}]}}, 0x68) ioctl$TCSETS(r3, 0x5402, &(0x7f00000001c0)={0x9, 0x0, 0x0, 0x4, 0x5, 0xef, 0x9a, 0xb0, 0x1, 0x10000, 0x80000000, 0x39f}) r8 = syz_open_pts(r7, 0x4000000000000002) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000200)=""/118) dup3(r8, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1f, 0x4) 05:23:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x2}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0xfffc}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r5, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xee6a9f01d1540a83}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6fe3}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcd}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x307}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x84}}, 0x40000) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x1ff) 05:23:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001740)=[{&(0x7f0000000100)=""/42, 0x2a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0079d) shutdown(r1, 0x0) shutdown(r2, 0x0) 05:23:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x106202, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x8a500, 0x0) write$selinux_create(r3, &(0x7f0000000100)=@access={'system_u:object_r:dri_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x65) r4 = syz_open_pts(r2, 0x0) dup3(r4, r0, 0x0) 05:23:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000100)={0x0, 0x32344d59, 0xf00, 0x870, 0x0, @stepwise}) r3 = syz_open_pts(r1, 0x0) dup3(r3, r0, 0x0) [ 860.390118] net_ratelimit: 16 callbacks suppressed [ 860.390124] protocol 88fb is buggy, dev hsr_slave_0 [ 860.400313] protocol 88fb is buggy, dev hsr_slave_1 05:23:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffffd7, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCCBRK(r5, 0x5428) dup3(r2, r0, 0x0) 05:23:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 05:23:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x7fff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000640)={0x2, 'rose0\x00'}, 0x18) 05:23:30 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) recvfrom$packet(r1, &(0x7f0000000140)=""/232, 0xe8, 0x0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @random="9c04e77c7cba"}, 0x14) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'veth1\x00'}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r6, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000766408b5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) [ 860.550132] protocol 88fb is buggy, dev hsr_slave_0 [ 860.555238] protocol 88fb is buggy, dev hsr_slave_1 05:23:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x3, 0x300) dup2(r2, r1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000080)={0x20, 0x0, 0x8}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}]) 05:23:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r3, 0x4000}) r4 = syz_open_pts(r1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r11, 0x4000000000000002) dup3(r12, r10, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r10, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000200)=""/1) ioctl$TCSETS(r9, 0x40045431, &(0x7f00003b9fdc)) r13 = syz_open_pts(r9, 0x4000000000000002) dup3(r13, r8, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r8, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0xc, 0x35, 0x1, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r14, 0x2}, 0x8) dup3(r4, r0, 0x0) [ 860.629105] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 860.705089] batman_adv: batadv0: Adding interface: veth11 [ 860.710814] protocol 88fb is buggy, dev hsr_slave_0 [ 860.710868] protocol 88fb is buggy, dev hsr_slave_1 [ 860.710957] protocol 88fb is buggy, dev hsr_slave_0 [ 860.711006] protocol 88fb is buggy, dev hsr_slave_1 [ 860.732193] batman_adv: batadv0: The MTU of interface veth11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.766485] batman_adv: batadv0: Not using interface veth11 (retrying later): interface not active [ 860.774010] Unknown ioctl 1074021320 [ 860.776335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 861.110133] protocol 88fb is buggy, dev hsr_slave_0 [ 861.115299] protocol 88fb is buggy, dev hsr_slave_1 05:23:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:31 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) 05:23:31 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x121301, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100613070000020000000000fe8000000300000000000000000000000000000000000000000000000000000100000000000000000030000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x100, 0x18}, 0xc) fsetxattr$security_evm(r1, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v2={0x0, 0x3, 0x12, 0x2927b1ff, 0xeb, "31fa40696a51a30499e6b1132d2f93420e213dd2f97c9ffe19ef9d9f01e2c1b1f28fecdb0d060d464b172b73db67b5b1bf1e4f8821c1089c84179e84a6b08f7265705a776ade9c2add00804d543961ccc73d8232dbec2db9c86cb89981214ff86327005272ee2ee72e166755a3ea5a3be2b6b24239329b747f7638a587306da5d0fb921426f0cf532cd7679730c916a248abbb645caa862e9c29dc247b20598ba62ed126f1702d04309edbb626ef27eb5b08b64269c2916e7708eb842a3d7251b772e4877ecdddcb5df50ad2809a385d2d7c77cd4dfad7cb267c1e0b6a844eba6ef7b680fe35cfdbd8f065"}, 0xf5, 0x0) 05:23:31 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x8001, 0x1f, 0x8, 0x8000, 0x401, 0x80, 0x8, {0x0, @in6={{0xa, 0x4e22, 0x40, @loopback, 0x7fffffff}}, 0x7ff, 0x3, 0xa6b, 0x9, 0xeef}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000002c0)=""/183) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') 05:23:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa0}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x84004) [ 861.479657] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1552 sclass=netlink_xfrm_socket pig=29915 comm=syz-executor.0 [ 861.500843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 861.516202] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1552 sclass=netlink_xfrm_socket pig=29919 comm=syz-executor.0 05:23:31 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/netfilter\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x290400, 0x0) 05:23:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x114, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {0x0, 0xfffffffffffffffd}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd25, 0x70bd28, 0x70bd2d, 0x70bd2b, 0x5, [0x7, 0x40]}}]}, 0x114}}, 0x0) 05:23:31 executing program 3: mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x80000000000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 05:23:31 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 05:23:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100100070000000000000000fe800000000000000000000000000000000000000000000000000000000000010000000074ee00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x225}}, 0x0) [ 861.728853] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=272 sclass=netlink_xfrm_socket pig=29947 comm=syz-executor.5 05:23:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f00000000c0)="7af6841442489aff45a31d9224f784dff4be2173f609a1c14814cd78c8606918cd0526a8743330cbf0604a458c1cf307cf26b7c1692dc6697500ba557638084bd9bd9f4b69f9ef6ccdca91421e0385447937d7d7") 05:23:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x20, 0x4, 0x5bc, 0x77, 0xc0, 0x4}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:34 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tgkill(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0xd5, 0x6, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x304}, r2, 0xf, r0, 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 05:23:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstat(r0, &(0x7f0000000500)) getuid() 05:23:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x1a3d0, 0x0, 0x54000000, [], [{0x801, 0x0, 0x80000001, 0x0, 0x1}, {0x801, 0x0, 0x80080080000001}]}) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0x6a65bc0f1b6c398b, 0x70bd2b, 0x0, {}, [""]}, 0x14}}, 0x100) write$P9_RMKNOD(r4, &(0x7f0000000400)={0x14, 0x13, 0x2, {0x8a, 0x0, 0x4}}, 0x14) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0xffffffffffffffa7}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000033000000fec000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000001c000000000000000000000000000000000000000000000000000000000000000002eeffffffffffffff000000480001006d643500"/240], 0x4}}, 0x0) 05:23:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) alarm(0x1) 05:23:34 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x5a) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x50, 0x1) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x8200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x139, &(0x7f0000c91000), &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000580)=""/229, &(0x7f00000000c0)=0xe5) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000380)={0x0, 0x10, 0x5, @thr={&(0x7f0000001a40)="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", &(0x7f0000000680)="e10f690d78b4e2e367f1b31a144689c35b0c844e4f604ed4718aa9a4a1bf2bcf94b20a03f211213d74b0a2e5d9d20b45444d38f2c8a86a5843beca854ef86a0b6dc19cb6a58d1ae15400e134ff44706c8a79ca565838bcad50b42643410c9ea3c6b580b51ae4a26018bbd5fa7b27e4aae36d2fe8d6edbfdafa928ec38699bdc373390071f0707c280b6708add7a5761dcc16e7a92adf7bb076937592"}}, &(0x7f00000003c0)) r5 = gettid() tkill(r5, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) [ 864.604887] audit: type=1804 audit(1575264214.771:870): pid=29968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir485127678/syzkaller.dKChb5/1182/file0/bus" dev="ramfs" ino=112217 res=1 [ 864.650542] audit: type=1804 audit(1575264214.781:871): pid=29970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir485127678/syzkaller.dKChb5/1182/file0/file0/bus" dev="ramfs" ino=112225 res=1 05:23:34 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6b) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:34 executing program 0: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4, 0x4, 