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", 0xe7c}], 0x7, &(0x7f0000001800)=[{0x10, 0x100, 0xfffffffffffffffc}, {0xf8, 0x101, 0x0, "b58a1e76da72711e26f92546085920e2151140014ee95b788ebbb8ff77531c59ffa4ec381a56a9c9760f8215d87a8fe4e2fef2da5db9144f1a90422e0e69eec821e1a289c19e44a4fb3b59692c8b248650395fed05b3389a023fff34ec61d39bab48877583151daa089221c2a478d2461b0590a1a1d610ca3357e60ddda01c8bf82d56ca2728300779c4da0b527b4633526e2e88880810ac90d6c7ed90529c2490f7564d38514b3fe5e0eb240e3aa780e59d5e7381e5163e4ae8849968b88c185bf9e5308425f082bfd52514bfe0a940e8885a66326d87969ea4afc4dbc2e105fce9bcbb24"}], 0x108}}], 0x1, 0x1000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='ip6gre0\x00', 0x10) 22:21:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x2}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:29 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0x4, 0x4) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x3b52a680ad741364, 0x0) r3 = getpid() getpriority(0xfffffffffffffffe, r3) ptrace$setregset(0x4205, r3, 0x201, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x11, 0xc, @tid=r3}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000180)) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x8000, 0x0) getpeername$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x14) 22:21:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x2600, 0x0) r1 = memfd_create(&(0x7f0000000300)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xc3\f\x8c\x8e\xac\x0ff\xa7\xbczF\x8b^\xeb\xec', 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r1, 0x0, 0x20020102000007) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000000c0)) 22:21:29 executing program 4: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x8040) ioctl$VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000000)={0x1ffffffffffffffe, 0xb, 0x1, "1deceddfe337e5323a0d3065b0a738ed74c62100bb078e20b4db1ee7077b825b", 0x6cc51a2f}) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010005, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000640)={0x5, 0x400, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000680), &(0x7f0000000800)=0x4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xa00100, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x7f, 0x4, 0x194, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000080)={0xffffffffffffffff, "cf8f4999dbd2fb9362088275510cd7ee195e45531414ab7c29dd30e1a651cc7a", 0x400, 0x20, 0x100, 0x8, 0x5}) 22:21:29 executing program 1: r0 = socket(0x200000000010, 0x2, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000000c0)="1f0000000102ffca0e00000000000000030501870b000100040423ca0000cf", 0x1f) [ 323.347868][ C1] net_ratelimit: 15 callbacks suppressed [ 323.347875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 323.359331][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 323.365088][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 323.370844][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:21:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x0, 0x7f}) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) 22:21:30 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x1f, 0x101}) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:tetex_data_t:s0\x00', 0x22, 0x2) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:30 executing program 4: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x8040) ioctl$VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000000)={0x1ffffffffffffffe, 0xb, 0x1, "1deceddfe337e5323a0d3065b0a738ed74c62100bb078e20b4db1ee7077b825b", 0x6cc51a2f}) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010005, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000640)={0x5, 0x400, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000680), &(0x7f0000000800)=0x4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xa00100, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x7f, 0x4, 0x194, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000080)={0xffffffffffffffff, "cf8f4999dbd2fb9362088275510cd7ee195e45531414ab7c29dd30e1a651cc7a", 0x400, 0x20, 0x100, 0x8, 0x5}) 22:21:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007121dff18946f610500020000001f003e0104000100080005000400ff7e280000001100ff000000000000eff24d8238cfa50223f7efbf7600000000000000000000000b0000", 0x4c}], 0x1}, 0x0) 22:21:30 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x300, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x500, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpgrp(r1) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000340), 0x4) getpgid(r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r2) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3e) r3 = getpgrp(0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) setpriority(0x0, r3, 0xffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xffffffffffff7fff, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x9, 0x9, 0x0, 0xfff, 0xfffffffffffffffb, 0x4e3fa439, 0xffffffffffff8000, 0x7fff, 0x200, 0x8, 0x7fffffff, 0x0, 0xe5, 0x3ff, 0xf, 0x3, 0x0, 0x1130, 0x1, 0x9, 0x0, 0x25, 0x5, 0x0, 0x7, 0x5, 0x4, 0x2, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x40, 0x81, 0x0, 0x6, 0x80000000, 0x100000000, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) ioperm(0x7, 0x3f, 0x9) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) open_tree(r0, &(0x7f00000002c0)='./file1\x00', 0x800) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="0200"/18], 0x8) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000080)={0x100000000000000, 0x6000, 0x7fff, 0x2}) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000003c0)='./file1\x00', &(0x7f00000006c0), &(0x7f0000000540)) 22:21:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x10}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:30 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x104}, {r1, 0x608}, {r2, 0x10}, {}, {r0}], 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f00000001c0)="92ecea4f387e43b8719bb7badaa796d1") r3 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) socket$kcm(0x29, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000080)={0xf5, 0x0, [0x401, 0x3f, 0x86a]}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x104}, {}, {r4, 0x8}, {r5, 0x608}, {}, {r4, 0xa2}, {0xffffffffffffffff, 0x400}], 0x7, 0x40) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'syz_tun\x00'}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x2000000000000000, 0x48c, &(0x7f0000000600)={0x2, 'vxcan1\x00'}, 0x18) 22:21:30 executing program 4: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x3281, 0x880b, 0x4, 0x60, 0x0, 0x0, 0x2, 0x0, 0x0, "e70100", 0x0, "cd0021"}}}}}}, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000000c0)=""/208) 22:21:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r4 = dup(r3) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000100)={0x4, 0xef, &(0x7f00000001c0)="bde4b31eac2e2025d53b4125fc4d4e3af2dc7b385c5a2a912aac628f5a361d1b0d06c7e6d628ab9616afa60426dec42efa94f9dd2e45936cb94589a6d3a1ddbf0c23c2dc5905966f16131c69c072bc36667156a0e517eec01f60d8a1b232b8791e1d1f107f29c1d9b0c16a61797009e6cf87108fb0cb7f91333dc42233163928a8ef8460f4fad160962cec9cf665bc18903b048a1757696b88a4b033d2c9f00e4e91f2a1be860589e272bc15cf3b194ed0dce38ce50a7d76e7eb6705aeb13e6e0e81ebbc629e1c82e9602a2edd49a42e39436b29d68bb675c19df28183fe1193f3a15e35e50e5fe4472c5e9ed06750"}) 22:21:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x4000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x34000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:31 executing program 4: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @remote}}, 0xfff, 0x4, 0x1, 0x4, 0x2}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e20, 0x3f, @local, 0x40}}, 0x3, 0x7}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x420000, 0x0) getpeername$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000003c0)={0x77359400}, 0x10) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x1bdd307, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='\'selinux-]\x00', &(0x7f0000000180)='\x00', 0x0) 22:21:31 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) write$binfmt_misc(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="b9e70807792416ab44bc9123cf383980107c6ce22eeacf626ed7ca1b0617044d76304ab5ab573d075619e35c6e4fef38c3046df258cab83c165331da3214a90d94d70de34a5935f8609886f9ac1cda2b2a2672a74f78401331695ea3d86b9b53840bf64f4938666b7cc2e39ce819d2f5ae5c85a1c26bcd45699e67508f7f53f14548ba9dd44f59e2c2fc89f8674ffb4e9120fb790bf834e3517656f511916b600b5ba968057ea849c9d0999dae8185c3dfcaeb9263cd0bfd03f3ed15cdb67a45b7bacc85239950755e9f57ba8ea838144e686079e5a33c91e184d9fafd4f6f7f89cf1df6b5e1d35983be1dad43eabae91a0d465afa6655df72", @ANYRES64=r5], 0x101) socket$inet(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x7b) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r7, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)={r7, 0x9e03, 0x99, "e69d838be522723735d66c8dc5549e81d94efa7e1bbbe10df67dfc3f4b6008867a2153d8230b5943df864eba31f28451b1f416481a7a60f43e48f38837404495f65a32bd988885d6d981c977919ec69a0d4f6a9ac320857d0996c81ca896930d9907111a31db230aad129d3f941965055793a48da1757b3c816e85e9c467492012fdeeb6f6b4f8296c45ffcf49d0639b1e2130d9a4e8ee63c9"}, 0xa1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) [ 324.185702][T30514] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 324.186785][T30502] IPVS: stopping backup sync thread 30514 ... 22:21:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x100000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:31 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x104}, {r1, 0x608}, {r2, 0x10}, {}, {r0}], 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f00000001c0)="92ecea4f387e43b8719bb7badaa796d1") r3 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) socket$kcm(0x29, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000080)={0xf5, 0x0, [0x401, 0x3f, 0x86a]}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x104}, {}, {r4, 0x8}, {r5, 0x608}, {}, {r4, 0xa2}, {0xffffffffffffffff, 0x400}], 0x7, 0x40) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'syz_tun\x00'}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x2000000000000000, 0x48c, &(0x7f0000000600)={0x2, 'vxcan1\x00'}, 0x18) [ 324.468988][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 324.469066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 324.475577][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 324.480836][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 324.555033][T30638] IPVS: stopping backup sync thread 30642 ... [ 324.562118][T30642] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 22:21:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)={0x3, 0x0, [{0x2dc, 0x0, 0x4ac}, {0xa09, 0x0, 0x7}, {0xb02, 0x0, 0x2cd}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000008c0)={[0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0x445}) 22:21:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000000)="66b9800000c00f326635000800000f303636f30fc7fb66b9870900000f320f38013cba4200b000ee660f2db400000f01c46464d1567866b9800000c00f326635010000000f30660f3a09fca6", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:21:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x400300}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:31 executing program 5: r0 = creat(&(0x7f0000000480)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0) renameat2(r1, &(0x7f0000000000)='./file1/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1]) 22:21:31 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x104}, {r1, 0x608}, {r2, 0x10}, {}, {r0}], 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f00000001c0)="92ecea4f387e43b8719bb7badaa796d1") r3 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) socket$kcm(0x29, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000080)={0xf5, 0x0, [0x401, 0x3f, 0x86a]}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x104}, {}, {r4, 0x8}, {r5, 0x608}, {}, {r4, 0xa2}, {0xffffffffffffffff, 0x400}], 0x7, 0x40) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'syz_tun\x00'}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x2000000000000000, 0x48c, &(0x7f0000000600)={0x2, 'vxcan1\x00'}, 0x18) 22:21:31 executing program 2: r0 = gettid() r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40082, 0x0) write$nbd(r1, &(0x7f0000000040)={0x67446698, 0x0, 0x3, 0x3, 0x4, "565b24352a39f1574959afd3e611b7a7e4b9fb50551341308ddced197a12c1f1017d81671c2da3d8bf75ce15df775dd06fe5bf822033db47e540e16a6f0b6f93882a4411a2496cc44cb9fdfcac7ae4e78610ba5ec9ef4f4a9af8b2bf1307df0d7d31fbcef6d06aae413d7e5177b717c231a7339400899b4fb6c1d738df0025257420b5f9544891c763039066ea287aaa42ad4887bdfbe1e6b84067e8982d18644460cc33a23cde"}, 0xb7) syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, 0x0) setreuid(r3, r4) r5 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) setreuid(r4, r6) exit(0x0) sched_rr_get_interval(r0, &(0x7f0000000140)) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:31 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0x5) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x2, 0x9}) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 22:21:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x1000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:31 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="ba", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000001c0)=0x100, 0x4) 22:21:31 executing program 0: socket$inet(0x2, 0x3, 0x20000000084) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x800, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0xff00, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x78) [ 325.042080][T30872] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 325.045130][T30742] IPVS: stopping backup sync thread 30872 ... 22:21:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x2000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:32 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000600)=ANY=[], 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x2, 0x1000, 0x81, 0xffff, 0x0, 0x3}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x1, 0x7, {0x0, 0x1c9c380}, 0x3}) socket$isdn_base(0x22, 0x3, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000007c0)) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x4000000000}, 0x3c) socket$inet_smc(0x2b, 0x1, 0x0) r2 = gettid() setpgid(0x0, r2) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r5 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r6 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r6, 0xc0287c02, &(0x7f0000000040)) r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x6, 0x582d6ef3766eff5d) ioctl$RTC_EPOCH_READ(r7, 0xc0287c02, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000240)=0xe8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x4000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000340)=0xc) msgget$private(0x0, 0x417) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{0x2, 0x6}, {}, {0x2, 0x2}, {}, {0x2, 0x0, r8}, {}, {0x2, 0x6}]}, 0x5c, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x400500, 0x0) 22:21:32 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x16010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) fsetxattr(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="e0ff75d7ee1c0d24737465642e707070302c736563186872a47900"], &(0x7f0000000180)='/dev/dsp#\x00', 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0xffffffff, 0x3, 0x201b, 0x6, 0xa, 0x3, 0x2, 0x4}}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 22:21:32 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x3, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syz_tun\x00', 0x1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x618, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x16048154}, 0x4048800) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000000000000f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xd78a0317181b52d6, 0x0, 0x0) 22:21:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x4000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 325.427846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 325.433649][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 325.438690][T30995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:21:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca52daa2216ca7bf070") syz_emit_ethernet(0x207843, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00080000000086dd60b40900000200003a020000000000000000000000000001830090780009040060b680fa000000000000000000000000c661ffffffffffff00000000000000000000ffffac14c102149e4590771f3a856a4d65bb40711e7eeda7ec7018a9dc0a0c2c548c6e61239c55911762ac6486ac48c5c4d1ff000000ac6a0eac64bdd800"/186], 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000080)={0xfffffffffffffffe, "7757e2fd37b49c4c47f1f081608a0d3d3096d15f13dd3204c9607a35b5e5ac90", 0x0, 0x8, 0x2, 0x5, 0x4, 0x0, 0x8, 0x24d85bdb}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') [ 325.469233][T30995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:21:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x40000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:32 executing program 2: fsetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.posix_acl_default\x00', &(0x7f0000000200)='posix_acl_access.,\x00', 0x13, 0x2) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') signalfd4(r1, &(0x7f0000000040), 0x8, 0x80000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x76a5049c897707ab}, 0x800) fchdir(r1) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:32 executing program 5: r0 = socket(0x10, 0x80000, 0xffffffffffeffffc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x272) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x200, 0x10000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/221) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071010000100feffffff0800000000000000", 0x24) 22:21:32 executing program 0: r0 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000240), 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000040)={r2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd6a, &(0x7f0000000080)={0x0, 0xfffffffffffffda0}}, 0x0) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="290000001800190000003fffffffda0602007a00fde8ff01084800040d0005000000000000000000ff", 0x29}], 0x1) sendmmsg$alg(r3, &(0x7f0000000140), 0x42, 0x0) 22:21:32 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$lock(r1, 0x10000000000025, &(0x7f00000000c0)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r1) 22:21:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x80ffffff}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82, 0x0) r4 = dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r5) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r5, &(0x7f0000000380)="52ad4884c0af34b25471", 0xa}]) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r8 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000240), 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r10 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r12 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r12, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000000240), 0x0) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r14 = creat(&(0x7f0000001640)='./file0\x00', 0x101) r15 = syz_open_dev$vcsa(&(0x7f0000001740)='/dev/vcsa#\x00', 0x200, 0x200000) r16 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r17 = eventfd(0x8) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x6, 0x1, &(0x7f0000001900)=@raw=[@alu={0x4, 0x9, 0xa, 0x3, 0x15, 0x0, 0x8}], &(0x7f0000001940)='GPL\x00', 0x7, 0x74, &(0x7f0000001980)=""/116, 0x41000, 0x1, [], 0x0, 0xc, r15, 0x8, &(0x7f0000001a00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xe, 0x6, 0x1}, 0x10}, 0x70) io_submit(r6, 0x8, &(0x7f0000002b40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8001, r7, &(0x7f0000000140)="5841abd18cd6eae4e8ac78ef3280467e5d9ddbac7f8eb8415a80963d3df74930f33690733961301db37fd1a648c752e051de8a772418884970b69e1f1b8f9e459a8e20140997f5bfbbf484c58e762e5eb4258df3b1e79667214a87d02196926bf74d81c5a14fc863221889645242ff633f5b0bea2a8841dd78f2", 0x7a, 0x6, 0x0, 0x0, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8000, r4, &(0x7f00000003c0)="5a20c203b864a4d2bf30f61d02bf186171fe00c7066722cc5ba83d0bb29c62657c64ddc2c407a163a27d24a0504601af5a3d5fb5a6c060203ddb0fcc01f362b2442c6d54b84c03a33511e9bba34c68f1e888383cc0b728728b838ac3a05a9eefa523904e817ff2a560ea4cbfe099ee1fed8d6c6aa2845349bf3f65318a5b8a19ff6438f2238b241b56086ab31ab722e5b2b30fca4cf80c49db3d1fa8a2214128101bae180977ba1e79b4c54122436a640aa347756bad253442017afca8572e042a", 0xc1, 0x263d, 0x0, 0x0, r8}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x9, r9, &(0x7f00000002c0)="28cf77cae984ff888227fa568cb94e413ba75c94e1f4989700320e750cbab4162256aaace4c955f0d83fb8be3026b668800366c13a2fa5aa5d23cfd780cbaf6cee1056fa3b80058870d4fffd87b5ef5db6a1a75b09301f915e547b70c4cb054a2b995c0176f31137c64d27f34c111ea43b23514fb7e638a3b63d135b5a", 0x7d, 0x5, 0x0, 0x0, r10}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x6, r11, &(0x7f0000000540)="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", 0x1000, 0x7, 0x0, 0x2, r12}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x8, 0x3ff, r13, &(0x7f0000001540)="556ec9da7a43c8edf7b8b739c2578e6e2f01e23a89345d9ce0c494fc5bac2b224b644ca87fcb225c60731aaf7dd86ea722ec5200de2502c06304a3d74e3d98459e4f56ec7b7744996bbfd47a5f9895a8330c55637eafd79a02170f87f71d8e7e7a068b5a9afc568da305ffce9439f10de566a735be8fa6ae09c19280c1eacbfca591d8260b340c7e8380d9fdd337d7ee63bc2df21e17740d3c915a43d7cdc28b02740f319bb641aca5b7fd8d87b8e22e176c181ea072395266c576024d3f11f916442caf5fb791529f4c1e7342eb63b6daa11a65ec8f250e1c01d2485645f2566085e8c623f0", 0xe6, 0x9, 0x0, 0x0, r14}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f00000016c0)="eef1373e837c6cf3f97058d12c3a67307b3ecdcfa97892b2f213a797d8b6c8e601b992258e44abfd5095fd4ee203e170d1d20874aa64374b2d0f36636c0323ac8e823758695cac1d46c9f8100f2f6a", 0x4f, 0x929f, 0x0, 0x2, r15}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff7, r16, &(0x7f00000017c0)="639d6c400d07b9b3d5a256fdb4033c068cbb49224fd812261db80361f4e0b4ead0a8eed3cef1ce48f05b94bff5db9d486e533652dd63908aeb9c83ce6e22ca4d19d03b9f46c4337bb9fdafca46da87e5136df63c3fc5a5595173bcec54098bec7731f0a76db66a58be6db0b0f2a32d1775975eb33f59ca6613965b6143044f616ac9f0dac3c8b5f9c9e9e4c1c792c4e38f6cbefdc0944b1412491f153435a8fba47acccede678ea85416f636d702d21274465d442aef689e1e685280a946c1ba66ae8452779cf359333e70dddf413190343a9b4679e93e0ee8f4a6a3aca65f570514da4ac0cf2389", 0xe8, 0x1, 0x0, 0x0, r17}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x8, 0x1, r18, &(0x7f0000001b00)="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", 0x1000, 0x7, 0x0, 0x1, r9}]) 22:21:32 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dc00000000cfe47bf070") r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x20a, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) fcntl$setstatus(r0, 0x4, 0x2000) 22:21:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socket$l2tp(0x18, 0x1, 0x1) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r2 = socket$inet(0xa, 0x3, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r3, 0xb22, 0x80000, 0x3f}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x5, {{0x2, 0x4e24, @empty}}}, 0x88) io_setup(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) 22:21:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) close(r3) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ftruncate(r4, 0x193d30ea) write(r0, &(0x7f0000000240)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 22:21:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0xffffff7f}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:32 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) io_setup(0x244, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x802) r1 = dup(r0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x7f83701a) write$FUSE_ATTR(r1, &(0x7f0000000040)={0x78, 0x0, 0x40000, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}}, 0x78) read$eventfd(r1, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000001300)=ANY=[@ANYBLOB="00100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc82b5379d4bd96398cd069b7d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000922177a59bae7cb7a5e1acf40b41e52816d96050bf42050983d7d94e0aa9b34cf4ca9892f6305ef220d9c480cdcbdb20ee292fc32828dd513b7c0c5255d415ae85b7dd8f4aac28c149dff1abd9aaca4f70c7c33f41327461e2c3101d2bfee1e8df1af3504d9340d00032c4bdb992cf7a8e3ec8d2955351cf14b40b0be860370d20a7b4d9b9e91d23580ebf9e83bfb18e98b7bf846d3a0bb9c370f3b559dcf88aa546be7e9ada542f590309bd11a9c1ab5fa2872df075f572"]) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 22:21:32 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, 0x0) setreuid(r5, r6) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x800, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fowner_gt={'fowner>', r5}}, {@pcr={'pcr', 0x3d, 0x11}}, {@dont_appraise='dont_appraise'}]}}) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x2}}, 0x24, 0x0) [ 326.096220][T31357] validate_nla: 15 callbacks suppressed [ 326.096229][T31357] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 326.167011][T31359] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 326.191206][T31359] __nla_validate_parse: 19 callbacks suppressed [ 326.191214][T31359] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.239586][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.270826][T31345] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 326.279122][T31345] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.303864][T31345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0xffffff80}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:33 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x2c) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1025, 0x0) r0 = getegid() r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd\a\x00\x00\x00C#D#c\x00', 0xfffffffffffffffc, 0x2) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, 0x0) setreuid(r2, r3) lchown(&(0x7f0000000100)='./file0\x00', r3, r0) 22:21:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) close(r3) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ftruncate(r4, 0x193d30ea) write(r0, &(0x7f0000000240)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 22:21:33 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) io_setup(0x244, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x802) r1 = dup(r0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x7f83701a) write$FUSE_ATTR(r1, &(0x7f0000000040)={0x78, 0x0, 0x40000, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}}, 0x78) read$eventfd(r1, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000001300)=ANY=[@ANYBLOB="00100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc82b5379d4bd96398cd069b7d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000922177a59bae7cb7a5e1acf40b41e52816d96050bf42050983d7d94e0aa9b34cf4ca9892f6305ef220d9c480cdcbdb20ee292fc32828dd513b7c0c5255d415ae85b7dd8f4aac28c149dff1abd9aaca4f70c7c33f41327461e2c3101d2bfee1e8df1af3504d9340d00032c4bdb992cf7a8e3ec8d2955351cf14b40b0be860370d20a7b4d9b9e91d23580ebf9e83bfb18e98b7bf846d3a0bb9c370f3b559dcf88aa546be7e9ada542f590309bd11a9c1ab5fa2872df075f572"]) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 22:21:33 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x21700, 0x4) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:33 executing program 0: clone(0x400000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgid(0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x2, 0x8, 0x80, 0x7f, 0x6ed6, r0}) socket(0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000180)) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ptrace(0x10, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) timer_create(0x2, &(0x7f0000000140)={0x0, 0x2c, 0x2, @thr={&(0x7f0000000200)="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", &(0x7f0000000100)="267a473e58d726e9552a"}}, &(0x7f0000001200)=0x0) timer_settime(r5, 0x0, &(0x7f0000001240)={{0x0, 0x989680}}, &(0x7f0000001280)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$poke(0x4201, r1, 0x0, 0x716000) 22:21:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x10000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 326.650901][T31370] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 326.682401][T31370] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 22:21:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, 0x0) setreuid(r4, r5) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in=@broadcast, 0x4e22, 0xffff, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0xff, r2, r4}, {0x1, 0x3, 0x1dc00, 0x3, 0x8, 0xad, 0x7, 0xfffffffffffffff7}, {0x3ff, 0x3f, 0x1f, 0x8}, 0xffffffff, 0x6e6bb2, 0x3, 0x1, 0x0, 0xe83ef600324ee8ad}, {{@in6=@local, 0x4d3, 0xa}, 0x2, @in=@loopback, 0x0, 0x1, 0xe2847e05cd52dab7, 0x1, 0xfff, 0x5, 0x3}}, 0xe8) r6 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000400)=0x200, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x83, "62a3c442c99dac62efae81d293daaa7ed54c9687a33a95bf93c8ce28ee40fc8ce251f617b86674e829dd3ad34a19bf8355aa788e253b212b39cd0fa214e6d56a94f2b2c476ba994b241fc07cba7a1fd2bdab2c9d65b12c3ba135b9a4c6c718014ad24f7aa6b09a45da09f96a45a3d7b2dda26f0629673f4e6bb073b383c94a0f406d3f"}, &(0x7f0000000340)=0x8b) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={r7, 0x3, 0x9}, &(0x7f00000003c0)=0x8) 22:21:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000000002, &(0x7f0000000140)=0x8000000010000006, 0x100000187) setsockopt$sock_int(r0, 0x1, 0x4000000200000002, &(0x7f00000001c0)=0x2, 0xac) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x80000000, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)=0xfffffffffffffee9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0x1677e39cfe03d191}, 0x4) dup2(r3, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr\x1c\xbdn\xa9\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r4, 0x400454d1, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0x2) 22:21:33 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x57, &(0x7f00000002c0)=[{&(0x7f0000001840), 0x1fff8}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000), 0x0) [ 326.767073][T31496] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 22:21:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_GROUP_FWD_MASK={0x8, 0x1c}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r1, 0xfff, 0xffffffffda906d27}, 0x8) 22:21:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x40030000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 326.831001][T31496] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.859807][T31498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) close(r3) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ftruncate(r4, 0x193d30ea) write(r0, &(0x7f0000000240)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 22:21:33 executing program 0: timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, r0+10000000}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4f93d7e9f18256b6, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/25) timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000340)) 22:21:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x100000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:33 executing program 1: r0 = socket(0x10, 0x80002, 0xc) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000701190300"/20], 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84cd2708514ac922}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x13}, [@typed={0x4, 0xa}, @typed={0x8, 0x70, @ipv4=@local}, @typed={0x8, 0x90, @pid=r3}, @typed={0xc, 0x65, @str='eth0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x11) [ 