0xa00000, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6ba7a95048317940}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2f62002329c66c6219ed01d8fb29f67a14607314be0ed23cdc9bae9da5b69f21e690a10cc49e2e22dd8070817ea7b4bc34bf6abb2e8c955c9b6eb423b9ac7ac897a164813cb0e409fb9074faecbfdc78539259de60ad8243baa4267dab8a096eab483d7ef3621be16dc241c816b653ecfb75a63ca0c74da69fa7858b5ea10b0139da49670f2ea8d65045b6e4cab2e46983d1bdf5c402cb15028333c2aac661ecd3e3125898de1a6c113f0f19a4b40ae4ea59503e78e5e482681b8d402d00a61faee80b3dad8363583e3dac91a2"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x84c46ab6098d85) umount2(&(0x7f0000000540)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x30, 0x80001000, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) 05:23:34 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x9) getpgid(0xffffffffffffffff) r2 = gettid() geteuid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) sched_setaffinity(r2, 0xfffffffffffffc82, &(0x7f0000000200)=0x20000000000000f2) tkill(0xffffffffffffffff, 0x400003c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xffffffffffffffff, 0x3) prlimit64(r0, 0xc3cf73c609df37e4, &(0x7f00000000c0)={0x100000000005, 0x3c9}, &(0x7f0000000100)) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/igmp6\x00') getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) connect$packet(r3, &(0x7f00000001c0)={0x11, 0x6, r4, 0x1, 0x4, 0x6, @remote}, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x26000, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) dup3(r9, r7, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r7, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) openat$cgroup_ro(r7, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x1f7dd79a94ff7fc9, 0x0) getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f0000000240), &(0x7f0000000540)=0x7f2d4c92f299660b) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000240)=0x4) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x200}) r11 = syz_open_pts(r5, 0x0) dup3(r11, r3, 0x0) 05:23:34 executing program 2: socket$caif_stream(0x25, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) sendmsg$nl_generic(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4140000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x428, 0x17, 0x2, 0x70bd26, 0x25dfdbff, {0x6}, [@generic="036099d80ce8f1abf6f5d50eb59116430c8bc373bad83f4b741bd53c390558fedb0bf59882f4a2329180a6f3c8629ce425195408e8a45096ea2e639020ed1bb324c57a1664eababa47958f5688a87ee1153e606d2e6a85fa5bea79a35444e8a9e886ac0ffbe0ae511294e9fddcf6db6a5e1dd40a9da8c83db446bb5cea16539df9dd12b16848dabfe8307138922d700d34f981e6f485f6a073e7f6cdf3bf5bdae987df5c3abd936d14cbf8cdc7e5", @nested={0x17c, 0x1b, [@generic="a1692882971812d9caf5022a2004a6177b51445f4adadbcb462e8fc313d46b1571a4597e19f3ab7ecaa88efbb694edc63b418f4b4269ace76df30a8be12f", @generic="f52c24c8cb07cd9a53d30d8c0d408e48891ab40b457c53a7b36b0b950d506943d84fc9597db082c8dc8830de391e3cf147703466013f3d2b863f74cd6bac23b9b01e30e7979e382146a77438bafdec6178e59690acba5d8d1648a762b05d2d7e9dd2c14acb4273d9b94964a7e11e6fe69f36df5da3e560c3ef2474b8e4fa551ba20392f408a260452efc5a77d31582b83778dd8d700b87fc48553f907c7b6d71283f6592e53cdfa7779d5965cbfaeb467ad92be38281390809af2c15cd008616e93c95f8f33b861d43473e1fd422408080b3ef71fdbedd40e6", @generic="239dfbe40b706d995de29b58eaaf1455d88aa74d85d19125b9190a77638474595575cd4af85287003b6df3f3d03edf6f15cc1591884063563408f64b3639339650d0aa188bac46dd6f848ef6efec45a6b45d48433fc631d520ec708bcc8ba3d5"]}, @generic="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", @generic="9dbde024809fb71819c84237c3d99c3ffe7760718dfee9a071d7176bdb3bbde4516c0856ffcd6a627b535d389992d67c941c38d1959258ce6270b93fe977ea2b5356ace189109fabc07d535bc32f4781b4583f3d789aaa7795d13f85c30d2f2b1a3e52fdce114f035cc24f5ba8fb1fbccbdee713b49e22e74bb90ff0587841aece89fbb327e8d434897a4ce9fdcf0d849ac92cc1faed2ef70a8cbd73d5bcfb3773a6bb3a13c39686588258c41cdf40a074baf93b4e97f2e44532df1db58c7cf6ac8230831b863952b999440004e092ec77475b136e39abaa98ffb20e094d7f2a02adb82a5339e6ba4ccdd14d"]}, 0x428}}, 0x40) 05:23:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x80000000, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0xfff}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "5487e40f26335444", "df12b051f733e3a50c5b49c31e28d936d11123474134d69bfcda4416710eea6d", "5447a59b", "7356c49eb09ee067"}, 0x38) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) [ 864.833197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:35 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) inotify_init() inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/85, 0x19) r3 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000000c0)='\a', 0x0) accept$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000100)=r4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="994a5dc00f4903e8b8258742b47f06a883588b7095be7f2626398dec3fa0f9363a0c4f2e201ac3f21971d9a1eeb33481dc52658d5daa8a1d03487f72d2577b6f7d0d84fa22795d157d95ca0865324e411ebe14dc417b871a296302e42f34421f1bd06ad695847e8ae12364fcdcb6", 0x6e, 0x4000006, &(0x7f0000000600)=@hci={0x1f, r4, 0x3}, 0x80) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r5, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r5, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000940)={{{@in=@multicast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@remote, @in=@loopback, 0x4e22, 0xf4b, 0x4e23, 0x3, 0xa, 0x0, 0x1a0, 0x62, r4, r6}, {0x9, 0x2008000000, 0x9, 0x5, 0x351c6e1, 0x0, 0x7fffffff, 0xfff}, {0xffffffff00000000, 0x0, 0x3, 0x1}, 0x9, 0x6e6bba, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d3, 0x33}, 0xa, @in=@multicast2, 0x3504, 0x3, 0x0, 0x7, 0x1000, 0x0, 0x200}}, 0xe8) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001e0001060000000107000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x430, 0x230, 0x0, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r8 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) fcntl$lock(r8, 0x7, &(0x7f0000027000)={0x1}) r9 = getpid() tkill(r9, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) [ 864.909817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:35 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:35 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x8010, r2, 0x52934000) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0xfffffffffffffe5e}], 0x1}, 0x0) [ 865.036846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 865.047260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 865.087174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 865.109291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 865.148787] audit: type=1400 audit(1575264215.311:872): avc: denied { map } for pid=30019 comm="syz-executor.1" path="socket:[113084]" dev="sockfs" ino=113084 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 [ 865.670138] net_ratelimit: 24 callbacks suppressed [ 865.670143] protocol 88fb is buggy, dev hsr_slave_0 [ 865.681643] protocol 88fb is buggy, dev hsr_slave_1 [ 865.704073] audit: type=1804 audit(1575264215.871:873): pid=30028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir485127678/syzkaller.dKChb5/1183/file0/file0" dev="loop3" ino=8 res=1 [ 865.773822] audit: type=1804 audit(1575264215.941:874): pid=29995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir485127678/syzkaller.dKChb5/1183/file0/bus" dev="loop3" ino=7 res=1 [ 866.630125] protocol 88fb is buggy, dev hsr_slave_0 [ 866.635206] protocol 88fb is buggy, dev hsr_slave_1 [ 866.790114] protocol 88fb is buggy, dev hsr_slave_0 [ 866.795241] protocol 88fb is buggy, dev hsr_slave_1 [ 866.950143] protocol 88fb is buggy, dev hsr_slave_0 [ 866.955255] protocol 88fb is buggy, dev hsr_slave_1 [ 866.960388] protocol 88fb is buggy, dev hsr_slave_0 [ 866.965431] protocol 88fb is buggy, dev hsr_slave_1 05:23:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 05:23:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=""/87, 0x57}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b80)=[{&(0x7f0000001840)=""/248, 0xf8}], 0x1, 0x3d}}], 0x48}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) 05:23:37 executing program 0: remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 05:23:37 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) socket$inet(0x2, 0x9, 0x2) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="a08e4b13949882f37147afa1705baeae218ce37dbadb282e97acd58db938b10ff2b077e9059f04bfd50f7914c9c93088ad7c05eb") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x111200) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x2) 05:23:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x8200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x139, &(0x7f0000c91000), &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000580)=""/229, &(0x7f00000000c0)=0xe5) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000380)={0x0, 0x10, 0x5, @thr={&(0x7f0000001a40)="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", &(0x7f0000000680)="e10f690d78b4e2e367f1b31a144689c35b0c844e4f604ed4718aa9a4a1bf2bcf94b20a03f211213d74b0a2e5d9d20b45444d38f2c8a86a5843beca854ef86a0b6dc19cb6a58d1ae15400e134ff44706c8a79ca565838bcad50b42643410c9ea3c6b580b51ae4a26018bbd5fa7b27e4aae36d2fe8d6edbfdafa928ec38699bdc373390071f0707c280b6708add7a5761dcc16e7a92adf7bb076937592"}}, &(0x7f00000003c0)) r5 = gettid() tkill(r5, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 05:23:37 executing program 0: 05:23:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdb4, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6=@local, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 867.630922] audit: type=1400 audit(1575264217.801:875): avc: denied { map } for pid=30034 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=113115 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 867.699581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 867.779133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:38 executing program 2: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="4c566bca8454035394b56d9a08d8a5b91754be2ee39a3d8a161a9d8e2297ac9024949185789cdf80f1b9df51472d37f1cc4525b4c33c5ff6", 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) 05:23:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x1) dup3(r2, r0, 0x0) pipe2(&(0x7f0000000000), 0x0) 05:23:38 executing program 3: 05:23:38 executing program 0: 05:23:38 executing program 5: 05:23:38 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x28, &(0x7f00000000c0)='&[,cgroup/cgroupeth0)&\'posix_acl_access\x00', 0xffffffffffffffff}, 0x30) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/ipx\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000140)={0x80, 0x4, 0x3, 0x5, [], [], [], 0x1000, 0x28, 0x8, 0x4, "b398936e61f9623e3df0ec2c19b2ad38"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x1}) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:38 executing program 0: 05:23:38 executing program 5: 05:23:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/214, 0xd6}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000002c0)=""/251, 0xfb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/156, 0x9c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) shutdown(r4, 0x0) shutdown(r2, 0x0) [ 867.967962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/214, 0xd6}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000002c0)=""/251, 0xfb}, {0x0}], 0x2}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/156, 0x9c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 05:23:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000380)={0x1b0, 0x0, 0x7, [{0x3, 0xd37, 0x8, 0xdd, 'em1^proc'}, {0x1, 0x0, 0x1, 0xa2e, '@'}, {0x0, 0xa8c, 0x11, 0x7, '/dev/dlm-monitor\x00'}, {0xff, 0x7, 0x11, 0x7f, '/dev/dlm-monitor\x00'}, {0x2, 0x2, 0x11, 0x5, '/dev/dlm-monitor\x00'}, {0x3, 0xea, 0x11, 0x8001, '/dev/dlm-monitor\x00'}, {0x1, 0x6, 0x5, 0x2, '$proc'}, {0x4, 0x325deb58, 0x13, 0x1, 'lo!trusted}selinux%'}, {0x2, 0x1, 0x1, 0x3, 'E'}, {0x5, 0xffffffffe46a33fe, 0x11, 0x2, '/dev/dlm-monitor\x00'}]}, 0x1b0) socket$caif_stream(0x25, 0x1, 0x2) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt(r0, 0x9024, 0x3, &(0x7f00000000c0)="ad3cb98a611d86f9f64ae9a982cdd210a2165ab677fa07b39c9d482880fa7c12824f1649bcd7992b41a4fab712b42fe43663e8df22068a6d4c34ef6b6d5e3cf81258dc2c3dc944056f68c5bdd5dfa091557c1f3b55aaae7071aeef9cbb3e69d5974658866a9db6f5fc690b4480737a431d649e2d39f53b8355a9d86c3acb1d98", 0x80) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x5b26, 0x81}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000340)=0xffd2) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) [ 868.030493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:38 executing program 5: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000002c0)=""/251, 0xfb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/156, 0x9c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) shutdown(r1, 0x0) 05:23:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) write$P9_RREAD(r0, &(0x7f00000000c0)={0x95, 0x75, 0x1, {0x8a, "4fce8d68d707dfd9d6d99a30a549bd50922857deaebc970e8014a409feefbb7a6ca87966d4ba265178c8465897a82c52c0ebf04ea845b2befe446e5d02afe1fcccbc66c931c634283e4269636b2c0defe4807fc257ab46b6cd19b47a3cf1ba98b11f1af8e2d832ba23c0f047d2bd9f73d304bff2ef9498254fd29b7fe97a1459deabedfbcaef1833a96e"}}, 0x95) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:23:38 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r8}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r8, 0x7fff}, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b}, 0x0) 05:23:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x12f500, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x401, 0x0, 0xa, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7ff, 0xba3}) syz_open_pts(r1, 0x4000000000000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x4000000000000002) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) r3 = timerfd_create(0x0, 0x80800) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r3, r4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000000)=0xff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}) r8 = syz_open_pts(r7, 0x4000000000000002) dup3(r8, r6, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r6, &(0x7f0000000000)={0xffffff2e, 0x69, 0x0, {0x60}}, 0x51c4b17a) recvfrom$inet6(r6, &(0x7f0000000100)=""/234, 0xea, 0x10001, &(0x7f0000000200)={0xa, 0x4e24, 0xfffffff8, @empty, 0xffffff0f}, 0x1c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x400100, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}) r11 = syz_open_pts(r9, 0x4000000000000002) dup3(r11, r5, 0x0) syz_open_pts(r11, 0x800) 05:23:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r6, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xee6a9f01d1540a83}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff5b}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 05:23:39 executing program 3: poll(&(0x7f0000000100)=[{}], 0x20a7, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/228, 0xe4}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1}, 0x0) shutdown(r3, 0x0) shutdown(r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:23:39 executing program 0: poll(0x0, 0x0, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/210, 0xd2}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r0, 0x0) 05:23:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x40000, 0x0) 05:23:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x225}}, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r1) keyctl$revoke(0x3, r1) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r2) keyctl$revoke(0x3, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000080)=@chain={'key_or_keyring:', r2, ':chain\x00'}) 05:23:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsync(r1) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r0, 0x0) 05:23:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsync(r1) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r0, 0x0) 05:23:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsync(r1) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r0, 0x0) 05:23:39 executing program 0 (fault-call:7 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) [ 869.562356] FAULT_INJECTION: forcing a failure. [ 869.562356] name failslab, interval 1, probability 0, space 0, times 0 [ 869.573962] CPU: 1 PID: 30158 Comm: syz-executor.0 Not tainted 4.14.157-syzkaller #0 [ 869.581856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.591299] Call Trace: [ 869.593886] dump_stack+0x142/0x197 [ 869.597521] should_fail.cold+0x10f/0x159 [ 869.601673] should_failslab+0xdb/0x130 [ 869.605645] __kmalloc+0x2f0/0x7a0 [ 869.609172] ? mutex_trylock+0x168/0x1c0 [ 869.613308] ? tty_write_lock+0x20/0x60 [ 869.617282] ? tty_write+0x4b1/0x700 [ 869.620981] tty_write+0x4b1/0x700 [ 869.624527] ? process_echoes+0x150/0x150 [ 869.628667] __vfs_write+0x105/0x6b0 [ 869.632364] ? tty_read+0x270/0x270 [ 869.635974] ? kernel_read+0x120/0x120 [ 869.639853] ? __inode_security_revalidate+0xd6/0x130 [ 869.645041] ? avc_policy_seqno+0x9/0x20 [ 869.649093] ? selinux_file_permission+0x85/0x480 [ 869.653932] ? security_file_permission+0x89/0x1f0 [ 869.658848] ? rw_verify_area+0xea/0x2b0 [ 869.662904] vfs_write+0x198/0x500 [ 869.666445] SyS_write+0xfd/0x230 [ 869.669893] ? SyS_read+0x230/0x230 [ 869.676484] ? do_syscall_64+0x53/0x640 [ 869.680490] ? SyS_read+0x230/0x230 [ 869.684112] do_syscall_64+0x1e8/0x640 [ 869.688024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 869.692949] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 869.698126] RIP: 0033:0x45a679 [ 869.701301] RSP: 002b:00007f6dc6c01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 869.709016] RAX: ffffffffffffffda RBX: 00007f6dc6c01c90 RCX: 000000000045a679 [ 869.716283] RDX: 000000005339c2fa RSI: 0000000020000000 RDI: 0000000000000004 [ 869.723552] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 869.730840] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6dc6c026d4 [ 869.738104] R13: 00000000004cb3d1 R14: 00000000004e4a38 R15: 0000000000000007 [ 870.790134] net_ratelimit: 16 callbacks suppressed [ 870.790138] protocol 88fb is buggy, dev hsr_slave_0 [ 870.800235] protocol 88fb is buggy, dev hsr_slave_1 [ 870.950148] protocol 88fb is buggy, dev hsr_slave_0 [ 870.955273] protocol 88fb is buggy, dev hsr_slave_1 [ 871.110180] protocol 88fb is buggy, dev hsr_slave_0 [ 871.115339] protocol 88fb is buggy, dev hsr_slave_1 [ 871.120483] protocol 88fb is buggy, dev hsr_slave_0 [ 871.125532] protocol 88fb is buggy, dev hsr_slave_1 05:23:41 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r1 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xd5, "94a89617c24eb1e2a546654c9d828b57d944ea8cc71305a6ac176ffe95ccd85c49b8781baf1c346e18fa6a699fdd42b72949e60db3bc08c6a2b550a872de84060e6bb81e6570348d6d9956173ebac1e40a9b7d3e7238fef948fe7948ab99ef96ac0e0aec9533cd5d6e87e174cbd68b65fc3f5bd4c5f45aac1cf3a2a1cfd4aeedd90dd9245ab8a275d204af4c973bea3f01a8981a1472221f522f6d8b152da7ea208c2feb026b14c63a1877282fd4fae4e59eb3d16e6e758e30be71d2fe430513652d6d1b88c7a93ab2263e64e8b863db11eb00a755"}, &(0x7f0000000040)=0xdd) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r2, 0x1, 0x1, [0x9]}, &(0x7f00000000c0)=0xa) r3 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r3, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 871.218442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:23:41 executing program 3 (fault-call:3 fault-nth:0): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x701}, 0x14}}, 0x0) 05:23:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000100), 0x800) bind$rds(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r3, r4, 0x80000) 05:23:41 executing program 0 (fault-call:7 fault-nth:1): perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:23:41 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) r5 = socket$inet(0x2, 0x80000, 0x3f) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x5}}, 0x20}}, 0x0) bind(r5, &(0x7f0000003100)=@can={0x1d, r8}, 0x80) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0xc3da, 0xffff, [], &(0x7f0000000040)=0xb0}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x4000000000000002) dup3(r11, r9, 0x0) ioctl$KDSKBSENT(r11, 0x4b49, &(0x7f0000000140)="6678671a14aab88aa98c053c313c608a51a7e99424b1778f1be63fb50279ba80f2d4a3911046cdfb1b5cdc6ab3cabde34c281c6ce0b6146d7de62b66c5bcd756e0602379699e98de8afd6693780574189ed9e9c6b137234d123e93e2a61ccf0a4f307ceebe08fe4bf63979ed8a76e0ea28ec5e9dd3aac6fd95afce") ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0xffffffffffffff1a, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000100025080000000000000a00000000", @ANYRES32=r14, @ANYBLOB="0500000000000000"], 0x20}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000006c0)={@initdev, @broadcast, 0x0}, &(0x7f0000000700)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002dc0)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000002ec0)=0xe8) sendmmsg$inet(r9, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="07c333b865894487a46406eae20271289ed26ab14aafc4ec4bd26b4c95b7faaebf3d1168ed4fed9bc86ad6ad17cdc36843656ca5f5d3b33bb3032df4a35aed0d6436ea2a07ee2d31051c889998941c93fb5c1d33b8847ae2e92dd328b660ecfe0a69fcde770e68982c87c5930d1febead0e24af6cf18992a85d6b29ee11d4467e78bf5de04454e4f5af15ce902d26a278a0ca960eddbb137815354f977fb568c6c12dacd8a1e12e8a33c14b8762a62b136d024bd1653b593fe919165a0f6a4578bc696bcb118a796b96a5ec1b10bfe10f1129ec32ab6059a", 0xd8}, {&(0x7f0000000440)="a4770e9dd6888dde85f6e01b546cd6796d7efb9edb4eafc680c512846659da325e240066d0b2271067d1d13424aa7d4beacb88dce9f7fe4cbe5e247ec72e000fd4f5e9410af7ee3a13917346074311d3a068061654b996c156c9af28a7ae58447b411405ecf3886aa4fe7d724603f4dabdc4ebc37ddedbddbb8b9c7088e9607b2c1de05e8eb957a50980852d2bf538e8c19ed0b354fc881519c5884b64d4c8b2a955353e72965e0bcca3f43c", 0xac}, {&(0x7f0000000500)="bfbf874ea17794d9ea38a84e0eeadf55a90cbfd4afc9a59d61f33aa03c361750f637084cfabc757ae772a0b2afb07cd59ffb4d630b56f82a40a694913a6430facc0cd4bdb542d2f13efed7c6c35f2162f664fde2485e9b42b987574f677d2ad09feb597a8858567a6282160626e850883355d832c65bbf9ad8e3eca5c899d4d6c15ec5e9bd3d27928834e03b6fcd02347bb27d438e500296d73585105ca214403ea3b79c061014471fb6024f7c4453394a4d8ef37cf63fe28320f39c59eea5440713d0c737b33cd9fdeaec", 0xcb}, {&(0x7f00000000c0)="84c9bfa709dcc3cb4011934244cf2315ecf04a5d2e8f09fc602408efb9457178fd61847e78997f73920df00368b32414ceaa75c977189e81d802", 0x3a}, {&(0x7f0000000600)="562fefa656bf621a755b06ae7f04f227d57f140768ef41a1dc67ab25c3d01a78b5822564ea79ad97f44a042671595f81084bdc374268ad1b394edc39422010be2dbbbf3be399ad2a18259ccdc8cf434325151d507d4cf9376809d26b45a2a6620887e9d07fc917e7b006f46b3048eca028efc9256440a9803be3fd2ce358ee36a138c62b653b62546a414804bd4f3a4c87d2293761f62cbe7b547f62a05902eb", 0xa0}], 0x5, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @multicast2, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @loopback, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14}}], 0x70}}, {{&(0x7f00000007c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000800)="41c881215aa3b50da2ef381a90ebb4e0743e3813c9fd72d783b1dc64a9cda54b15fdcca117d3de2a64701fb00bcf752054628b7830c1bd47851dadbf5dbd1d03c1030924b0a167869336640f", 0x4c}, {&(0x7f0000000880)="cad95b8d52ea769af8759e343f3f057f8ccbc9e620ec939679edb53a339fdc3d05c1bf20dacc15112460fed86961c91b5e21aa802073ad4fc8aac4bff16df852399fabed19049562bed7c8c876b1bdb842c0e8a36a28c3d74a8bf4f0bca8d48c5cf1d1e1df725ef02380253ee17ad2fd533d27c346a149be4d26fade2462a9bdb0e1116e0e5f52a882688882f7f8cc23a6c1f96c45b8fd0a4c5a1a1a32bade460501f96d2ac1a15090ddd59a79e28bb1e96ca814ed94d3afbc8325bddf353a00687548c967610c4fe4b65b3f33", 0xcd}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="487f62869214ea336c80c28361bc2a38c273cbbd9e2539ce3fe16831aebb380f7e99c1089da531d91ed5e0e1333acdb22c4c6d52011d6da54984063873377c020d336c9239e6dd7055877992160889ea67c50ed1a5f72a32be1e41b2253d2d345e1aa0c361", 0x65}, {&(0x7f0000001a40)="45ac94de298df2b0d7250a6a1f7c2a113968044e55be35468559b6f5bdc3ea394302d53da5677d76704608e993894fc9b3362414c7025f32c350d8476763f9a8e05e7fe63b9c361b0a71abcd37a49de3d532dfdf67a56d7a6b27278467489a144f387369ec2387e54a4b65f5fd48dcbefbc1097cf097bf2b61c194ca9503de8b77e072c6dfa1a9763fdccf8944eec1b671740862b6795d3c9e113ed4f0b3bfd82519c1c040c10ace4ec94f80eeec630628b2cfd9d30735f13a78ced6cc98faea63f8bdcac34ee2d26537371f2a3f7841bd3efea41b32a2da4ae3513177d04a", 0xdf}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="ab5a72073561e1a671c9ce1296b48a466da53a9af47d60158c30b118b38c4978a91c616d5223ad5673e726d7bbe0fbeed79c37bc3df5f046708ebd7c51637f9cf7d5c267664dcde9b0f7cc3a5bf64a3b16288727b72b12ea8f0bd6d717b3eaabe31179f52f5df64be9ac614e7fb99e0a1e3248873f211b3399a6f516f04dcfe86a3caea0a836b0636ed30a889f98283dcaa450b39de8ea8a1e7d6f16516be2a50238338ff2c3b4348a9bef435e1ac4b61359449dce96d3514185e8457e91545490638095392a8b664618e1ace5436b5d92f416c64f035dc8da18291e", 0xdc}, {&(0x7f0000002c40)="e08cc2918e937e96efb03c3f7dae41889228d3cf317c082b9c2892123c53ea471676c391cd05753f57668d19edb7ae9b4106463ab6d47d311a66fed5e400858bfc9c26949fd6eb7b1ffc905ece397f68bc782fffe89f2139d163a1cb81b2b2e9e14575859e386c65d921fa471b27e6a666775b9dbfda82736b24316f8ff902bee98bbc68fe92d2187845702e6452aca85aa2b1e89f2926a8f134a57e31be5061fa08954465a16f19e67ee1eb3ef3c1f84766ba07fb0184c3227755cacfba5179ac94ceae7edf47af7b2333c77dfb956fb0017137809352a461940444151f3b", 0xdf}], 0x6, &(0x7f0000002f00)=[@ip_retopts={{0x10}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xe9, 0x0, 0x8, [{[@loopback], 0xfffffff9}, {[], 0x2}, {[], 0xfffffff9}]}, @timestamp={0x44, 0xc, 0xeb, 0x7a2af69d60f59822, 0x5, [{[@initdev={0xac, 0x1e, 0x0, 0x0}], 0xee}]}, @noop, @ssrr={0x89, 0xf, 0x40, [@dev={0xac, 0x14, 0x14, 0x29}, @remote, @remote]}, @rr={0x7, 0x7, 0x6, [@empty]}, @ssrr={0x89, 0x27, 0x7f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @remote, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @multicast2, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0xf, 0x9, [@dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @empty]}, @timestamp={0x44, 0x8, 0x7, 0x3, 0x5, [{[], 0x7fff}]}, @rr={0x7, 0x17, 0x6, [@rand_addr=0x7ff, @broadcast, @loopback, @multicast2, @remote]}, @ssrr={0x89, 0x1b, 0x6b, [@loopback, @loopback, @multicast2, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x13}]}, @timestamp={0x44, 0xc, 0x3f, 0x0, 0xf, [{[@local], 0x40}]}]}}}], 0x120}}], 0x3, 0x40000) [ 871.367156] FAULT_INJECTION: forcing a failure. [ 871.367156] name failslab, interval 1, probability 0, space 0, times 0 [ 871.416455] CPU: 0 PID: 30168 Comm: syz-executor.3 Not tainted 4.14.157-syzkaller #0 [ 871.424381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.433743] Call Trace: [ 871.436346] dump_stack+0x142/0x197 [ 871.439995] should_fail.cold+0x10f/0x159 [ 871.444159] should_failslab+0xdb/0x130 [ 871.448155] kmem_cache_alloc_node+0x287/0x780 [ 871.452752] __alloc_skb+0x9c/0x500 [ 871.452855] FAULT_INJECTION: forcing a failure. [ 871.452855] name failslab, interval 1, probability 0, space 0, times 0 [ 871.456811] ? skb_trim+0x180/0x180 [ 871.456821] ? netlink_autobind.isra.0+0x1c9/0x290 [ 871.456828] netlink_sendmsg+0x874/0xc60 [ 871.456838] ? netlink_unicast+0x650/0x650 [ 871.456848] ? security_socket_sendmsg+0x89/0xb0 [ 871.456855] ? netlink_unicast+0x650/0x650 [ 871.456864] sock_sendmsg+0xce/0x110 [ 871.456872] ___sys_sendmsg+0x70a/0x840 [ 871.456881] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 871.456889] ? __fget+0x210/0x370 [ 871.456899] ? find_held_lock+0x35/0x130 [ 871.456906] ? __fget+0x210/0x370 [ 871.456916] ? lock_downgrade+0x740/0x740 [ 871.456926] ? __fget+0x237/0x370 [ 871.456935] ? __fget_light+0x172/0x1f0 [ 871.456943] ? __fdget+0x1b/0x20 [ 871.456950] ? sockfd_lookup_light+0xb4/0x160 [ 871.456958] __sys_sendmsg+0xb9/0x140 [ 871.456964] ? SyS_shutdown+0x170/0x170 [ 871.456977] SyS_sendmsg+0x2d/0x50 [ 871.456982] ? __sys_sendmsg+0x140/0x140 [ 871.456990] do_syscall_64+0x1e8/0x640 [ 871.456997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 871.457007] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 871.457013] RIP: 0033:0x45a679 [ 871.457017] RSP: 002b:00007f4cd7d78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.457025] RAX: ffffffffffffffda RBX: 00007f4cd7d78c90 RCX: 000000000045a679 [ 871.457029] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 871.457033] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 871.457037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cd7d796d4 [ 871.457045] R13: 00000000004c944f R14: 00000000004e0e68 R15: 0000000000000004 [ 871.478580] kobject: 'loop3' (ffff8880a403e520): kobject_uevent_env [ 871.481250] CPU: 1 PID: 30172 Comm: syz-executor.0 Not tainted 4.14.157-syzkaller #0 [ 871.481256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.481259] Call Trace: [ 871.481276] dump_stack+0x142/0x197 [ 871.481290] should_fail.cold+0x10f/0x159 [ 871.481301] should_failslab+0xdb/0x130 [ 871.481311] __kmalloc+0x71/0x7a0 [ 871.485924] kobject: 'loop3' (ffff8880a403e520): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 871.490274] ? __mutex_lock+0x36a/0x1470 [ 871.490285] ? add_wait_queue+0x112/0x170 [ 871.490296] ? __tty_buffer_request_room+0x1a4/0x500 [ 871.490306] __tty_buffer_request_room+0x1a4/0x500 [ 871.490318] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 871.490331] pty_write+0x113/0x1d0 [ 871.611452] kobject: 'loop4' (ffff8880a40bae20): kobject_uevent_env [ 871.617952] n_tty_write+0x953/0xee0 [ 871.626319] kobject: 'loop4' (ffff8880a40bae20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 871.632204] ? lock_downgrade+0x740/0x740 [ 871.632214] ? process_echoes+0x150/0x150 [ 871.632223] ? do_wait_intr_irq+0x2a0/0x2a0 [ 871.632235] ? kasan_check_write+0x14/0x20 [ 871.732335] ? _copy_from_user+0x99/0x110 [ 871.736469] tty_write+0x3f6/0x700 [ 871.740008] ? process_echoes+0x150/0x150 [ 871.744191] __vfs_write+0x105/0x6b0 [ 871.747890] ? tty_read+0x270/0x270 [ 871.751580] ? kernel_read+0x120/0x120 [ 871.755448] ? __inode_security_revalidate+0xd6/0x130 [ 871.760614] ? avc_policy_seqno+0x9/0x20 [ 871.764660] ? selinux_file_permission+0x85/0x480 [ 871.769482] ? security_file_permission+0x89/0x1f0 [ 871.774388] ? rw_verify_area+0xea/0x2b0 [ 871.778427] vfs_write+0x198/0x500 [ 871.781944] SyS_write+0xfd/0x230 [ 871.785374] ? SyS_read+0x230/0x230 [ 871.788984] ? do_syscall_64+0x53/0x640 [ 871.792943] ? SyS_read+0x230/0x230 [ 871.796559] do_syscall_64+0x1e8/0x640 [ 871.800435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 871.805262] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 871.810444] RIP: 0033:0x45a679 [ 871.813619] RSP: 002b:00007f6dc6c01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 871.822172] RAX: ffffffffffffffda RBX: 00007f6dc6c01c90 RCX: 000000000045a679 [ 871.829423] RDX: 000000005339c2fa RSI: 0000000020000000 RDI: 0000000000000004 [ 871.836682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 871.843930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6dc6c026d4 [ 871.851180] R13: 00000000004cb3d1 R14: 00000000004e4a38 R15: 0000000000000007 [ 871.858457] [ 871.858459] ====================================================== [ 871.858461] WARNING: possible circular locking dependency detected [ 871.858462] 4.14.157-syzkaller #0 Not tainted [ 871.858464] ------------------------------------------------------ [ 871.858466] syz-executor.0/30172 is trying to acquire lock: [ 871.858467] (console_owner){-.