327.100316][T31727] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 327.115128][T31727] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.139609][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000140)=[{}]}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000100)='ns\x00') fchdir(r2) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000b, &(0x7f0000000040)=0x8000000010000006, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffefa, 0xfffffefffffffffe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001780)="e0c88c", 0x3}], 0x2}}], 0x1, 0x4008000) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4(r1, 0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x5, 0x20) r2 = gettid() ptrace$pokeuser(0x6, r2, 0x80000001, 0x3) pipe(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000b, &(0x7f0000000040)=0x8000000010000006, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x5, 0x2) sendto$inet6(r3, 0x0, 0xfffffffffffffefa, 0xfffffefffffffffe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001780)="e0c88c", 0x3}], 0x2}}], 0x1, 0x4008000) close(r3) 22:21:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x200000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:34 executing program 1: r0 = socket(0x10, 0x80002, 0xc) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000701190300"/20], 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84cd2708514ac922}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x13}, [@typed={0x4, 0xa}, @typed={0x8, 0x70, @ipv4=@local}, @typed={0x8, 0x90, @pid=r3}, @typed={0xc, 0x65, @str='eth0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x11) 22:21:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) close(r3) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ftruncate(r4, 0x193d30ea) write(r0, &(0x7f0000000240)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) [ 327.506412][T31743] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 327.618497][T31850] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 327.626781][T31850] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:34 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7}, 0x4) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 22:21:34 executing program 1: r0 = socket(0x10, 0x80002, 0xc) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000701190300"/20], 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84cd2708514ac922}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x13}, [@typed={0x4, 0xa}, @typed={0x8, 0x70, @ipv4=@local}, @typed={0x8, 0x90, @pid=r3}, @typed={0xc, 0x65, @str='eth0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x11) 22:21:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x400000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:34 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="fc00000048000700ab092500090007000a010000000000000000e293210001c000000000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000007008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190215b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41000000", 0xfc) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000140)={0xd8, 0x0, 0x10001}) 22:21:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = semget(0x1, 0x3, 0x80) statx(r0, &(0x7f00000001c0)='./file0\x00', 0xb3829e44c5a30bf6, 0x200, &(0x7f00000008c0)) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/50) r3 = getpgrp(r1) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000340), 0x4) shutdown(r0, 0x1) r4 = getpgid(r3) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3e) restart_syscall() r5 = getpgrp(r4) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) setpriority(0x0, r5, 0xffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[0x0, 0x0]) 22:21:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x4000000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:34 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) shutdown(r2, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time={0x77359400}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0bc5351, &(0x7f0000000280)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc0bc5310, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 327.967471][T31990] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 22:21:35 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) r2 = gettid() r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) kcmp$KCMP_EPOLL_TFD(r2, r0, 0x7, r1, &(0x7f0000000000)={r3, r1, 0x1}) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:35 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = semget(0x1, 0x3, 0x80) statx(r0, &(0x7f00000001c0)='./file0\x00', 0xb3829e44c5a30bf6, 0x200, &(0x7f00000008c0)) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/50) r3 = getpgrp(r1) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000340), 0x4) shutdown(r0, 0x1) r4 = getpgid(r3) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3e) restart_syscall() r5 = getpgrp(r4) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) setpriority(0x0, r5, 0xffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[0x0, 0x0]) 22:21:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x5000}) shutdown(r0, 0x0) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="c7", 0x1}], 0x1}}, {{&(0x7f0000000640)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000680)='~', 0x26}], 0x300}}], 0x2, 0x0) 22:21:35 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "c76a9eb979e2587aa56cbd7adfef78c1"}, 0x11, 0x1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, 0x0) 22:21:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x8000000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:35 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000000000)='.') recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000440)=""/97, 0x61}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000640)=""/13, 0xd}], 0x9, &(0x7f0000000740)=""/219, 0xdb}, 0x40012081) 22:21:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x80ffffff00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:35 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 22:21:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0xffffff7f00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 328.762695][T31993] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 22:21:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x5000}) shutdown(r0, 0x0) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="c7", 0x1}], 0x1}}, {{&(0x7f0000000640)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000680)='~', 0x26}], 0x300}}], 0x2, 0x0) 22:21:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0xffffffff00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x4e20, @loopback}}) setrlimit(0x7, &(0x7f0000000000)) socket$rxrpc(0x21, 0x2, 0xa) 22:21:35 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) fcntl$addseals(r3, 0x409, 0x0) dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000340)={0x10000000000f48b, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 329.090437][T32137] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 22:21:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x2}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xd9f, 0x4, {0x1, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177805bb65d053ffc7707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="c7d1", 0x2, 0x0, 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x6) open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000280)={0x1fffffffffffff0b, &(0x7f0000000180)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={0x0, 0x4}) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x100000000, 0x800, 0x7, 0x7}, 0x6) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xc, @win={{0x16fd, 0x1}, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x10000, 0x0) 22:21:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:36 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') prctl$PR_SET_FPEXC(0xc, 0x0) fchdir(r1) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r2, 0x41fca6058025e69b}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd398}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KDDELIO(r4, 0x4b35, 0xe61) getsockopt$packet_buf(r4, 0x107, 0x6, &(0x7f0000000000)=""/207, &(0x7f0000000100)=0xcf) ioctl(r3, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="240000002d0007041dfffd946fa2830020200a000900004c42000000000000ee00000000", 0x24}], 0x1}, 0x0) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x42, 0x0) 22:21:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xd9f, 0x4, {0x1, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177805bb65d053ffc7707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="c7d1", 0x2, 0x0, 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x6) open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000280)={0x1fffffffffffff0b, &(0x7f0000000180)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={0x0, 0x4}) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x100000000, 0x800, 0x7, 0x7}, 0x6) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xc, @win={{0x16fd, 0x1}, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x10000, 0x0) 22:21:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x10}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xd9f, 0x4, {0x1, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177805bb65d053ffc7707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="c7d1", 0x2, 0x0, 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x6) open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000280)={0x1fffffffffffff0b, &(0x7f0000000180)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={0x0, 0x4}) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x100000000, 0x800, 0x7, 0x7}, 0x6) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xc, @win={{0x16fd, 0x1}, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x10000, 0x0) 22:21:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r1 = getpid() getpriority(0xfffffffffffffffe, r1) ptrace$setregset(0x4205, r1, 0x201, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x80) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) 22:21:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x4000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:36 executing program 4: r0 = gettid() r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x80000000, 0xe, 0x4, 0x40000000, {}, {0x0, 0x8, 0x100000000, 0xfff, 0x8, 0xfffffffffffff001, "74755dad"}, 0x5, 0x1, @planes=&(0x7f0000000080)={0x8, 0xf2f1, @fd=0xffffffffffffffff, 0xaa5}, 0x4}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x131040, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000001c0)={0x3fc, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$FICLONE(r1, 0x40049409, r2) r4 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00c\xc7\x13\xda\x91I\x89\r\xda\xc2H\xf2\x916\x06\xed\x05\x1b\xbc\x889\xbd9\x1c\x00j\xd8\xf5\xf3\x17.\x9bZ\xfd\xb4\x9c\x8a\x91C\x9c\xda\xad\xc4\xedT\xc7un\x83\xdc\xd9Di\xaa\x03\xa9\xe19\f=\xc3I\xc1\xa0\'D8\x16$\xcd\x14\x98\x13p{\b\xc0\xfa\xab:*\xbf\xd7H\xd8\xb3\x1a\x10GP\"^\x83\xe5\xc1\xa4') exit(0x0) getdents(r4, 0x0, 0x0) 22:21:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x34000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x100000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000000)={0x1, 0x9}) 22:21:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xb}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = accept4(r4, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x80, 0x80000) r6 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0xc0ff20, 0x1, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2022}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x124, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x240000}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x50, r7, 0x34, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2ca7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4095}, 0x80000) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x20000000}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x500, 0x0) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f00000001c0)={0x1, 0x7, 0x6, 0x2}) getsockname$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000100)=0x200000000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x100000000000000, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="00000014f1ffffffffffffff0800010073667100480002000000000100000080b9a00600000000000000000000000033cc3598c9aa8178bdf1000000000000000000000000de7f4687000000000000000000000001009900007c24f1583940ea0e363002e94564838f54825863fe646c248656cb5d845549c5ceffcfeaab4260fca524afef20c0034fbd32262c964c61f3771603fd386dc70a77e574632bd950e808d63007d6c6251ac28f6b621f863af067671514a292528d7d2bef3b8444b64c875270810633f2eb7d7a89d0f3cf2074bb2e180772593cd728026dfe7b7bc2cbc705ed95700983ea22eefa47c53252758e28ba5302e15a86aff40a0cb6088e18f3326fa3a5dcd32cb951da688b87961591b4671e40cf37feaa14dd000000000000321e6e4daef23cf875a45a0643142ac688f2a10d2a194d7079ce17e9cbda5da7ecf526f153140e6640200000b3c3c00b656f9021957cb27486eea0345bdf43b770452e1353b94884160ab1357707dacc631c885e515d18f9e1697a8604cd27f232de351b821c373ad44e60efd73e28c85c3f602e6f2d8268"], 0x74}}, 0x0) 22:21:37 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x21) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x400300}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r1 = getpid() getpriority(0xfffffffffffffffe, r1) ptrace$setregset(0x4205, r1, 0x201, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x80) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) 22:21:37 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000b80)) getpid() fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001680)=[@mss, @timestamp, @timestamp, @window={0x3, 0x53, 0xa779e20}], 0x4) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/33) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) geteuid() r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={r0, &(0x7f0000001500)="d99ea0a63b19fdde3fa5d6c98993e9bdc78f741f4c4bfbdaad1c617b79f0ded096550385cd8192adbd20f93af3cf62103ccbc1dd101d9e794741e820710175f662b0ef22400d7ea3", &(0x7f0000001580)}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @broadcast}, &(0x7f0000000200)=0xc) getgid() fcntl$getownex(r0, 0x10, &(0x7f0000001640)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getresuid(0x0, &(0x7f0000001180), &(0x7f00000011c0)) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3, 0x18, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0xffffffffffffff29) 22:21:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xb}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = accept4(r4, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x80, 0x80000) r6 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0xc0ff20, 0x1, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2022}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x124, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x240000}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x50, r7, 0x34, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2ca7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4095}, 0x80000) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x20000000}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x500, 0x0) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f00000001c0)={0x1, 0x7, 0x6, 0x2}) getsockname$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000100)=0x200000000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x100000000000000, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="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"], 0x74}}, 0x0) 22:21:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x1000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:37 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000b80)) getpid() fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001680)=[@mss, @timestamp, @timestamp, @window={0x3, 