-.}, at: [] vprintk_emit+0x2f1/0x600 [ 871.858472] [ 871.858473] but task is already holding lock: [ 871.858474] (&(&port->lock)->rlock){-.-.}, at: [] pty_write+0xe0/0x1d0 [ 871.858478] [ 871.858480] which lock already depends on the new lock. [ 871.858481] [ 871.858481] [ 871.858483] the existing dependency chain (in reverse order) is: [ 871.858484] [ 871.858485] -> #2 (&(&port->lock)->rlock){-.-.}: [ 871.858489] lock_acquire+0x16f/0x430 [ 871.858491] _raw_spin_lock_irqsave+0x95/0xcd [ 871.858492] tty_port_tty_get+0x22/0x90 [ 871.858493] tty_port_default_wakeup+0x16/0x40 [ 871.858495] tty_port_tty_wakeup+0x57/0x70 [ 871.858496] uart_write_wakeup+0x46/0x70 [ 871.858497] serial8250_tx_chars+0x40d/0xa10 [ 871.858499] serial8250_handle_irq.part.0+0x206/0x250 [ 871.858500] serial8250_default_handle_irq+0xa1/0x120 [ 871.858502] serial8250_interrupt+0xe9/0x1a0 [ 871.858503] __handle_irq_event_percpu+0x125/0x7f0 [ 871.858504] handle_irq_event_percpu+0x65/0x130 [ 871.858506] handle_irq_event+0xa7/0x134 [ 871.858507] handle_edge_irq+0x22b/0x840 [ 871.858508] handle_irq+0x39/0x50 [ 871.858509] do_IRQ+0x99/0x1d0 [ 871.858511] ret_from_intr+0x0/0x1e [ 871.858512] native_safe_halt+0xe/0x10 [ 871.858513] arch_cpu_idle+0xa/0x10 [ 871.858514] default_idle_call+0x36/0x90 [ 871.858516] do_idle+0x262/0x3d0 [ 871.858517] cpu_startup_entry+0x1b/0x20 [ 871.858518] rest_init+0x1d9/0x1e2 [ 871.858519] start_kernel+0x6df/0x6fd [ 871.858521] x86_64_start_reservations+0x29/0x2b [ 871.858522] x86_64_start_kernel+0x77/0x7b [ 871.858523] secondary_startup_64+0xa5/0xb0 [ 871.858524] [ 871.858525] -> #1 (&port_lock_key){-.-.}: [ 871.858529] lock_acquire+0x16f/0x430 [ 871.858531] _raw_spin_lock_irqsave+0x95/0xcd [ 871.858532] serial8250_console_write+0x709/0x930 [ 871.858533] univ8250_console_write+0x5f/0x70 [ 871.858535] console_unlock+0x9ba/0xed0 [ 871.858536] vprintk_emit+0x1f9/0x600 [ 871.858537] vprintk_default+0x28/0x30 [ 871.858538] vprintk_func+0x5d/0x159 [ 871.858539] printk+0x9e/0xbc [ 871.858541] register_console+0x614/0x9e0 [ 871.858542] univ8250_console_init+0x33/0x3f [ 871.858543] console_init+0x4d/0x5d [ 871.858545] start_kernel+0x43c/0x6fd [ 871.858546] x86_64_start_reservations+0x29/0x2b [ 871.858547] x86_64_start_kernel+0x77/0x7b [ 871.858549] secondary_startup_64+0xa5/0xb0 [ 871.858549] [ 871.858550] -> #0 (console_owner){-.-.}: [ 871.858555] __lock_acquire+0x2cb3/0x4620 [ 871.858556] lock_acquire+0x16f/0x430 [ 871.858557] vprintk_emit+0x32e/0x600 [ 871.858559] vprintk_default+0x28/0x30 [ 871.858560] vprintk_func+0x5d/0x159 [ 871.858561] printk+0x9e/0xbc [ 871.858562] should_fail.cold+0xe4/0x159 [ 871.858564] should_failslab+0xdb/0x130 [ 871.858565] __kmalloc+0x71/0x7a0 [ 871.858566] __tty_buffer_request_room+0x1a4/0x500 [ 871.858568] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 871.858569] pty_write+0x113/0x1d0 [ 871.858570] n_tty_write+0x953/0xee0 [ 871.858572] tty_write+0x3f6/0x700 [ 871.858573] __vfs_write+0x105/0x6b0 [ 871.858574] vfs_write+0x198/0x500 [ 871.858575] SyS_write+0xfd/0x230 [ 871.858577] do_syscall_64+0x1e8/0x640 [ 871.858578] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 871.858579] [ 871.858580] other info that might help us debug this: [ 871.858581] [ 871.858582] Chain exists of: [ 871.858583] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 871.858588] [ 871.858590] Possible unsafe locking scenario: [ 871.858590] [ 871.858592] CPU0 CPU1 [ 871.858593] ---- ---- [ 871.858594] lock(&(&port->lock)->rlock); [ 871.858597] lock(&port_lock_key); [ 871.858600] lock(&(&port->lock)->rlock); [ 871.858602] lock(console_owner); [ 871.858605] [ 871.858606] *** DEADLOCK *** [ 871.858607] [ 871.858608] 5 locks held by syz-executor.0/30172: [ 871.858609] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 871.858613] #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write_lock+0x20/0x60 [ 871.858618] #2: (&o_tty->termios_rwsem/1){++++}, at: [] n_tty_write+0x179/0xee0 [ 871.858624] #3: (&ldata->output_lock){+.+.}, at: [] n_tty_write+0x914/0xee0 [ 871.858628] #4: (&(&port->lock)->rlock){-.-.}, at: [] pty_write+0xe0/0x1d0 [ 871.858633] [ 871.858634] stack backtrace: [ 871.858636] CPU: 1 PID: 30172 Comm: syz-executor.0 Not tainted 4.14.157-syzkaller #0 [ 871.858638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.858639] Call Trace: [ 871.858641] dump_stack+0x142/0x197 [ 871.858642] ? vprintk_func+0x65/0x159 [ 871.858643] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 871.858645] __lock_acquire+0x2cb3/0x4620 [ 871.858646] ? trace_hardirqs_on+0x10/0x10 [ 871.858647] ? save_trace+0x290/0x290 [ 871.858648] ? SOFTIRQ_verbose+0x10/0x10 [ 871.858649] ? vprintk_emit+0x309/0x600 [ 871.858651] lock_acquire+0x16f/0x430 [ 871.858652] ? vprintk_emit+0x2f1/0x600 [ 871.858653] vprintk_emit+0x32e/0x600 [ 871.858654] ? vprintk_emit+0x2f1/0x600 [ 871.858655] vprintk_default+0x28/0x30 [ 871.858657] vprintk_func+0x5d/0x159 [ 871.858658] ? save_trace+0x290/0x290 [ 871.858659] printk+0x9e/0xbc [ 871.858660] ? show_regs_print_info+0x63/0x63 [ 871.858661] ? ___ratelimit+0x55/0x537 [ 871.858663] should_fail.cold+0xe4/0x159 [ 871.858664] should_failslab+0xdb/0x130 [ 871.858665] __kmalloc+0x71/0x7a0 [ 871.858666] ? __mutex_lock+0x36a/0x1470 [ 871.858667] ? add_wait_queue+0x112/0x170 [ 871.858669] ? __tty_buffer_request_room+0x1a4/0x500 [ 871.858670] __tty_buffer_request_room+0x1a4/0x500 [ 871.858672] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 871.858673] pty_write+0x113/0x1d0 [ 871.858674] n_tty_write+0x953/0xee0 [ 871.858675] ? lock_downgrade+0x740/0x740 [ 871.858677] ? process_echoes+0x150/0x150 [ 871.858678] ? do_wait_intr_irq+0x2a0/0x2a0 [ 871.858679] ? kasan_check_write+0x14/0x20 [ 871.858681] ? _copy_from_user+0x99/0x110 [ 871.858682] tty_write+0x3f6/0x700 [ 871.858683] ? process_echoes+0x150/0x150 [ 871.858684] __vfs_write+0x105/0x6b0 [ 871.858685] ? tty_read+0x270/0x270 [ 871.858687] ? kernel_read+0x120/0x120 [ 871.858688] ? __inode_security_revalidate+0xd6/0x130 [ 871.858689] ? avc_policy_seqno+0x9/0x20 [ 871.858691] ? selinux_file_permission+0x85/0x480 [ 871.858692] ? security_file_permission+0x89/0x1f0 [ 871.858693] ? rw_verify_area+0xea/0x2b0 [ 871.858694] vfs_write+0x198/0x500 [ 871.858696] SyS_write+0xfd/0x230 [ 871.858697] ? SyS_read+0x230/0x230 [ 871.858698] ? do_syscall_64+0x53/0x640 [ 871.858699] ? SyS_read+0x230/0x230 [ 871.858700] do_syscall_64+0x1e8/0x640 [ 871.858702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 871.858703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 871.858704] RIP: 0033:0x45a679 [ 871.858705] RSP: 002b:00007f6dc6c01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 871.858709] RAX: ffffffffffffffda RBX: 00007f6dc6c01c90 RCX: 000000000045a679 [ 871.858710] RDX: 000000005339c2fa RSI: 0000000020000000 RDI: 0000000000000004 [ 871.858712] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 871.858714] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6dc6c026d4 [ 871.858716] R13: 00000000004cb3d1 R14: 00000000004e4a38 R15: 0000000000000007 05:23:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000100), 0x800) bind$rds(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r3, r4, 0x80000) 05:23:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r1, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70a}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xee6a9f01d1540a83}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x43}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4050}, 0x1) 05:23:42 executing program 3 (fault-call:3 fault-nth:1): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x701}, 0x14}}, 0x0) 05:23:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xa}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) [ 872.620696] protocol 88fb is buggy, dev hsr_slave_0 [ 872.625747] protocol 88fb is buggy, dev hsr_slave_1 [ 872.639743] caif:caif_disconnect_client(): nothing to disconnect [ 872.647980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 872.696607] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 872.702152] caif:caif_disconnect_client(): nothing to disconnect [ 872.703423] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 872.712903] FAULT_INJECTION: forcing a failure. [ 872.712903] name failslab, interval 1, probability 0, space 0, times 0 [ 872.734629] CPU: 1 PID: 30186 Comm: syz-executor.3 Not tainted 4.14.157-syzkaller #0 [ 872.742544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.751905] Call Trace: [ 872.754506] dump_stack+0x142/0x197 [ 872.758169] should_fail.cold+0x10f/0x159 [ 872.762329] should_failslab+0xdb/0x130 [ 872.766306] kmem_cache_alloc_node_trace+0x280/0x770 [ 872.771398] ? kasan_unpoison_shadow+0x35/0x50 [ 872.775984] ? kasan_kmalloc+0xce/0xf0 [ 872.779866] __kmalloc_node_track_caller+0x3d/0x80 [ 872.784794] __kmalloc_reserve.isra.0+0x40/0xe0 [ 872.789453] __alloc_skb+0xcf/0x500 [ 872.793071] ? skb_trim+0x180/0x180 [ 872.796685] ? netlink_autobind.isra.0+0x1c9/0x290 [ 872.801613] netlink_sendmsg+0x874/0xc60 [ 872.805660] ? netlink_unicast+0x650/0x650 [ 872.809893] ? security_socket_sendmsg+0x89/0xb0 [ 872.814631] ? netlink_unicast+0x650/0x650 [ 872.818848] sock_sendmsg+0xce/0x110 [ 872.822547] ___sys_sendmsg+0x70a/0x840 [ 872.826509] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 872.831259] ? check_preemption_disabled+0x3c/0x250 [ 872.836256] ? lock_downgrade+0x740/0x740 [ 872.840392] ? __fget+0x210/0x370 [ 872.843834] ? lock_downgrade+0x740/0x740 [ 872.847964] ? __fdget_pos+0xab/0xd0 [ 872.851663] ? __fget+0x237/0x370 [ 