0x53, 0xa779e20}], 0x4) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/33) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) geteuid() r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={r0, &(0x7f0000001500)="d99ea0a63b19fdde3fa5d6c98993e9bdc78f741f4c4bfbdaad1c617b79f0ded096550385cd8192adbd20f93af3cf62103ccbc1dd101d9e794741e820710175f662b0ef22400d7ea3", &(0x7f0000001580)}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @broadcast}, &(0x7f0000000200)=0xc) getgid() fcntl$getownex(r0, 0x10, &(0x7f0000001640)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getresuid(0x0, &(0x7f0000001180), &(0x7f00000011c0)) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3, 0x18, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0xffffffffffffff29) 22:21:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x401, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r3, 0x5}, 0xfffffffffffffe83}}, 0x0) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x1000) 22:21:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xb}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = accept4(r4, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x80, 0x80000) r6 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0xc0ff20, 0x1, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2022}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x124, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x240000}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x50, r7, 0x34, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2ca7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4095}, 0x80000) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x20000000}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x500, 0x0) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f00000001c0)={0x1, 0x7, 0x6, 0x2}) getsockname$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000100)=0x200000000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x100000000000000, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="00000014f1ffffffffffffff0800010073667100480002000000000100000080b9a00600000000000000000000000033cc3598c9aa8178bdf1000000000000000000000000de7f4687000000000000000000000001009900007c24f1583940ea0e363002e94564838f54825863fe646c248656cb5d845549c5ceffcfeaab4260fca524afef20c0034fbd32262c964c61f3771603fd386dc70a77e574632bd950e808d63007d6c6251ac28f6b621f863af067671514a292528d7d2bef3b8444b64c875270810633f2eb7d7a89d0f3cf2074bb2e180772593cd728026dfe7b7bc2cbc705ed95700983ea22eefa47c53252758e28ba5302e15a86aff40a0cb6088e18f3326fa3a5dcd32cb951da688b87961591b4671e40cf37feaa14dd000000000000321e6e4daef23cf875a45a0643142ac688f2a10d2a194d7079ce17e9cbda5da7ecf526f153140e6640200000b3c3c00b656f9021957cb27486eea0345bdf43b770452e1353b94884160ab1357707dacc631c885e515d18f9e1697a8604cd27f232de351b821c373ad44e60efd73e28c85c3f602e6f2d8268"], 0x74}}, 0x0) 22:21:37 executing program 0: sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="c9362f36706fd7ffcbab6c4258a1591bcb6477d3a2b1f22c192d9e479b93abba8407070db4a99328a6d1e03b3e7cf34d483c70ed565a953aa9f49f0b2c08b545ab4a19189b7be0215b80cb12b153ef95905de56c0500000000000000f77a9f82fb4bec57cf2316947dc5361554d35d8284903091196472835bbb6b03bf528e08b981e00748c01079", @ANYRES16=0x0, @ANYBLOB="fe"], 0x3}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1000020000000, 0x7ff0bdbe}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x4004550c, 0x0) 22:21:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x2000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) 22:21:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x4000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCOUTQ(r1, 0x5411, 0x0) 22:21:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TCSBRK(r1, 0x5409, 0x5db) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 22:21:38 executing program 0: syz_emit_ethernet(0x12ca, &(0x7f0000000180)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x1294, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[@fragment={0x33, 0x0, 0x5, 0x7, 0x0, 0x5, 0x68}, @dstopts={0x2c, 0x31, [], [@pad1, @calipso={0x7, 0x10, {0xa9, 0x2, 0x1, 0x5, [0x20000000]}}, @generic={0x100, 0xa9, "dd737184f4b3d0e61e156315eda2297134fe0aec66012c3f65a8cd3bbaa238b3b5e88d96dc27a062ef0b6e950e888f87dad291fa80c9e64986067b12c5cb770c38b0df1c1b8903bb27b2ca637d953f2c27981e46a6749f0ac8cdc5a1d9c21460636552ecbd3a9242cce576048cdcd4d133564361a0bdb26655f8ee940b16c92e1bb42c10af8e815e7dcd177b3e4a861ed8b50b562793d31fb4e84924ae9672630152dfbe209994bee9"}, @generic={0xa7cc, 0x9c, "f5418b6854170ac1b561d2443643e30a76fe6fa7c18e98d7ab1065970e288a35e413adc6c2156e7fcf4dbd2b239d9598464eaf438c3e75a1eab7bd4d5ff8281e84a0e83e1cad495543fa5c15c4258c76ce473a5d2cfec5bf9be65f6d305683eb1d50759b42948816e5896f1cf23a183e8d21f5bb021f9355e730874cc36143cba099743384921e9a0486d2f96985735c47308b2d2f42f0148d8b0a46"}, @ra, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x20, {0x0, 0x6, 0xfff, 0x1f, [0x9, 0x6, 0xffffffff80000000]}}]}, @fragment={0x3a, 0x0, 0x1000, 0x1, 0x0, 0x7a9, 0x65}, @routing={0x88, 0x2, 0x3, 0xffffffff7fffffff, 0x0, [@mcast1]}, @fragment={0xea1f8e3449792c9a, 0x0, 0x3f, 0x10001, 0x0, 0x4, 0x64}, @routing={0x33, 0x2, 0x0, 0x1, 0x0, [@ipv4={[], [], @empty}]}, @dstopts={0x8, 0x212, [], [@generic={0x9, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0xc295, 0x87, "a6357e9640d0d1df22c550f0e8a3ba8852fc4b845ebb3ba867b4c8dc531af1155e0450a76d1ba57d84e4767b2e0c59080e404ca5db65615d068f8cb5932e93671d14f1701ab86edaeeeeef9a900eea907308488d9e693631304f0ee0d4798a0893d342df0a8459b5041e5aaa0aed1cee6eb6f63d09e8e5f22b8b5b7c686b83d8ace130e2bbb16f"}, @enc_lim={0x4, 0x1, 0x2}]}, @fragment={0x3a, 0x0, 0xfff, 0x400, 0x0, 0x5, 0x66}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/)(ppp1'}, {0x20, '%mime_type,vboxnet1vboxnet1([$md5sumeth1!'}, {0x20, 'em0@bdev@'}, {0x20, 'eth0\xf8nodev\x1d[)keyring.'}, {}, {0x20, 'mime_type'}, {0x20, '$selinuxlo'}], 0xa, "ba8937eca7e6134ebb32da6a1676fda9ed49c4ac01a2fbcd10e582f2ccbaba375992779ba8e3b7f0b3581c6c11e70f2c6a4738f9a66fb40fac36a1153481d9916814d2ea94ae2856e8805e1d1e0ee6dd58"}, 0xc4) 22:21:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) sendmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="bc", 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) r4 = socket$inet(0xa, 0x3, 0x84) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200c0, 0x0) r6 = getpid() getpriority(0xfffffffffffffffe, r6) ptrace$setregset(0x4205, r6, 0x201, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000540)={{0x3, 0x6, 0x4, 0xf97f, 'syz0\x00', 0x9}, 0x3, 0x8, 0x6, r6, 0x1, 0x8, 'syz0\x00', &(0x7f00000000c0)=['cgroup.procs\x00'], 0xd, [], [0x5, 0x1, 0x1000, 0x8000]}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1df6ffffff000008"]}) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x9, 0x0, 0x2, 0x0, 0x2, 0xfffffffffffffffd, 0xfffffffffffffff0, 0x3, 0xff, 0x81}, 0xb) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000000)) r7 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000300)=""/247) sendmmsg(r2, &(0x7f0000002dc0)=[{{&(0x7f0000001440)=@pppol2tpv3={0x18, 0x2, {0x100000000000000, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0), 0x200003c0}], 0x1}}], 0x1, 0x0) 22:21:38 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x18) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='.') r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000280)=0x1, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0xb, &(0x7f00000000c0)=0x2405, 0x4) getsockopt$inet_buf(r2, 0x0, 0x2d, &(0x7f0000000000)=""/87, &(0x7f0000000080)=0x57) [ 331.286468][T32747] validate_nla: 7 callbacks suppressed [ 331.286475][T32747] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 331.322143][T32747] __nla_validate_parse: 11 callbacks suppressed 22:21:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe3c, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007041df0fd946f610500020000e8fe0200000001080008000c000400ff7e280000001100ffffba16a0aa1c0900000000100012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x137}, 0x0) [ 331.322182][T32747] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 22:21:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x40000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x3, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r3 = fcntl$dupfd(r2, 0x12bbb0aa933a7838, 0xffffffffffffffff) fsync(r3) prctl$PR_CAPBSET_READ(0x17, 0x19) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) fsync(r1) sendmsg$tipc(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe7f}], 0x1}, 0x5c00) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000000)={0x3}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:21:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000002640)=ANY=[@ANYPTR, @ANYBLOB="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"], 0x10e) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0xa2375b82385b0dea) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) recvmmsg(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, 0x0) 22:21:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x0, 0x52c66d64, 0xc000000000000000, 0x29, 0x8, 0x200, 0x9d, {0x0, @in={{0x2, 0x4e22, @local}}, 0x13ee, 0x2, 0x56474704, 0x7fff, 0x6e7}}, &(0x7f0000000100)=0xb0) ppoll(&(0x7f0000000700)=[{r0, 0x7600}, {r1, 0x40}, {r1, 0x2498}, {r1, 0x40}, {r0}, {r0, 0x1000}], 0x6, &(0x7f0000000740)={0x77359400}, &(0x7f0000000780)={0x8}, 0x8) r4 = getpid() getpriority(0xfffffffffffffffe, r4) ptrace$setregset(0x4205, r4, 0x201, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/ip_tables_matches\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000800)={0x7fff, 0x9, 0x7f, 0x0, 0x0, [], [], [], 0x7, 0x1ff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={r2, 0x80000000, 0x100000001, 0x9595}, &(0x7f0000000580)=0x10) rseq(&(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x6, 0x6, 0xfffffffffffffffb, 0x80}, 0x1}, 0x20, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r8, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x4000}, 0x40408b1) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$inet(0xa, 0x3, 0x84) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) r11 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r11, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000a00)={r3, 0x8d, "026b831e61c8110eac2e2bee734af81661369aef8218e23e4435408b78a238ae20c5189a7a9ad03cb710976c6ce351d6bc17113a40f0ffc130809661dab24c1c7f4d7534086d0a13527b2de933d72f64e56a75a9000b9a62006b08a14addb72a4a95d9794fac33c9568eaf033191934b45c8b5c49a007d86886c6af4f567eb90d4af4e62a88ee96afac8e8566e"}, &(0x7f0000000ac0)=0x95) setsockopt$inet_sctp_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000b00)={r12, 0x3, 0xad, "b2aa48a967138c4506825ec18326c385a45506f0a47e5ef15047c05f1d27e3d110ee261c7ea9932c035997b47a63f194e769d9337152df6994fbd33b43cec37b3b923c67eb46498d1ba5aa2c06c3dc1e924ed3f3a5d6cb517152d0b47293151dd3290b895d25adc6f402387597e9aeb6d4ee721cc379017e449257204543b510ebdf64e8aacec7df31d282f91270ae490cf15659835c854c7ef8ad03056d60da1c6dc3fe16bbe13ee5ef92a34c"}, 0xb5) accept(r9, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80) r13 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000940)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000000980)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0xfb0, @loopback, 0x5}], 0x58) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x10, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}}, 0x4004400) [ 331.538568][ T395] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 331.571966][ T395] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x80ffffff}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000002640)=ANY=[@ANYPTR, @ANYBLOB="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"], 0x10e) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0xa2375b82385b0dea) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) recvmmsg(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, 0x0) 22:21:38 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000000)='attr/sockcreate\x00') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0x800}, {0x80000006}]}, 0x10) accept$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x711}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4351a7c97094b7a095556fcf2390a05dfc10269c9c074b141257c77417c999ae6e384f116e3db8a3219c0ee5ac3b0a0cca62b72d44064e2dca7009d264e07295d5dc8e421dd3ee2a04c45f2d6d3d62cfe2197ffa96cdcc592d2dc71ff85e0a167304bb8e2af0232224808d566880f0ad8e1166a9e5b385fbcfeb184706fde030cc26b6f7e75007a9865ad8a4210038c8e0dfe743b54a5bf6fed86a09942a2ab84e24a98d5e529eaf0ffdaad2b9752facff141ce0915269d0c6618556b00b1a484bd0b865862993fbbb", @ANYRES16=r6, @ANYBLOB="735bed02e5d5c74742db0ebbdc0f3b9a0e4e72748c1671fbbcbe5c70e4c3ed409b9612dba7d7b09134817f6152198cbdd3c4bfa03081da2dcbb465b25490429e10c40ba30705740b0e77900000c943338c49058376ebb7bbfd0084e9ea08993e70d1b2f2d9a536fefd05d778a47c4b857e0dc03950c462d9c98ac90d38249f57bc0ae1d284e32ba4b2f4200eb5730141d4bf299ade398de4c790b497ff8dff08c45bd9e26e3155f3af1f539cca000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4004091}, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000000)=0x5, 0x4) keyctl$invalidate(0xf, r0) [ 331.666485][ T443] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 331.742547][ T443] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:38 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl(r0, 0x8, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x24, &(0x7f000045fff8)) 22:21:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffee8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000140)={0x1, {r4, r5+30000000}, 0xfa, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00', 0x14}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f00000000c0)={0x9, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="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", 0xb56}], 0x1}}], 0x1, 0x0) 22:21:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0xffffff7f}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 331.958668][ T523] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 331.966995][ T523] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. [ 332.025046][ T524] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 22:21:38 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x200040000000000) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x3, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r3 = fcntl$dupfd(r2, 0x12bbb0aa933a7838, 0xffffffffffffffff) fsync(r3) prctl$PR_CAPBSET_READ(0x17, 0x19) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) fsync(r1) sendmsg$tipc(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe7f}], 0x1}, 0x5c00) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000000)={0x3}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:21:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0xffffff80}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:38 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000480)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x1, {0x3, 0x0, 0x0, 0x80000000, 0x5e0, 0x4bd, 0x7fffffff, 0x0, 0x279, 0x0, 0xffffffff}}}}, 0xa0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x2008001) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000180)={0x5, 0x0, [{0xa, 0x3, 0x3, 0x3, 0x3}, {0x7, 0x0, 0x2}, {0xa, 0x2b21, 0x0, 0x1800000000}, {0x0, 0x4, 0x80, 0x20, 0x6}, {0x0, 0xa7f, 0x3fffffff8, 0x6, 0x376}]}) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) fspick(r4, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "00ef4e00", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) getresuid(&(0x7f00000002c0), 0x0, &(0x7f0000000340)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) [ 332.088362][ T524] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. [ 332.147852][ C1] net_ratelimit: 3 callbacks suppressed [ 332.147859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 332.159194][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:21:39 executing program 5: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@empty}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) getrusage(0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) syz_genetlink_get_family_id$tipc2(0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x13) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) [ 332.197397][ T534] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 332.216029][ T534] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x10000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:39 executing program 4: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) stat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) 22:21:39 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000480)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x1, {0x3, 0x0, 0x0, 0x80000000, 0x5e0, 0x4bd, 0x7fffffff, 0x0, 0x279, 0x0, 0xffffffff}}}}, 0xa0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x2008001) connect$inet6(r3, &(0x7f0000000140), 0x1c) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000180)={0x5, 0x0, [{0xa, 0x3, 0x3, 0x3, 0x3}, {0x7, 0x0, 0x2}, {0xa, 0x2b21, 0x0, 0x1800000000}, {0x0, 0x4, 0x80, 0x20, 0x6}, {0x0, 0xa7f, 0x3fffffff8, 0x6, 0x376}]}) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) fspick(r4, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "00ef4e00", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) getresuid(&(0x7f00000002c0), 0x0, &(0x7f0000000340)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) [ 332.387848][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 332.393660][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:21:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x40030000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:39 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x8}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) fcntl$addseals(r1, 0x409, 0x5) 22:21:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="db000000f0000008000000000000000000000000a43e30a12bb4209c8f9096983ca9213774571fd91a09f02fc37136708cf13ed5f66f43c74e8654e65866cc35a86d90ea53bff1383b5f7530f61417c23f54d53eec3ced24500e437fde6a366c857afc8e05332d0424aeada2fc243f", @ANYRES32=0x0, @ANYBLOB="010000000000000008000a00", @ANYRES32=0xd], 0x28}}, 0x10) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000040)=0xff) 22:21:39 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) connect(r2, &(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='\x00\x90\x00\x00\x10') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x805, 0x0, 0x0, {{0x1, 0x40030000000000}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) [ 332.709606][ T663] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 332.727291][ T663] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 332.748918][ T669] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 332.757217][ T669] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 22:21:39 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') pipe2(&(0x7f0000000000), 0x800) 22:21:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = getuid() r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r7, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r10 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000680)={r11, @rand_addr=0x5, @rand_addr=0xff800}, 0xffffffffffffffb8) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={r12, @remote, @loopback}, 0x3) ioctl$FICLONE(r7, 0x40049409, r9) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000480)={'team0\x00', r12}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="24010000", @ANYRES16=r13, @ANYBLOB="000426bd7000fedbdf250300000008000100", @ANYRES32=r11, @ANYBLOB="bc000200400001002400f50070c0280452697479000000000000000000000000000000000000000000000000080003000e00000008349e48d781f1f1000400018ea5c60e8930ad41740bcf4e8c5332d1a79d18", @ANYRES32=r14, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="080007000000000008000100", @ANYRES32=r11, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r16, &(0x7f0000000640)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r18, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', r18}) r20 = socket(0x10, 0x3, 0x0) ioctl(r20, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") getsockname$packet(r20, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001400)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001a80)={@loopback, 0x0}, &(0x7f0000001ac0)=0x14) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r24, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r24, &(0x7f0000000640)={0x11, 0x0, r25, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r26, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r27 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r27, 0xc00caee0, &(0x7f0000000240)={0x1}) getsockopt$inet6_mreq(r27, 0x29, 0x1b, &(0x7f0000001b00)={@rand_addr, 0x0}, &(0x7f0000001b40)=0x14) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r30, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r30, &(0x7f0000000640)={0x11, 0x0, r31, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r29, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r32, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) r34 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r34, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r34, &(0x7f0000000640)={0x11, 0x0, r35, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r33, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r36, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r38, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r38, &(0x7f0000000640)={0x11, 0x0, r39, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r37, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r40, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r41 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r41, 0xc00caee0, &(0x7f0000000240)={0x1}) r42 = socket$nl_route(0x10, 0x3, 0x0) r43 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r43, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r43, &(0x7f0000000640)={0x11, 0x0, r44, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r45, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r41, 0x8933, &(0x7f0000001b80)={'team0\x00', r45}) r47 = socket(0x10, 0x3, 0x0) ioctl(r47, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") accept4$packet(r47, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001cc0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'veth0_to_bond\x00', 0x0}) r51 = socket$nl_route(0x10, 0x3, 0x0) r52 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r52, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r52, &(0x7f0000000640)={0x11, 0x0, r53, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r52, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r51, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r54, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r55 = socket$nl_route(0x10, 0x3, 0x0) r56 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r56, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r56, &(0x7f0000000640)={0x11, 0x0, r57, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r56, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r55, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r58, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r59 = socket(0x10, 0x3, 0x0) ioctl(r59, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r60 = socket$nl_route(0x10, 0x3, 0x0) r61 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r61, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r61, &(0x7f0000000640)={0x11, 0x0, r62, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r61, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r60, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r63, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(r59, 0x8933, &(0x7f0000001e40)={'bridge0\x00', r63}) r65 = socket$nl_route(0x10, 0x3, 0x0) r66 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r66, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r66, &(0x7f0000000640)={0x11, 0x0, r67, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r66, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r65, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r68, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001e80)={0x614, r13, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r19}, {0x124, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff7fffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xbc79}}}]}}, {{0x8, 0x1, r21}, {0x1b0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r32}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r36}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xfffffffffffffff9, 0x5, 0x9, 0xfffffffffffffff8}]}}}]}}, {{0x8, 0x1, r40}, {0x1a4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r46}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r48}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r49}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r50}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r54}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r58}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xf80}}, {0x8, 0x6, r64}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x3f, 0x0, 0x4f, 0x4}, {0xb5, 0xadf5, 0xfffffffffffffff9, 0x8000}, {0xd3, 0xe8, 0xf09, 0x2}, {0x7fff, 0x4, 0x2, 0x9}, {0xff, 0xffffffff, 0x4b42, 0x6}, {0x7fff, 0x89e5, 0x7fffffff, 0x6}, {0x5, 0x81, 0x20, 0x4136}, {0x10000, 0x7c1, 0x400000000000000, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r68}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0xa730e3b6a4d78ae7}, 0x10) r69 = geteuid() r70 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r70, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r70, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockname$packet(r70, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r72 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000500)=@expire={0x468, 0x18, 0x200, 0x70bd29, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in=@rand_addr=0x58, 0x4e23, 0x0, 0x4e21, 0x6, 0x0, 0xea3e51ec8a0e86d3, 0x20, 0x32, r3, r4}, {@in=@rand_addr=0x80000000, 0x4d5, 0x2b}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {0x3, 0x6, 0x2, 0x1, 0x7, 0x3, 0x9, 0xff}, {0x4, 0x4, 0x3, 0x6}, {0x1ff, 0x5, 0x3}, 0x70bd2c, 0x3507, 0xa, 0x2, 0x7fffffff, 0x40}, 0x9}, [@algo_auth={0x64, 0x1, {{'tgr160\x00'}, 0xd0, "93c5468ee82cb3f4bc6c1d9daeb282f9685f08c4a543eb430587"}}, @output_mark={0x8, 0x1d, 0x1}, @policy={0xac, 0x7, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e24, 0x7fff, 0x4e23, 0x2fe9, 0xa, 0x80, 0xa0, 0x16, r26, r69}, {0x9, 0x7, 0x3, 0x400, 0x6, 0x5, 0x3, 0x2}, {0x8, 0x5, 0x2, 0x6e8be02f}, 0x8001, 0x6e6bb1, 0x3, 0x1, 0x1, 0x2}}, @algo_comp={0x128, 0x3, {{'lzs\x00'}, 0x700, "91aa30925c64933759b0d70824222e3a3e09ceb03b53403e81b06c40b2a241c475caee1aff256741ed44577a3e5cac5d073948cb8b2df43bbbf65f58fc3cc0c7fade8e29d861d6655239e9c7dd77e1cd83a7cb8fe84f39fbecc031d055658af50ab2b41a984052b9b8d4403fe789f4774af8e477cd192691daee1bd29b6749ae3f9435b08a26da5b1d19db75ce4d446d7a7e932fea4c2015175132171e49b7e58b28c211e77a039051e0d8d83b80882bee7e530e6b2fbea1c6e3d20a33d4de7ac6c3688d1d71b722127c1666370f8a5b83d507cd7f8a5e51ec9af8ebc6eeb199"}}, @policy={0xac, 0x7, {{@in=@remote, @in6=@loopback, 0x4e24, 0x919f, 0x4e24, 0x81, 0xe7d0f3982d651e4c, 0xe0, 0x80, 0x51, r71, r72}, {0x101, 0x81, 0x100000001, 0x10001, 0x5, 0xdeb, 0x20, 0xffffffffffffffff}, {0x7, 0x401, 0x1}, 0xfff, 0x6e6bb4, 0x0, 0x0, 0x2}}, @tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d2}, 0xa, @in6=@mcast2, 0x3506, 0x0, 0x2, 0x20, 0x8b0, 0x8001, 0x3}, {{@in=@broadcast, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x3503, 0x1, 0x3, 0x2, 0x5697, 0x9, 0xfffffffffffffff7}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x40}, 0x404) 22:21:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x10000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xf0ff7f}], 0x1}, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100, 0x800) 22:21:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xffffff1a, 0x0, &(0x7f0000000440), 0xffffff44, 0x0, 0x0}) 22:21:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = semget(0x3, 0x3, 0x0) semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f00000000c0)=""/121) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000180)) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002560b700ef"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x48e}]}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x82002, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000080)=0xcfcc, 0x4) 22:21:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x100000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 333.029539][ T783] binder: 782:783 unknown command 0 [ 333.034861][ T783] binder: 782:783 ioctl c0306201 20000380 returned -22 22:21:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_CAPBSET_READ(0x17, 0xc) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10) dup2(r0, r1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 22:21:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x200000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:40 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r4, 0x5, 0x5, 0x3, 0x9, 0xc9}, &(0x7f0000000040)=0x14) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x0, 0x0, "552f30fc1e5e162e"}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/212, 0xd4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10040, 0x0) 22:21:40 executing program 0: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={{0x1, 0x9c, 0x5, 0x8, 0x0, 0x9000}, 0x1, 0x20, 0xfffffffffffff272}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x4) close(r1) [ 333.155155][ T891] device syz_tun entered promiscuous mode [ 333.175896][ T891] device syz_tun left promiscuous mode 22:21:40 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2800, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 22:21:40 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xfff, 0x111600) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000440)=r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x90c8531819a23262, r5}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000810800010063627100180402000404060003000000003bae10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r7 = mq_open(&(0x7f00000000c0)='\'+Cposix_acl_access\x00', 0x4a0, 0x10, &(0x7f0000000180)={0x1f, 0x5, 0x0, 0x100, 0x2, 0x400, 0x6, 0xffffffffffff783a}) fsetxattr$trusted_overlay_upper(r7, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0xeb, 0x1, 0x2, "885085e6fb3ff91bacbcc91133b31ae4", "de123d1cc5ab8ff9faa6eef19877dede8a52a93a3d33be99780e05ac74b40f97f01240ffc8b648846af75ec0247d0cd07ae75e5195b44e83a6c7d755829bbe6501257cdd460c537c5164b51b2daa7c4a5a0f00bb8207643f99546bbfee3a861ad2bb8eeade65cdf2605cc6c0b558c35b8289ef893ec77164ba1a8f30bdb9aaeed1284a22df5dac60085636d6b000d1a63940dff977fc5a75e266a1b346578a61b34845583ef2b6b6735e96507d6c4ccb4ce17ad31f628e333f11be2022a04d7f59dbd8bba6f70b022431dacc5c9ed68ce3bf2c092920"}, 0xeb, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000ffd38d9b0c00010008001600ac1422e1d02861b13149f98effd7d414bb"], 0x24}}, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r10, 0x0) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x1100, 'lblc\x00'}, 0x2c) r12 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000680)={r13, @rand_addr=0x5, @rand_addr=0xff800}, 0xffffffffffffffb8) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r12, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={r14, @remote, @loopback}, 0x3) ioctl$FICLONE(r10, 0x40049409, 