872.855124] ? __fget_light+0x172/0x1f0 [ 872.859091] ? __fdget+0x1b/0x20 [ 872.862461] ? sockfd_lookup_light+0xb4/0x160 [ 872.866963] __sys_sendmsg+0xb9/0x140 [ 872.870752] ? SyS_shutdown+0x170/0x170 [ 872.874720] ? SyS_read+0x230/0x230 [ 872.879112] SyS_sendmsg+0x2d/0x50 [ 872.882638] ? __sys_sendmsg+0x140/0x140 [ 872.886686] do_syscall_64+0x1e8/0x640 [ 872.890556] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 872.895387] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 872.900562] RIP: 0033:0x45a679 [ 872.903738] RSP: 002b:00007f4cd7d78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.911429] RAX: ffffffffffffffda RBX: 00007f4cd7d78c90 RCX: 000000000045a679 [ 872.918704] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 872.925978] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 872.933239] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cd7d796d4 [ 872.940494] R13: 00000000004c944f R14: 00000000004e0e68 R15: 0000000000000004 05:23:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0x2, 0x7, 0x800, 0x467, 0x18, 0x9, 0x1f, 0x7, 0x8, 0x2}) r5 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r5, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r5, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:23:43 executing program 3 (fault-call:3 fault-nth:2): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x701}, 0x14}}, 0x0) [ 872.952343] kobject: 'loop0' (ffff8880a47543a0): kobject_uevent_env [ 872.961604] kobject: 'loop0' (ffff8880a47543a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 872.990617] kobject: 'loop3' (ffff8880a403e520): kobject_uevent_env 05:23:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000100), 0x800) bind$rds(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r3, r4, 0x80000) [ 873.000601] kobject: 'loop3' (ffff8880a403e520): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 873.012505] FAULT_INJECTION: forcing a failure. [ 873.012505] name failslab, interval 1, probability 0, space 0, times 0 [ 873.026981] CPU: 1 PID: 30196 Comm: syz-executor.3 Not tainted 4.14.157-syzkaller #0 [ 873.034887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.044244] Call Trace: [ 873.046841] dump_stack+0x142/0x197 [ 873.050477] should_fail.cold+0x10f/0x159 [ 873.054639] should_failslab+0xdb/0x130 [ 873.057633] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 873.058614] kmem_cache_alloc_node+0x287/0x780 [ 873.058624] ? __netlink_dump_start+0x10a/0x740 [ 873.058640] __alloc_skb+0x9c/0x500 [ 873.077849] ? skb_trim+0x180/0x180 [ 873.081460] ? __mutex_unlock_slowpath+0x71/0x800 [ 873.086304] netlink_dump+0x235/0xb10 [ 873.090090] __netlink_dump_start+0x4e6/0x740 [ 873.094630] ? genl_rcv_msg+0x119/0x150 [ 873.098587] ? genl_lock_dumpit+0x90/0x90 [ 873.102717] genl_family_rcv_msg+0xa75/0xc30 [ 873.107104] ? genlmsg_multicast_allns+0x271/0x2f0 [ 873.112453] ? genl_unregister_family+0x6a0/0x6a0 [ 873.117276] ? genl_lock_dumpit+0x90/0x90 [ 873.121403] ? genl_lock_done+0xd0/0xd0 [ 873.125369] ? genl_unlock+0x20/0x20 [ 873.129074] ? debug_smp_processor_id+0x1c/0x20 [ 873.133736] ? __radix_tree_lookup+0x1b3/0x2f0 [ 873.138312] genl_rcv_msg+0xb4/0x150 [ 873.142033] netlink_rcv_skb+0x14f/0x3c0 [ 873.146081] ? genl_family_rcv_msg+0xc30/0xc30 [ 873.150649] ? netlink_ack+0x9a0/0x9a0 [ 873.154522] ? genl_rcv+0x1a/0x40 [ 873.157960] genl_rcv+0x29/0x40 [ 873.161222] netlink_unicast+0x44d/0x650 [ 873.165268] ? netlink_attachskb+0x6a0/0x6a0 [ 873.169682] ? security_netlink_send+0x81/0xb0 [ 873.174247] netlink_sendmsg+0x7c4/0xc60 [ 873.178298] ? netlink_unicast+0x650/0x650 [ 873.182515] ? security_socket_sendmsg+0x89/0xb0 [ 873.187250] ? netlink_unicast+0x650/0x650 [ 873.191473] sock_sendmsg+0xce/0x110 [ 873.195167] ___sys_sendmsg+0x70a/0x840 [ 873.199127] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 873.203867] ? check_preemption_disabled+0x3c/0x250 [ 873.208866] ? lock_downgrade+0x740/0x740 [ 873.212998] ? __fget+0x210/0x370 [ 873.216433] ? lock_downgrade+0x740/0x740 [ 873.220578] ? __fdget_pos+0xab/0xd0 [ 873.224276] ? __fget+0x237/0x370 [ 873.227716] ? __fget_light+0x172/0x1f0 [ 873.231669] ? __fdget+0x1b/0x20 [ 873.235019] ? sockfd_lookup_light+0xb4/0x160 [ 873.239495] __sys_sendmsg+0xb9/0x140 [ 873.243278] ? SyS_shutdown+0x170/0x170 [ 873.247239] ? SyS_read+0x230/0x230 [ 873.250851] SyS_sendmsg+0x2d/0x50 [ 873.254373] ? __sys_sendmsg+0x140/0x140 [ 873.258418] do_syscall_64+0x1e8/0x640 [ 873.262285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 873.267118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 873.272297] RIP: 0033:0x45a679 [ 873.275473] RSP: 002b:00007f4cd7d78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.283172] RAX: ffffffffffffffda RBX: 00007f4cd7d78c90 RCX: 000000000045a679 [ 873.290512] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 05:23:43 executing program 3 (fault-call:3 fault-nth:3): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x701}, 0x14}}, 0x0) [ 873.297762] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 873.305021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cd7d796d4 [ 873.312271] R13: 00000000004c944f R14: 00000000004e0e68 R15: 0000000000000004 [ 873.326143] caif:caif_disconnect_client(): nothing to disconnect [ 873.330829] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 873.346356] kobject: 'loop3' (ffff8880a403e520): kobject_uevent_env 05:23:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x7, 0x0, 0x3b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x4, 0x92a}, 0x0, 0x9, 0xffffffffffffffff, 0xa) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:23:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000100), 0x800) bind$rds(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) dup3(r3, r4, 0x80000) [ 873.353840] kobject: 'loop3' (ffff8880a403e520): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 873.392734] kobject: 'loop4' (ffff8880a40bae20): kobject_uevent_env [ 873.394801] FAULT_INJECTION: forcing a failure. 05:23:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') socket$caif_stream(0x25, 0x1, 0x3) [ 873.394801] name failslab, interval 1, probability 0, space 0, times 0 [ 873.418768] kobject: 'loop4' (ffff8880a40bae20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 873.419970] CPU: 1 PID: 30206 Comm: syz-executor.3 Not tainted 4.14.157-syzkaller #0 [ 873.436125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.441666] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 873.445475] Call Trace: [ 873.445500] dump_stack+0x142/0x197 [ 873.445516] should_fail.cold+0x10f/0x159 [ 873.462232] should_failslab+0xdb/0x130 [ 873.466214] kmem_cache_alloc_node_trace+0x280/0x770 [ 873.471317] ? kasan_unpoison_shadow+0x35/0x50 [ 873.475902] ? kasan_kmalloc+0xce/0xf0 [ 873.479792] __kmalloc_node_track_caller+0x3d/0x80 [ 873.480386] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 873.484718] __kmalloc_reserve.isra.0+0x40/0xe0 [ 873.484731] __alloc_skb+0xcf/0x500 [ 873.502433] ? skb_trim+0x180/0x180 [ 873.506071] ? __mutex_unlock_slowpath+0x71/0x800 [ 873.510923] netlink_dump+0x235/0xb10 [ 873.514729] __netlink_dump_start+0x4e6/0x740 [ 873.519224] ? genl_rcv_msg+0x119/0x150 [ 873.523206] ? genl_lock_dumpit+0x90/0x90 [ 873.527367] genl_family_rcv_msg+0xa75/0xc30 [ 873.531780] ? genlmsg_multicast_allns+0x271/0x2f0 [ 873.533675] kobject: 'loop2' (ffff8880a40095e0): kobject_uevent_env [ 873.536732] ? genl_unregister_family+0x6a0/0x6a0 [ 873.536742] ? genl_lock_dumpit+0x90/0x90 [ 873.552097] ? genl_lock_done+0xd0/0xd0 [ 873.552267] kobject: 'loop2' (ffff8880a40095e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 873.556058] ? genl_unlock+0x20/0x20 [ 873.556070] ? debug_smp_processor_id+0x1c/0x20 [ 873.556083] ? __radix_tree_lookup+0x1b3/0x2f0 [ 873.566094] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 873.569208] genl_rcv_msg+0xb4/0x150 [ 873.569218] netlink_rcv_skb+0x14f/0x3c0 [ 873.573917] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 873.578422] ? genl_family_rcv_msg+0xc30/0xc30 [ 873.578431] ? netlink_ack+0x9a0/0x9a0 [ 873.610530] ? genl_rcv+0x1a/0x40 [ 873.613994] genl_rcv+0x29/0x40 [ 873.617284] netlink_unicast+0x44d/0x650 [ 873.621353] ? netlink_attachskb+0x6a0/0x6a0 [ 873.625769] ? security_netlink_send+0x81/0xb0 [ 873.629207] caif:caif_disconnect_client(): nothing to disconnect [ 873.630357] netlink_sendmsg+0x7c4/0xc60 [ 873.630369] ? netlink_unicast+0x650/0x650 [ 873.630383] ? security_socket_sendmsg+0x89/0xb0 [ 873.630392] ? netlink_unicast+0x650/0x650 [ 873.653771] sock_sendmsg+0xce/0x110 [ 873.657470] ___sys_sendmsg+0x70a/0x840 [ 873.661424] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 873.666162] ? check_preemption_disabled+0x3c/0x250 [ 873.671161] ? lock_downgrade+0x740/0x740 [ 873.675339] ? __fget+0x210/0x370 [ 873.678773] ? lock_downgrade+0x740/0x740 [ 873.682902] ? __fdget_pos+0xab/0xd0 [ 873.686601] ? __fget+0x237/0x370 [ 873.690042] ? __fget_light+0x172/0x1f0 [ 873.693996] ? __fdget+0x1b/0x20 [ 873.697344] ? sockfd_lookup_light+0xb4/0x160 [ 873.701821] __sys_sendmsg+0xb9/0x140 [ 873.705600] ? SyS_shutdown+0x170/0x170 [ 873.709558] ? SyS_read+0x230/0x230 [ 873.713161] SyS_sendmsg+0x2d/0x50 [ 873.716677] ? __sys_sendmsg+0x140/0x140 [ 873.720720] do_syscall_64+0x1e8/0x640 [ 873.724585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 873.729421] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 873.734675] RIP: 0033:0x45a679 [ 873.737843] RSP: 002b:00007f4cd7d78c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.745529] RAX: ffffffffffffffda RBX: 00007f4cd7d78c90 RCX: 000000000045a679 [ 873.752791] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 873.760043] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 873.767307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cd7d796d4 [ 873.774556] R13: 00000000004c944f R14: 00000000004e0e68 R15: 0000000000000004 [ 873.793985] kobject: 'loop3' (ffff8880a403e520): kobject_uevent_env [ 873.801877] kobject: 'loop3' (ffff8880a403e520): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 873.850237] caif:caif_disconnect_client(): nothing to disconnect [ 873.907231] kobject: 'loop2' (ffff8880a40095e0): kobject_uevent_env [ 873.913915] kobject: 