0xffffffffffffffff) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r14}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r15, @ANYBLOB="000426b37000fef89f250300000008000100", @ANYRES32=r13, @ANYBLOB="bc000200400001002400f50070c0280452697479000000000000000000000000000000000000000000000000080003000e00000008349e48d781f1f1000400018ea5c60e8930ad41740bcf4e8c5332d1a79d18", @ANYRES32=r16, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRESOCT, @ANYBLOB="080007000000000008000100", @ANYRES32=r13, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0xd}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r18, &(0x7f0000000640)={0x11, 0x0, r19, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYRES32=r20, @ANYBLOB="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"], 0x8b4}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r22, &(0x7f0000000640)={0x11, 0x0, r23, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], @ANYBLOB="000005000000000006000000080001007533320088080200240105000cff080000058000a30ee30000000000000000010000003f0800000006000000ffffffff0000000308000000020000000000000200000004ff0700001f00000000000400000000018b0700008800000000000001000000020100000005000000000000020000080006000000ea000000000000600000000000020000000000000000000400000003000100000001000000000006000000060900000003000000000000f30000000509000000ffff00000000000700000001010000000700000026d9c9ac0000000208000000aaed000000000003fffffffd05000000010000000000000000000000dc000000000001000000ffff000000012a6a000001000000000000090000000140000000080000000000076600000005fcffffffe203000004040500028b070066520100050001000000000300000003000000040200000006000000fffffff7ffffffc0040000000300000000000020000001ffa80c000000000000000000020000000508000000d3000000000005f90000007f7d574e6d0700000000000009339e00007104000001f8ffff0000003f0000000000100000000000000000000000006b806200000014000000000046d9fffffff901040000070000000000000700000000ad000000010000000000000900000006000000004020000000000ea100006d430700000009000000000001870000003f070000000500000000000006ffff0000090000007f0000000000002000000001000000000600000000000400000000070000000050000000000000c600000007ffffffff030000000000000200000009faffffff0008000000000efc00000000010000000000010000000080000000066e00000004000000000000020000002200000000800000000000010000000006ff7f00000900000000000001fffffffd01000000030000000000003f0000000008000000150f0000000000be000006c7010400000100010000000003ffffffff0800000009000000000000600000000605000000080000000000000300000006010100000400000000008001000001010000000004000000ffff000000000003030000002e000000000007ff00000007ff0f0000ca00000000008001ffffffff0400000000000000000000010000c384050000006800000000000fff0000007f07000000030000000000000200000000010100000800000000000005000000030000000009000000ffffffff000007ff02000000010001000000f19000000065080000000300000000000000000002440400000000100000000005d10000000601010000050000000000008100007fff000200000800000000000000000000071901000028b100000000003f000002d200000000030000000000008000000004740c000001040000000000060000072103000000080000000000000700000008000200000800000000000065000000bf0500000022000000fffffffd000000037f0000000200000000000008000000090104000001000000000000000000000401000000080000000000000000000001070000000600000000000005000000070100000002100000000000070001000104000000b9000000000000040000000603000000030000000000000700000002030000007f0e000000000005000000090600000000000000ffffffff000000d1690000004d5700000000000800000001ffffffff0900000000000000000000a17f000000080000005485bb1a0000000581ffffff490700002800000000000008f7090000ffff000000000e910000003004000000e0ffffff00000001fffff0007f00000001000100a4010500100103000007030004005ec900000008000000070000000700000000e3a60000000000000000002004000000fffffffffffffff7000000200900000000000000000000010000000307000000380400000000000300000001070000000000000000000003000000070900000000000000000000ff0000010001000100070000000000000300000008dc320000030000008000000100001f1a060000000100008000000003ffffffff07000000ffffffff0000000100000005030000000800000000000000000000030100000000000000000000010000ffff000100000700000000000bb200000008070000000180000000000800000100010000000092000000000000da0000443307000000280d00000000000100000020020000000700000000008000000063e93b00000003000000000000040000077e0500000004000000fffffffd000080000101000000000100000080017fffffff1f000000010400000000000400000008fffbffff0008000000007750000000ff670000000200000000000008fffffffe0300000005000000000000cc0000007f0800000000000000140008006e6c6d6f6e3000000000000000000000a40105000d07010001ff06000000ad1b000003ff80000001000002000200000001fcffff000032e50000010000000000020000000000001d00010000020000007f000000ffffe728000009c3080000009ae7ffff000000040000000400000100ffff00000000095900000001080000003b000000000000ff00000009ffffff7f0100000000000200000000000700000003000000800000008000000003000000b42200000000000500007fff0800000005000000000000ff000000000001000006000000000000040000000701000000ff0f0000ffffffff00000004ff000000ff7f000080000000000000061a000000010100000000b53600000001e4000000030000000000ff270000001f200000003f000000fffffff90000000501000000000001000000000200000006fffeffff0100000000000003000000020300000003000000000000010000000201000100050000000000000500000006070000000002000000000004000000a0030000008e0d00000000000600000006010100007f00000000000005000007ff050000000700000000000401000000050100000004000000"], 0x3}}, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r24, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 333.228859][ T905] device syz_tun entered promiscuous mode [ 333.244839][ T889] device syz_tun left promiscuous mode [ 333.356911][ T983] openvswitch: netlink: ct_state flags e12214ac unsupported 22:21:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x80000000, 0x9, 0x4, 0x100000, {r2, r3/1000+10000}, {0x1, 0x8, 0x800, 0x1000, 0x101, 0x4, "8b415e0a"}, 0x7, 0x1, @offset=0xb4b, 0x4}) [ 334.227869][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 334.233659][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:21:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0x1002, &(0x7f0000000180), 0x0, r4}) unshare(0x400) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x3, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4100, 0x1) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x1, 0x2, &(0x7f0000000080)}) 22:21:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x400000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:41 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xfff, 0x111600) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000440)=r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x90c8531819a23262, r5}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000810800010063627100180402000404060003000000003bae10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r7 = mq_open(&(0x7f00000000c0)='\'+Cposix_acl_access\x00', 0x4a0, 0x10, &(0x7f0000000180)={0x1f, 0x5, 0x0, 0x100, 0x2, 0x400, 0x6, 0xffffffffffff783a}) fsetxattr$trusted_overlay_upper(r7, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0xeb, 0x1, 0x2, "885085e6fb3ff91bacbcc91133b31ae4", "de123d1cc5ab8ff9faa6eef19877dede8a52a93a3d33be99780e05ac74b40f97f01240ffc8b648846af75ec0247d0cd07ae75e5195b44e83a6c7d755829bbe6501257cdd460c537c5164b51b2daa7c4a5a0f00bb8207643f99546bbfee3a861ad2bb8eeade65cdf2605cc6c0b558c35b8289ef893ec77164ba1a8f30bdb9aaeed1284a22df5dac60085636d6b000d1a63940dff977fc5a75e266a1b346578a61b34845583ef2b6b6735e96507d6c4ccb4ce17ad31f628e333f11be2022a04d7f59dbd8bba6f70b022431dacc5c9ed68ce3bf2c092920"}, 0xeb, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000ffd38d9b0c00010008001600ac1422e1d02861b13149f98effd7d414bb"], 0x24}}, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r10, 0x0) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x1100, 'lblc\x00'}, 0x2c) r12 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000680)={r13, @rand_addr=0x5, @rand_addr=0xff800}, 0xffffffffffffffb8) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r12, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={r14, @remote, @loopback}, 0x3) ioctl$FICLONE(r10, 0x40049409, 0xffffffffffffffff) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r14}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r15, @ANYBLOB="000426b37000fef89f250300000008000100", @ANYRES32=r13, @ANYBLOB="bc000200400001002400f50070c0280452697479000000000000000000000000000000000000000000000000080003000e00000008349e48d781f1f1000400018ea5c60e8930ad41740bcf4e8c5332d1a79d18", @ANYRES32=r16, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRESOCT, @ANYBLOB="080007000000000008000100", @ANYRES32=r13, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0xd}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r18, &(0x7f0000000640)={0x11, 0x0, r19, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYRES32=r20, @ANYBLOB="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"], 0x8b4}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r22, &(0x7f0000000640)={0x11, 0x0, r23, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], @ANYBLOB="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"], 0x3}}, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r24, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22:21:41 executing program 2: r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0xc0ff20, 0x1, 0x11, r2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2022}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x124, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x240000}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xf0, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x44088) r4 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r4) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:41 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xfff, 0x111600) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000440)=r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x90c8531819a23262, r5}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000810800010063627100180402000404060003000000003bae10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r7 = mq_open(&(0x7f00000000c0)='\'+Cposix_acl_access\x00', 0x4a0, 0x10, &(0x7f0000000180)={0x1f, 0x5, 0x0, 0x100, 0x2, 0x400, 0x6, 0xffffffffffff783a}) fsetxattr$trusted_overlay_upper(r7, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0xeb, 0x1, 0x2, "885085e6fb3ff91bacbcc91133b31ae4", "de123d1cc5ab8ff9faa6eef19877dede8a52a93a3d33be99780e05ac74b40f97f01240ffc8b648846af75ec0247d0cd07ae75e5195b44e83a6c7d755829bbe6501257cdd460c537c5164b51b2daa7c4a5a0f00bb8207643f99546bbfee3a861ad2bb8eeade65cdf2605cc6c0b558c35b8289ef893ec77164ba1a8f30bdb9aaeed1284a22df5dac60085636d6b000d1a63940dff977fc5a75e266a1b346578a61b34845583ef2b6b6735e96507d6c4ccb4ce17ad31f628e333f11be2022a04d7f59dbd8bba6f70b022431dacc5c9ed68ce3bf2c092920"}, 0xeb, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000ffd38d9b0c00010008001600ac1422e1d02861b13149f98effd7d414bb"], 0x24}}, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r10, 0x0) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x1100, 'lblc\x00'}, 0x2c) r12 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000680)={r13, @rand_addr=0x5, @rand_addr=0xff800}, 0xffffffffffffffb8) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r12, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={r14, @remote, @loopback}, 0x3) ioctl$FICLONE(r10, 0x40049409, 0xffffffffffffffff) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r14}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r15, @ANYBLOB="000426b37000fef89f250300000008000100", @ANYRES32=r13, @ANYBLOB="bc000200400001002400f50070c0280452697479000000000000000000000000000000000000000000000000080003000e00000008349e48d781f1f1000400018ea5c60e8930ad41740bcf4e8c5332d1a79d18", @ANYRES32=r16, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRESOCT, @ANYBLOB="080007000000000008000100", @ANYRES32=r13, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0xd}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r18, &(0x7f0000000640)={0x11, 0x0, r19, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYRES32=r20, @ANYBLOB="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"], 0x8b4}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r22, &(0x7f0000000640)={0x11, 0x0, r23, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], @ANYBLOB="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"], 0x3}}, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r24, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22:21:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x80000000, 0x9, 0x4, 0x100000, {r2, r3/1000+10000}, {0x1, 0x8, 0x800, 0x1000, 0x101, 0x4, "8b415e0a"}, 0x7, 0x1, @offset=0xb4b, 0x4}) 22:21:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x4000000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 334.594721][ T1106] openvswitch: netlink: ct_state flags e12214ac unsupported [ 334.643356][ T1046] openvswitch: netlink: ct_state flags e12214ac unsupported 22:21:41 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xfff, 0x111600) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000440)=r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x90c8531819a23262, r5}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000810800010063627100180402000404060003000000003bae10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r7 = mq_open(&(0x7f00000000c0)='\'+Cposix_acl_access\x00', 0x4a0, 0x10, &(0x7f0000000180)={0x1f, 0x5, 0x0, 0x100, 0x2, 0x400, 0x6, 0xffffffffffff783a}) fsetxattr$trusted_overlay_upper(r7, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0xeb, 0x1, 0x2, "885085e6fb3ff91bacbcc91133b31ae4", "de123d1cc5ab8ff9faa6eef19877dede8a52a93a3d33be99780e05ac74b40f97f01240ffc8b648846af75ec0247d0cd07ae75e5195b44e83a6c7d755829bbe6501257cdd460c537c5164b51b2daa7c4a5a0f00bb8207643f99546bbfee3a861ad2bb8eeade65cdf2605cc6c0b558c35b8289ef893ec77164ba1a8f30bdb9aaeed1284a22df5dac60085636d6b000d1a63940dff977fc5a75e266a1b346578a61b34845583ef2b6b6735e96507d6c4ccb4ce17ad31f628e333f11be2022a04d7f59dbd8bba6f70b022431dacc5c9ed68ce3bf2c092920"}, 0xeb, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000ffd38d9b0c00010008001600ac1422e1d02861b13149f98effd7d414bb"], 0x24}}, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r10, 0x0) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x1100, 'lblc\x00'}, 0x2c) r12 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000680)={r13, @rand_addr=0x5, @rand_addr=0xff800}, 0xffffffffffffffb8) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r12, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={r14, @remote, @loopback}, 0x3) ioctl$FICLONE(r10, 0x40049409, 0xffffffffffffffff) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', r14}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r15, @ANYBLOB="000426b37000fef89f250300000008000100", @ANYRES32=r13, @ANYBLOB="bc000200400001002400f50070c0280452697479000000000000000000000000000000000000000000000000080003000e00000008349e48d781f1f1000400018ea5c60e8930ad41740bcf4e8c5332d1a79d18", @ANYRES32=r16, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRESOCT, @ANYBLOB="080007000000000008000100", @ANYRES32=r13, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0xd}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r18, &(0x7f0000000640)={0x11, 