'loop2' (ffff8880a40095e0): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:23:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000100), 0x800) bind$rds(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) dup3(r3, r4, 0x80000) 05:23:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0xfffffffffffffff9, 0x3}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:23:44 executing program 3 (fault-call:3 fault-nth:4): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x701}, 0x14}}, 0x0) 05:23:44 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x3b, @local, 0x4e24, 0x1, 'lblc\x00', 0x10, 0x300, 0x65}, 0x2c) 05:23:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x40, 0x20000000, 0x0, 0x8, 0xfffffffffffffffe, 0xfffffffc, 0x200}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) [ 874.394345] kobject: 'loop1' (ffff8880a47ae420): kobject_uevent_env [ 874.401493] kobject: 'loop1' (ffff8880a47ae420): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 874.412309] caif:caif_disconnect_client(): nothing to disconnect [ 874.433435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 874.454870] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 874.461584] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 874.474727] kobject: 'loop2' (ffff8880a40095e0): kobject_uevent_env [ 874.479807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 874.487354] kobject: 'loop2' (ffff8880a40095e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 874.509395] kobject: 'loop3' (ffff8880a403e520): kobject_uevent_env [ 874.523506] kobject: 'loop3' (ffff8880a403e520): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 874.534024] kobject: 'loop1' (ffff8880a47ae420): kobject_uevent_env [ 874.540711] kobject: 'loop1' (ffff8880a47ae420): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 874.573744] kobject: 'loop4' (ffff8880a40bae20): kobject_uevent_env [ 874.580245] kobject: 'loop4' (ffff8880a40bae20): fill_kobj_path: path = '/devices/virtual/block/loop4' 05:23:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x800) dup3(r3, r4, 0x80000) 05:23:46 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x248800, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) 05:23:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r4, 0x701}, 0x14}, 0x1, 0x0, 0x0, 0x3557d62f29744013}, 0x0) 05:23:46 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffb, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x9) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$P9_RWALK(r5, &(0x7f0000000040)={0x3d, 0x6f, 0x1, {0x4, [{0x993b100765b364f1, 0x0, 0x1}, {0x14, 0x4, 0x6}, {0x10, 0x2, 0x2}, {0x57ff47bb5b6ec222, 0x3, 0x6}]}}, 0x3d) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:23:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/d\xe4b~\xa0l]\xb4\x8b', 0x50040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) r5 = getpid() tkill(r5, 0x9) sched_setaffinity(r5, 0x8, &(0x7f0000000000)=0xf2) write$FUSE_LK(r2, &(0x7f0000000000)={0x28, 0x0, 0x1, {{0x36, 0x279c, 0x2, r5}}}, 0x28) r6 = syz_open_pts(r1, 0x0) dup3(r6, r0, 0x0) 05:23:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r4 = socket$pptp(0x18, 0x1, 0x2) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/205, 0xcd}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000380)=""/11, 0xb}], 0x4, 0x8229) r5 = accept(r3, &(0x7f0000000100)=@in={0x2, 0x0, @empty}, &(0x7f0000000180)=0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r7, 0xfc373bf004be72e5}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x3c}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8c}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) write$binfmt_misc(r6, &(0x7f0000000780)={'syz0', "d2e29a677a1f5ab0fafc6979710c2b5d240ad5020f56f6a07ea4053dfd5f4682c345f56a7b4277f3257da90c547e5ac4e5a374bfe5b2a022bdaa8091d0be8ab9ed6a795160ce8c9993f5d3d98e42dae218b10d86bd5a4b7d70e39954fb5715182baea6fc0c1b674cd0e301cf2a05a7a92eb8f8788e0bc4df8d0862f3f9877293e799ceede489c47e8183d5ce79abc0ffaa2701c067f2440c9756db08fe620b51bde466dd71c3a5b92c7a335e6b482eb2b070ac3462d663599bb9b8cadb99c4c3aac6148d6d595736ff4976ce142718515bf4f5c51f63160e8e62ee9f71c2dc6c82871a70"}, 0xe8) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) [ 875.967629] kobject: 'loop0' (ffff8880a47543a0): kobject_uevent_env [ 875.986306] kobject: 'loop0' (ffff8880a47543a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 876.001982] caif:caif_disconnect_client(): nothing to disconnect 05:23:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r3, r4, 0x80000) 05:23:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) dup3(r3, 0xffffffffffffffff, 0x80000) [ 876.039066] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 876.052612] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 876.053163] caif:caif_disconnect_client(): nothing to disconnect [ 876.100667] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 876.107469] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' 05:23:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x424701, 0x0) 05:23:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) dup3(r3, 0xffffffffffffffff, 0x80000) 05:23:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000600)=""/4096) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001500)=""/233) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503defc497f912167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9ad1fa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc7467e70fc139b8"], 0x2, 0x2) r6 = getuid() r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001ac0)) fsetxattr$system_posix_acl(r7, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r9, @ANYBLOB="9a0081702b257db334c8bf33fa9930f00aa4cd53d284432d908727b120111ac26b37b9ba93d2b592e4d0bbbc45c609f98b86cd445bb23f33831503de62997f912167d4089af57bd2ae481e5cbf47e7a5adff290ada694a9dc4bb9ad1fa57767cd0519d4b76847a56c105cf0dea2e6fd45353fc7467e70fc139b8"], 0x2, 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000015c0)={{0x0, r2, r5, r6, r9, 0xde, 0x97e}, 0x1dc000000000, 0x80000001, 0x7}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001540)={0x0, 0xfffffffffffffffe, 0x16, 0x7, @scatter={0x6, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/82, 0x52}, {&(0x7f0000001340)=""/41, 0x29}]}, &(0x7f0000001400)="1bd0f649d72523606aa6119e58c11e16f585b349fad2", &(0x7f0000001440)=""/188, 0x8, 0x8, 0x3, &(0x7f0000001500)}) socket$caif_stream(0x25, 0x1, 0x3) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2, 0x3, 0x8547fb64b7e513b1, &(0x7f0000ffc000/0x3000)=nil, 0x5}) [ 876.150854] kobject: 'loop4' (ffff8880a40bae20): kobject_uevent_env [ 876.158817] kobject: 'loop4' (ffff8880a40bae20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 876.177625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 876.184894] kobject: 'loop2' (ffff8880a40095e0): kobject_uevent_env 05:23:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, [], [{0x550f875, 0x0, 0x5, 0x4, 0x1, 0x32b}, {0x100, 0x7fffffff, 0x4, 0x5, 0x200, 0x6}], [[], [], [], [], [], [], [], []]}) ioctl$NBD_DO_IT(r4, 0xab02) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r1, 0x0) 05:23:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = fanotify_init(0x4, 0x2) dup3(r3, 0xffffffffffffffff, 0x80000) [ 876.206874] kobject: 'loop2' (ffff8880a40095e0): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:23:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) [ 876.252864] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 876.261932] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 876.276915] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 876.284154] kobject: 'nbd4' (ffff8880a42f4260): kobject_uevent_env [ 876.292973] kobject: 'nbd4' (ffff8880a42f4260): fill_kobj_path: path = '/devices/virtual/block/nbd4' [ 876.302789] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 876.311227] block nbd4: Receive control failed (result -22) [ 876.320617] kobject: 'nbd4' (ffff8880a42f4260): kobject_uevent_env [ 876.326975] kobject: 'nbd4' (ffff8880a42f4260): fill_kobj_path: path = '/devices/virtual/block/nbd4' [ 876.339802] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 876.346947] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 876.359334] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 876.366718] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 876.370540] block nbd4: shutting down sockets [ 876.400705] kobject: 'loop4' (ffff8880a40bae20): kobject_uevent_env [ 876.415301] kobject: 'loop4' (ffff8880a40bae20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 876.710111] net_ratelimit: 22 callbacks suppressed [ 876.710114] protocol 88fb is buggy, dev hsr_slave_0 [ 876.720192] protocol 88fb is buggy, dev hsr_slave_1 [ 876.790082] protocol 88fb is buggy, dev hsr_slave_0 [ 876.795231] protocol 88fb is buggy, dev hsr_slave_1 [ 876.897998] kobject: 'loop0' (ffff8880a47543a0): kobject_uevent_env [ 876.909157] kobject: 'loop0' (ffff8880a47543a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 877.030088] protocol 88fb is buggy, dev hsr_slave_0 [ 877.035175] protocol 88fb is buggy, dev hsr_slave_1 [ 877.070199] caif:caif_disconnect_client(): nothing to disconnect [ 877.190219] caif:caif_disconnect_client(): nothing to disconnect [ 877.235841] kobject: 'loop2' (ffff8880a40095e0): kobject_uevent_env [ 877.243562] kobject: 'loop2' (ffff8880a40095e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 877.430111] protocol 88fb is buggy, dev hsr_slave_0 [ 877.430143] protocol 88fb is buggy, dev hsr_slave_1 [ 877.435179] protocol 88fb is buggy, dev hsr_slave_1 [ 877.440245] protocol 88fb is buggy, dev hsr_slave_0 05:23:49 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01790d1536c034718b793e7b00008f6acaf9072975060000"], 0x14}}, 0x0) 05:23:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) 05:23:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) pwritev(r1, &(0x7f00000007c0)=[{&(0x7f0000000340)="dc8d1465d705ac159c13db754c63beb4674e14afafee394a209595a672459c6b88aae84c25d0dd0b58237c37c67423496d65c30cfa76b9bff5823a6d89874711a096cb33b19074e2dc1f4ff9c52e037f2feaf08572a0ee496434668cd236e53075555b32376d075966224d5b5c82fd77316ba9922452dff2f7371d9180e0758e1779f9441f36658b09506f35e00ee1864fb2", 