0x0, r19, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYRES32=r20, @ANYBLOB="000005000000000006000000080001007533320088080200240105000cff080000058000a30ee30000000000000000010000003f0800000006000000ffffffff0000000308000000020000000000000200000004ff0700001f00000000000400000000018b0700008800000000000001000000020100000005000000000000020000080006000000ea000000000000600000000000020000000000000000000400000003000100000001000000000006000000060900000003000000000000f30000000509000000ffff00000000000700000001010000000700000026d9c9ac0000000208000000aaed000000000003fffffffd05000000010000000000000000000000dc000000000001000000ffff000000012a6a000001000000000000090000000140000000080000000000076600000005fcffffffe203000004040500028b070066520100050001000000000300000003000000040200000006000000fffffff7ffffffc0040000000300000000000020000001ffa80c000000000000000000020000000508000000d3000000000005f90000007f7d574e6d0700000000000009339e00007104000001f8ffff0000003f0000000000100000000000000000000000006b806200000014000000000046d9fffffff901040000070000000000000700000000ad000000010000000000000900000006000000004020000000000ea100006d430700000009000000000001870000003f070000000500000000000006ffff0000090000007f0000000000002000000001000000000600000000000400000000070000000050000000000000c600000007ffffffff030000000000000200000009faffffff0008000000000efc00000000010000000000010000000080000000066e00000004000000000000020000002200000000800000000000010000000006ff7f00000900000000000001fffffffd01000000030000000000003f0000000008000000150f0000000000be000006c7010400000100010000000003ffffffff0800000009000000000000600000000605000000080000000000000300000006010100000400000000008001000001010000000004000000ffff000000000003030000002e000000000007ff00000007ff0f0000ca00000000008001ffffffff0400000000000000000000010000c384050000006800000000000fff0000007f07000000030000000000000200000000010100000800000000000005000000030000000009000000ffffffff000007ff02000000010001000000f19000000065080000000300000000000000000002440400000000100000000005d10000000601010000050000000000008100007fff000200000800000000000000000000071901000028b100000000003f000002d200000000030000000000008000000004740c000001040000000000060000072103000000080000000000000700000008000200000800000000000065000000bf0500000022000000fffffffd000000037f0000000200000000000008000000090104000001000000000000000000000401000000080000000000000000000001070000000600000000000005000000070100000002100000000000070001000104000000b9000000000000040000000603000000030000000000000700000002030000007f0e000000000005000000090600000000000000ffffffff000000d1690000004d5700000000000800000001ffffffff0900000000000000000000a17f000000080000005485bb1a0000000581ffffff490700002800000000000008f7090000ffff000000000e910000003004000000e0ffffff00000001fffff0007f00000001000100a4010500100103000007030004005ec900000008000000070000000700000000e3a60000000000000000002004000000fffffffffffffff7000000200900000000000000000000010000000307000000380400000000000300000001070000000000000000000003000000070900000000000000000000ff000001000100010007000000fffffff700000008dc320000030000008000000100001f1a060000000100008000000003ffffffff07000000ffffffff0000000100000005030000000800000000000000000000030100000000000000000000010000ffff000100000700000000000bb200000008070000000180000000000800000100010000000092000000000000da0000443307000000280d00000000000100000020020000000700000000008000000063e93b00000003000000000000040000077e0500000004000000fffffffd000080000101000000000100000080017fffffff1f000000010400000000000400000008fffbffff0008000000007750000000ff670000000200000000000008fffffffe0300000005000000000000cc0000007f0800000000000000140008006e6c6d6f6e3000000000000000000000a40105000d07010001ff06000000ad1b000003ff80000001000002000200000001fcffff000032e50000010000000000020000000000001d00010000020000007f000000ffffe728000009c3080000009ae7ffff000000040000000400000100ffff00000000095900000001080000003b000000000000ff00000009ffffff7f0100000000000200000000000700000003000000800000008000000003000000b42200000000000500007fff0800000005000000000000ff000000000001000006000000000000040000000701000000ff0f0000ffffffff00000004ff000000ff7f000080000000000000061a000000010100000000b53600000001e4000000030000000000ff270000001f200000003f000000fffffff90000000501000000000001000000000200000006fffeffff0100000000000003000000020300000003000000000000010000000201000100050000000000000500000006070000000002000000000004000000a0030000008e0d00000000000600000006010100007f00000000000005000007ff0500000007000000000004010000000501000000040000009794a89f83437c294d9ea64547ec"], 0x8b4}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r22, &(0x7f0000000640)={0x11, 0x0, r23, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], @ANYBLOB="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"], 0x3}}, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r24, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22:21:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x80000000, 0x9, 0x4, 0x100000, {r2, r3/1000+10000}, {0x1, 0x8, 0x800, 0x1000, 0x101, 0x4, "8b415e0a"}, 0x7, 0x1, @offset=0xb4b, 0x4}) 22:21:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x8000000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000f64b7e0106bf02dc9017bc27707c72cf836c4ad850667eaf267b46e96978eed91e3c5b68f6e905534ec8d89f970600783828d166d13bbcba2478b292f900000000000000000000000000000000000088683d25232400000000000000009bf2aabc919d894b0bfae2d8812e7f1f220337a95bccaca099119c3607fc67ff6e41c32955318b3982b4a0b3f338dfa5fd52160a076ba97615c19caefb529e8f4d4c191ed5a9cdfc8d2122819e3d64b1f32e0dfb31d4d4b9c7753b2b03ef217f3268f73abc3c1ea70618ff878b27d08bc42d9846cf9a415b658da818fa18b804b3107a9deeaea91ccaf5cfeb105163c9e6303679541a2841bb8cf643cc4d68778f9effff85b37e0277014d0e64bba37947d0c86887"], 0x24}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x40000) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0xfff, [], &(0x7f0000000040)=0x2}) ioctl$KDMKTONE(r1, 0x4b30, 0x2) [ 334.823112][ T1163] openvswitch: netlink: ct_state flags e12214ac unsupported 22:21:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x80ffffff00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:41 executing program 4: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd000000100001000a0c0900fcff0000040e05a5", 0x58}], 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x120000, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000340)=[{{r2, r3/1000+10000}, 0x0, 0x1, 0xfffffffffffffffb}, {{r4, r5/1000+10000}, 0x11, 0x0, 0x3}, {{}, 0x35ab6ec4dd0885df, 0x1, 0x5}, {{0x0, 0x2710}, 0x4, 0xfff, 0x1}, {{0x0, 0x2710}, 0x0, 0x9, 0x3}, {{0x77359400}, 0x17, 0x0, 0x80}, {{}, 0x1f, 0xdf, 0xffffffffffffffff}], 0xa8) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) r7 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000240), 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r7, 0x10, &(0x7f0000000480)={&(0x7f0000000400)=""/98, 0x62, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x10, &(0x7f0000000200)={&(0x7f0000000100)=""/195, 0xc3, r8}}, 0x10) 22:21:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x7, 0x5019}) 22:21:41 executing program 1: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r0 = getpid() r1 = open(0x0, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000680)) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="b9fc0a00000f32b9800200000f3266ba2000b000ee9af80000000901b9c70a00000f320fc77698360f01c8650f2169660fc772ae650fc769b2", 0x39}], 0x1, 0x0, 0x0, 0xfecb) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x80000001b, 0xc4903) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 334.958711][ T1178] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 22:21:42 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108000400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x8000) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0xffffff7f00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lgetxattr(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) syz_open_pts(r3, 0x40000) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\xd4\r!!\x00\x01z\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 22:21:42 executing program 5: r0 = epoll_create1(0x0) syz_open_dev$loop(0x0, 0x213, 0x38000) epoll_create1(0x0) close(r0) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x60) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000500)={[], 0x7, 0x23f, 0x2, 0x0, 0x437, 0x4, 0x6000, [], 0x100000001}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/105, 0x69) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) syz_open_pts(r2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7b0d, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="11dca52daa2216ca7bf070") sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000000000039e80a7e", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="000000000100000000000000000200007e09ead6ae3cea3e"], 0x32d}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) 22:21:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) sync_file_range(r1, 0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="4ef27f454c460000002f0423e700000000000000442305110400000043868ff80000000000f85eb3120000006c5e9e24c06e470a26edc661"], 0x38) [ 335.410474][ T1199] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 335.431055][ T1199] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 22:21:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_ivalue}) [ 335.462351][ T1202] bond0: (slave bond_slave_1): Releasing backup interface 22:21:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0xffffffff00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:42 executing program 0: syz_emit_ethernet(0xd7, &(0x7f0000000280)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0xa1, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x5d, 0x0, [], "bf13d7f8ff75ea1001f82609052f356c4c54574c7a7ab39e77e09ac4ce948d95304713712bf736ac502d89f11009bf8dd669cc4c6e2ab0febb88be9d5f2aa1c33fab98fab4b52b7f7f9d2703efa3d06a435f14ef9a351ca8d71e427bfa"}, {}, {0x0, 0x0, 0x2, 0x2, 0x8}, {0xffffdd86, 0x88be, 0x0, {{}, 0x1, 0x400}}}}}}}}, &(0x7f00000000c0)) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @loopback}, {0x6, @random="10c4193aa1bf"}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 'ip6gretap0\x00'}) 22:21:42 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x440) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x457c21477fa1de56}, &(0x7f00000001c0)=0x18) 22:21:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x2}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:42 executing program 4: r0 = socket$kcm(0xa, 0x6, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x5, 0x8}, 0xc) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r0, 0x4) 22:21:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:43 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 22:21:43 executing program 4: r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r2, 0x4}, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x4, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/dlm-control\x00', 0x2000, 0x0) semget$private(0x0, 0x4, 0x12cbea9d86befc5a) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000001a40)) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) 22:21:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002560b700eff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38d, 0x0, 0x4}]}) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040), 0x4) 22:21:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x10}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:43 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x74) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) sendto$inet(r1, &(0x7f0000000040)="17", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x6}, 0x10) r3 = userfaultfd(0x800) fcntl$setlease(r3, 0x400, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xfffffffffffffd4b) r4 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="04002cbd7000fddbdf25040000000800050000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1b}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2e7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x8, 0x3, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="55b60b01cfd38056fd33021b10ca0b68"}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x1) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) 22:21:43 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x20000400) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 22:21:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000100), 0x40000000000011d, 0x0) [ 336.324874][ T1453] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 22:21:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x4000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 336.383223][ T1453] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 22:21:43 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0xfffffffffffffcc1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x400000000000) close(r0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 22:21:43 executing program 4: r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r2, 0x4}, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x4, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/dlm-control\x00', 0x2000, 0x0) semget$private(0x0, 0x4, 0x12cbea9d86befc5a) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000001a40)) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) 22:21:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x34000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 336.474253][ T1468] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 336.500649][ T1468] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 22:21:43 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000300)=""/252, &(0x7f0000000400)=""/225, &(0x7f0000000500)=""/207}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=r3) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x100000000000000d) 22:21:44 executing program 4: r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r2, 0x4}, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x4, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/dlm-control\x00', 0x2000, 0x0) semget$private(0x0, 0x4, 0x12cbea9d86befc5a) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000001a40)) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) 22:21:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x210742, 0x0) r1 = getpid() getpriority(0xfffffffffffffffe, r1) ptrace$setregset(0x4205, r1, 0x201, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = getpid() getpriority(0xfffffffffffffffe, r4) ptrace$setregset(0x4205, r4, 0x201, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000a40)=0xfffffffffffffee6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r9 = syz_open_dev$mice(&(0x7f0000000700)='/dev/input/mice\x00', 0x0, 0x400) r10 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r10, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000240), 0x0) r11 = accept4$vsock_stream(r10, &(0x7f0000000740)={0x28, 0x0, 0x2711}, 0x10, 0x181000) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-net\x00', 0x2, 0x0) r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dlm-control\x00', 0x40a0, 0x0) r14 = socket$kcm(0x10, 0x2, 0x10) r15 = accept4$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, @initdev}, &(0x7f0000000840)=0x10, 0x100000) r16 = getpid() getpriority(0xfffffffffffffffe, r16) ptrace$setregset(0x4205, r16, 0x201, 0x0) getresuid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) r18 = getgid() sendmsg$unix(r0, &(0x7f0000000a00)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)="db6f2343111a9009616b0e3fe26d7e5c43a8105ed436c060a537ebc40244f04d025b66c1aa84272fe102c176ef05b5c2510b46150629c4abe334f0fa6d9ce0b94693051ef24f7653390a99ed0b850e54f9b0ca13e525bcee56b837e160b9ca39fd66c33077ae14a0c4cd9169840a62ea8a810167be9fe423fa3f1533a1bbce603185624ae1ac117c0a9aca0eb97fbfe78eef8f9b853054d32fd2f53ebaa7c140b4307a72f13b0772fe04a996b33be2b9a13f0fa8ca2097c04124d6cd4a101716224249194abd7b304a92454bca2c60b6fa9f8178c7e5b6eb4cda388d1a2bc1d10ad600023db5", 0xe6}, {&(0x7f0000000240)="d6d2f44bd79dc9fee97e2bac7fa0745d9307096f9ba4a9b0c8edff6856b950217c58f384344f7b26713d45501ee8d5b1674c63157f8b270e308497cb8a954725a2be8f0f335552a51f3e8b4032ed619936685c0b203fa3d6bda8e08ddfa1b8c63ee2deab6915e00df200b43c629e41d1", 0x70}, {&(0x7f00000002c0)="3e3b956e94a086bc543c98da83b16db3601e42feab287a5d8a8e6222af2f2b4ee73734a54ee95334cd19782ea1b1b61f024a0cab518aff35c6a4d6b33c7eb1da6e77e0336d9691fc2ed1", 0x4a}, {&(0x7f0000000400)="c388c44c1f3903083dead343cadff8ea147e934f03ae5cc79fdf9cf92bfff8a2aa1d8010b9619539eb26447eba7c3ebcf4bfa2ec3c93ca52088ce2b7054813f907e5d5c79b9510fc53ae0fdc614e479fe4b60f5f82f5fd95858fec60338f84a8c31556bca884fd3fcd88a94f05bce2242dd7bdf7e8105aa75775dccd825598c260241eed79ffdc101287fc1476ef7e61f5213e1446688deb248fdd6da2d69e3cef051aed00e68d665d131eeb443d6c4b694df718f050f050303511", 