0x92}, {&(0x7f0000000400)="11b06113ff8bd82680e420ca7a922b7ddb9cd7c8bccde988d0f2f2387475375e85016e760a2a6b6ae47a898a", 0x2c}, {&(0x7f0000000440)="878d6578920ba4b81dcc817a0fc059daf62d77dad751966c38f32ca8c6c3ceae95db67461c9eba68dea1d96216c46eaeb4d87c78fcac689be53182a68acf2b42e136213a92d385b679d49614041623128b62245d87f49eaba2da32bf1a71de662a1e591d29e6", 0x66}, {&(0x7f0000000580)="83d6a74f6310292b958a5e8d455b4fafba35e73aa991913fc61ecd666e67acf612e497d5019c0c1075e70deab819da7b2368b7dc90768c9e6d2003b35cc30e2391329399cc04f435ace5dba158f69c3c6c3eb72b71da81b9b04ad1ffc134f7fbdc336d67fd0f769eddb2b9763604bf49856ff051933023dd9a23d2fdeddde3a8851c22cd89685e2fbaf115042a0dfa69dba0cf128b19829ef98cb91c70da160491b317ea1e0be0", 0xa7}, {&(0x7f00000004c0)="b7e99b5cc73d3dae5c1df125d1025b4898a0f94623d3279a614d8036e8d208736cb18a32e72236f603af320277e8b1553655b88cfdc07f53150b9d21f0ea0e8fbf3124a69f31df77b76f4d8d52c26bd58126f6654e04b6712bf87a0b25125179162b5bf9284cd7", 0x67}, {&(0x7f0000000640)="1d39925badff70af35264afe3b3478599ba807ad88e2bdeebea1daff07a5c024e9677311bc8a8321c52e663e3ad7cf06f03f267ad7b8419848033554c0fcba3d82192ac512b73eff1d8fbc1060b6ab1cee7ed4f8726f4053392fbe7e43eed4", 0x5f}, {&(0x7f00000006c0)="c10612c08ed8c530c9ed4c049eda4219a2c3cbe387076479b0198db5917828bc9fcc371358385285697c6752d13bbc1e", 0x30}, {&(0x7f0000000700)="ec83f13a025af67a1fcb91e4632a176000710859d03dd51fc4fe0f6b8c52e2b3bc5c982cd26ca4b84865dbe0abb4c46fe03b287f73bbb815282f77256960fcea1fcb407f24f6e23b08de39ca03a97d4f8722cad5ddc36cb25a8777c828847f3945acd3bc639d41305e37eec728a1007a9896b5e5c4d7ca263aa21bcdcbee", 0x7e}, {&(0x7f0000000780)="fb1c18d00b7b80e1be4784de8a3dcec3759173751aaf951ba9d648fcf2d536191277bf71d141", 0x26}], 0x9, 0x4) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x2, 0x9, 0x9, 'queue1\x00', 0x3}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r4, 0x4000000000000002) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000900)) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0xfffffffd, 0x0, 0x200000, 0x9a6, 0x1, 0x0, 0x0, 0x21, 0x0, 0x8, 0x5, 0xffff}) r5 = syz_open_pts(r2, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) flistxattr(r6, &(0x7f00000001c0)=""/208, 0xd0) dup3(r5, r0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r7, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000002c0)) 05:23:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x626c42, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x9138) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000180)={0xffffffff, 0x0, 0x80}) r3 = syz_open_pts(r1, 0x4000000000000002) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) accept4$unix(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x800) dup3(r3, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x100, 0x0) 05:23:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 05:23:49 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r2 = dup2(0xffffffffffffffff, r0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000200)={0x8, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5}, 0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)={r5, 0xfff, 0x6}, 0x8) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffd4b, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f000040242808000800044004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 878.992637] kobject: 'loop1' (ffff8880a47ae420): kobject_uevent_env [ 878.999102] kobject: 'loop1' (ffff8880a47ae420): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 879.017450] kobject: 'loop3' (ffff8880a403e520): kobject_uevent_env [ 879.029962] caif:caif_disconnect_client(): nothing to disconnect [ 879.037224] kobject: 'loop3' (ffff8880a403e520): fill_kobj_path: path = '/devices/virtual/block/loop3' 05:23:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) [ 879.067219] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 879.077465] Unknown ioctl 16707 [ 879.081978] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 879.094156] Unknown ioctl 1074025521 [ 879.096261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 879.100909] caif:caif_disconnect_client(): nothing to disconnect 05:23:49 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r1, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="5400000006bcb4c49d700debd613fc4ba2d3216b2660bd3a107b932a00000000000000000000000100000000004bb05a000000000000000070726f635b2b73799074656d776c616e305c236367b000"/89], 0x54) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES64=r4, @ANYBLOB="8a028d72bc9698c9b990232149aae345f5885752f76409656f836f79fcfcea593f86e18445610bf6de71d23f242a8d315967191037f9dddb647923d48462306eb8a6e69f10328de893076a98416c6436528edfe3a21d20ca09fe71ecc041109164a29886edc4f060b3", @ANYRESDEC], 0x8}, 0x1, 0x0, 0x0, 0x20}, 0x0) [ 879.118549] kobject: 'loop3' (ffff8880a403e520): kobject_uevent_env [ 879.139762] kobject: 'loop3' (ffff8880a403e520): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 879.146405] Unknown ioctl 16707 [ 879.153417] Unknown ioctl 1074025521 05:23:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = fanotify_init(0x4, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r2, r3, 0x80000) 05:23:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f00000000c0)=0xc) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) 05:23:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$caif_stream(0x25, 0x1, 0x3) [ 879.169676] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 879.185585] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 879.204130] kobject: 'loop4' (ffff8880a40bae20): kobject_uevent_env 05:23:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) syz_open_pts(r1, 0x0) r2 = fanotify_init(0x4, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r2, r3, 0x80000) 05:23:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_pts(r4, 0x4000000000000002) dup3(r6, r3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r3, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000000)=0x7) 05:23:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) socket$caif_stream(0x25, 0x1, 0x3) [ 879.217316] kobject: 'loop4' (ffff8880a40bae20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 879.222103] caif:caif_disconnect_client(): nothing to disconnect [ 879.234813] kobject: 'loop2' (ffff8880a40095e0): kobject_uevent_env [ 879.245416] kobject: 'loop2' (ffff8880a40095e0): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:23:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x401, 0x7f, 0xff, 0x9b, 0xa, 0x1f, 0xfc, 0x40, 0x3ff, 0x40, 0x0, 0x1}) r2 = fanotify_init(0x4, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r2, r3, 0x80000) [ 879.284641] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 879.297939] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 879.313430] kobject: 'loop2' (ffff8880a40095e0): kobject_uevent_env [ 879.326901] kobject: 'loop2' (ffff8880a40095e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 879.355568] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 879.367729] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 879.395001] kobject: 'loop4' (ffff8880a40bae20): kobject_uevent_env [ 879.404428] kobject: 'loop4' (ffff8880a40bae20): fill_kobj_path: path = '/devices/virtual/block/loop4' 05:23:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) fsync(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000340)) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x2a, 0x0, 0x0, 0x0, 0x14, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x2}) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) 05:23:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) r2 = fanotify_init(0x4, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r2, r3, 0x80000) 05:23:50 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x210000, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x1) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x169800, 0x1) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) flistxattr(r3, &(0x7f0000000180)=""/165, 0xa5) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r7, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) poll(&(0x7f0000000140)=[{r1}, {r2, 0x40c}, {r3, 0x8}, {r4, 0x2010}, {r5, 0x1}, {r6, 0x1421}, {r7}, {r0, 0x181}], 0x8, 0x7) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400002, 0x0) write$selinux_context(r8, &(0x7f00000002c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="24000000180007351dfffd946f6105000a2800091f0000402428080008000440040012002800000012000000000000eff24df22dcfa47e23f7efbf5400"/76, 0x4c}]}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r9, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000580)={0x8, 0x78fe, 0x2, 0x36b5, 0x6, [{0x5, 0x1, 0x4, 0x0, 0x0, 0x284}, {0x8}, {0xee9, 0x2227, 0x1, 0x0, 0x0, 0x1606}, {0x1, 0x8da, 0x8, 0x0, 0x0, 0x1}, {0x0, 0x5, 0xfe80, 0x0, 0x0, 0x302}, {0x7, 0x8001, 0xfffffffffffffffd, 0x0, 0x0, 0x1008}]}) 05:23:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffff2e}, 0x5339c2fa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x14}, 0x8) r6 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x898, 0x240) ioctl$KVM_S390_VCPU_FAULT(r6, 0x4008ae52, &(0x7f0000000100)=0x7) r7 = syz_open_pts(r0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r8, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000540)=0x4) ioctl$TCFLSH(r1, 0x540b, 0x6fcc) socket$netlink(0x10, 0x3, 0x7) dup3(r8, r7, 0x100000) [ 879.838101] kobject: 'loop0' (ffff8880a47543a0): kobject_uevent_env [ 879.844686] kobject: 'loop0' (ffff8880a47543a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 879.870649] kobject: 'loop5' (ffff8880a4100ea0): kobject_uevent_env [ 879.877106] kobject: 'loop5' (ffff8880a4100ea0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 879.905172] kobject: 'loop1' (ffff8880a47ae420): kobject_uevent_env [ 879.917543] kobject: 'loop1' (ffff8880a47ae420): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 879.952367] kobject: 'loop1' (ffff8880a47ae420): kobject_uevent_env [ 879.959029] kobject: 'loop1' (ffff8880a47ae420): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 880.665475] kobject: 'loop0' (ffff8880a47543a0): kobject_uevent_env [ 880.678374] kobject: 'loop0' (ffff8880a47543a0): fill_kobj_path: path = '/devices/virtual/block/loop0'