0xbb}, {&(0x7f0000000340)="00ace0c217b7bc97d916a4fe5af3159d3e116f7570f8516b455a12e925e1b1be432571a61a539df986b094ff5a5d91c55b6292ab24bbe204533e57a8f1853cf80fbed66cbc5f7ccbdae438a97621eabf2d87f2a4e87d1759366acb6d6181576ba3c57b7e039eb1ee39dec8", 0x6b}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="00000000241c0001003d9c4d14107a94570b1152", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000040}, 0x40000) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', 0x0, 0x0, 0x0) 22:21:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x100000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:44 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0xfffffffffffffcc1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x400000000000) close(r0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 22:21:44 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000300)=""/252, &(0x7f0000000400)=""/225, &(0x7f0000000500)=""/207}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=r3) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x100000000000000d) 22:21:44 executing program 2: r0 = gettid() r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000a00)=0x1) r2 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xe) fchdir(r2) exit(0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) sendmsg(r4, &(0x7f00000009c0)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast1}, 0x3, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)="a4b60e8b3d17c385abd785baafb738f217b48e471a6b2c253564f8491868f911aec0b9ed17607a077124f7dab7b7ac6b61f759f848150011", 0x38}, {&(0x7f00000003c0)="96602bb171b50c19692865697fc58abdfc7bf603a819652dac2f521fe9a1f6aa7f059800a2e87e02b606a5d1e07013f21870910e2bcb2f8e085388f25231c0470460e7a484083d942f43a32e06f4cb91d6d34c6087647a5ea667bf835ca9b58a82de57b56f369925230af0cf83fb5da22de8cea98f0c3cbbfb1428e4df3d8e1badcf28fc5cf861f40bc0a2e5d19d146555641f5c11be4e1595b722eee3d2aa0583c9f725e348db84c476caa49a644b60e709cc44dbf628a8f996b51487aa5fafe00fb6ce788676aeda6f01abdc244fe373ad4e", 0xd3}, {&(0x7f00000004c0)="b9a25b6a17125ee564199cd0ceddf641c251fa6ce850e627d88fd1d9a91a52dfceaf86a198b6487787641f73915192ccd7be9e4d9a5bcf18ba2a332c77c1eaa45314fe4f969cf96b18e48586a0aacddc3bd648faf4ddeef633b663aadfe963e97636681700d501b271afaf1af60358c2d06de401333c63bb238a4132b65faa1b41a11bc4656ab8313277182b639d7e053c", 0x91}, {&(0x7f0000000580)="7103314ebee9180c380ad5aece598691713f97261bce5067e2", 0x19}, {&(0x7f00000005c0)="1bfc131c3802b1c16399b9cdcefe7585512a6c2f24043ab502489139b29bf07548f4532cbc05a84501ec8f13c95d43442b9a117040ce6d9af0", 0x39}, {&(0x7f0000000600)="eab2372211a1e269600cb49c8b07008a08d41fcc1ca9dc8f8daa3bdf6e824bee6dae9410e92561de28f901390ab48d0e741138bbb5472ca67eb511da166a9ba4df3fae74c33fe80f24a7ea78d726dad1190a261ca6ea1384416e4d1f998c9ce308af65a1b3de5215131b47d0f0d2933cbf92c2826a83f0b3261a1253ee7dcecba3f09723a3634ec892084725aa4c6667c762654f1cc8b5fa", 0x98}, {&(0x7f00000006c0)="5e8eb9ea6de42815b735abc9802ee42f42ee2ef30e2e0bb6e432e918b5395ba427f93eeeb00cdaf354b0845f2b6352afaa19333ee2760e5f0cc8244f9c0f8b34710967faa0725307b31a816e105e2af80546d91bde993a006bd4ee5c12b019ae5ed083cae7c93994dd694fa4023fc4c9ca3c1e557b4179bf73dd0cb60b4e3f4a43b838d7298764cd81", 0x89}, {&(0x7f0000000780)="7e755e474f44c3e76b4b7e6de3257fdd83cd0cccac3e8e7e84345859143f79bdf74b191a5d3afd7368e8bb36d71dbdd69e23ac524928b735909f92909ccb8159152f1e939d020d3aea14e3411e430e4869287101ace98da3621ab5d484d365efd9030d41ebe2c05677e6", 0x6a}, {&(0x7f0000000800)="d32905e67fda80ce89cabff7b9592f3d0eba165055d15d4488c2e5622ececc69cc33fb601d2750482773b494b9fce7f2ba7ae30d922752d7dd5ce9cd996fc46a8a199c600164052059c84e34e6ced12f79ad2683d8724657fb4a9ab1001c6e49543646d37a17", 0x66}, {&(0x7f0000000880)="5e047e7b183f3c553708ce16e1676d47e88f02f29fe76236f0e11641d6ebe5998d86380f1eb3da70f128ee0dff01addd7106a528fdea1eab2d568e83b0134997d6fc99073bf4b5d879ab9a887651cd98cea248e2779c85af51e9fec6b9b30bcae7965d1a1fdd4778002637aad849dd5029423d65bf5fac46a711e6bf6b", 0x7d}], 0xa, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1010}, 0x2000) prctl$PR_GET_SECUREBITS(0x1b) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) sendmsg$unix(r5, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb860a21fee08800de8be7028945a9c09e3572b8fc7488613479d1b505e6996597a6ef780741b392f708de72e9bb34297f440b6fa685871b99fc9f5bdca2ccb28fb240738ee5a6e1b6d7cb", 0x4b}], 0x1, 0x0, 0x0, 0x8000}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x540448}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', &(0x7f00000002c0)='/dev/dsp\x00', 0x9, 0x1) 22:21:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x2, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000009810100000d01000000000000000000000000000000000000000000008b15b25419b11a450000000000001e6eea5e6c012de335c6e3dc404862240695492d9f4d0b9ac90ca92d9f99d88e7bc70cdb7cb78d1a5cb5811ac651119650c94fc3251dbbffc093422c4d16797ee70ddd43798de1b9b36b15f6607d38576e39e6918b50828ad435381af64a6461e6a002d59ae8fcb882d0bae037a30a77394a6db4431a886088548395d0aa0007698953e41f7aff2a68df9581b509cef609b32fe878c1f352d739ef6da244f3bf9367d1136e473ba43b98b0b42d78471ae283def7998dc153f0f77c3d2472423b57a3d3b310d80fea44896493c8fbfc99f07f17c4d1ec4c9476a0b2ddd1f5738df7f1e69dc1987c756322"], 0xc9) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4040, 0x0) clock_gettime(0x2, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000100)={0x9, 0x1, 0x5, {0x0, 0x1c9c380}, 0x7, 0x6}) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) shutdown(r0, 0x2) [ 337.228533][ T1712] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 337.247889][ T1712] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 22:21:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x400300}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 337.289569][ T1716] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 337.338026][ T1716] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 22:21:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x1000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x1}, r1) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x1}, r2) keyctl$reject(0x13, r1, 0x2, 0x2, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6}, 0x0, @in6=@dev}}, 0xe8) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) [ 337.440281][ T1712] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 22:21:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gretap0\x00'}}}}}, 0x34}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x40) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000002000061df18294c1", @ANYRES16=r3, @ANYBLOB="04002bbd7000fbdbdf2501000000000000000741000000140018000000007564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) socket$inet_udp(0x2, 0x2, 0x0) [ 337.496128][ T1712] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 22:21:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x2000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 337.569779][ T1797] Failed to obtain node identity [ 337.575081][ T1797] Enabling of bearer rejected, failed to enable media 22:21:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) pread64(r1, &(0x7f0000000280)=""/218, 0xda, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000040001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x7f, 0x1}) 22:21:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000000)) 22:21:44 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000300)=""/252, &(0x7f0000000400)=""/225, &(0x7f0000000500)=""/207}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=r3) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x100000000000000d) [ 337.684306][ T1797] Failed to obtain node identity [ 337.691334][ T1797] Enabling of bearer rejected, failed to enable media 22:21:44 executing program 5: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0xfffffffffffffffc, 0x5}}, 0xe8) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) r2 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)={0x7f, 0x1f, 0xe, 0xc16, 0x4, [{0x1, 0x3, 0x3, 0x0, 0x0, 0x2000}, {0xa6, 0x621f65c5, 0xffffffffffff0001, 0x0, 0x0, 0x1a08}, {0x3f4ca7bd, 0x9, 0x7e, 0x0, 0x0, 0x200}, {0x20000, 0xcd27, 0xb8, 0x0, 0x0, 0x4}]}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x4000000) 22:21:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x4000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:44 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00') 22:21:44 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003402000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d640500000000004504000020ffffffb502000000000000b704000010000020620700fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2080) ioctl$TIOCSTI(r0, 0x5412, 0xf8a) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r3, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r6 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000680)={r7, @rand_addr=0x5, @rand_addr=0xff800}, 0xffffffffffffffb8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={r8, @remote, @loopback}, 0x3) ioctl$FICLONE(r3, 0x40049409, r5) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)={'team0\x00', r8}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="24010000", @ANYRES16=r9, @ANYBLOB="000426bd7000fedbdf250300000008000100", @ANYRES32=r7, @ANYBLOB="bc000200400001002400f50070c0280452697479000000000000000000000000000000000000000000000000080003000e00000008349e48d781f1f1000400018ea5c60e8930ad41740bcf4e8c5332d1a79d18", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000008000100", @ANYRES32=r7, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r12, &(0x7f0000000640)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r14, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', r14}) r16 = socket(0x10, 0x3, 0x0) ioctl(r16, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") getsockname$packet(r16, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001400)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001a80)={@loopback, 0x0}, &(0x7f0000001ac0)=0x14) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r20, &(0x7f0000000640)={0x11, 0x0, r21, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r22, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r23 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r23, 0xc00caee0, &(0x7f0000000240)={0x1}) getsockopt$inet6_mreq(r23, 0x29, 0x1b, &(0x7f0000001b00)={@rand_addr, 0x0}, &(0x7f0000001b40)=0x14) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r26, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r26, &(0x7f0000000640)={0x11, 0x0, r27, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r25, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r28, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r30, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r30, &(0x7f0000000640)={0x11, 0x0, r31, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r29, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r32, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) r34 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r34, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r34, &(0x7f0000000640)={0x11, 0x0, r35, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r33, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r36, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r37 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r37, 0xc00caee0, &(0x7f0000000240)={0x1}) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r39, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r39, &(0x7f0000000640)={0x11, 0x0, r40, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r38, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r41, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r37, 0x8933, &(0x7f0000001b80)={'team0\x00', r41}) r43 = socket(0x10, 0x3, 0x0) ioctl(r43, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") accept4$packet(r43, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001cc0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'veth0_to_bond\x00', 0x0}) r47 = socket$nl_route(0x10, 0x3, 0x0) r48 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r48, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r48, &(0x7f0000000640)={0x11, 0x0, r49, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r48, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r47, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r50, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r51 = socket$nl_route(0x10, 0x3, 0x0) r52 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r52, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r52, &(0x7f0000000640)={0x11, 0x0, r53, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r52, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r51, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r54, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r55 = socket(0x10, 0x3, 0x0) ioctl(r55, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r56 = socket$nl_route(0x10, 0x3, 0x0) r57 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r57, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r57, &(0x7f0000000640)={0x11, 0x0, r58, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r56, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r59, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(r55, 0x8933, &(0x7f0000001e40)={'bridge0\x00', r59}) r61 = socket$nl_route(0x10, 0x3, 0x0) r62 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r62, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r62, &(0x7f0000000640)={0x11, 0x0, r63, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r62, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r61, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r64, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001e80)={0x614, r9, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r15}, {0x124, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff7fffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xbc79}}}]}}, {{0x8, 0x1, r17}, {0x1b0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r28}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r32}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xfffffffffffffff9, 0x5, 0x9, 0xfffffffffffffff8}]}}}]}}, {{0x8, 0x1, r36}, {0x1a4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r42}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r44}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r45}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r46}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r50}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r54}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xf80}}, {0x8, 0x6, r60}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x3f, 0x0, 0x4f, 0x4}, {0xb5, 0xadf5, 0xfffffffffffffff9, 0x8000}, {0xd3, 0xe8, 0xf09, 0x2}, {0x7fff, 0x4, 0x2, 0x9}, {0xff, 0xffffffff, 0x4b42, 0x6}, {0x7fff, 0x89e5, 0x7fffffff, 0x6}, {0x5, 0x81, 0x20, 0x4136}, {0x10000, 0x7c1, 0x400000000000000, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r64}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0xa730e3b6a4d78ae7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_delneigh={0x2c, 0x1d, 0x110, 0x70bd2b, 0x25dfdbfd, {0x16, 0x0, 0x0, r44, 0x80, 0x2, 0x6}, [@NDA_VLAN={0x8, 0x5, 0x1}, @NDA_PORT={0x8, 0x6, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0xcce82feb340e4318}, 0x20000809) 22:21:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x40000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:44 executing program 5: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0xfffffffffffffffc, 0x5}}, 0xe8) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) r2 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)={0x7f, 0x1f, 0xe, 0xc16, 0x4, [{0x1, 0x3, 0x3, 0x0, 0x0, 0x2000}, {0xa6, 0x621f65c5, 0xffffffffffff0001, 0x0, 0x0, 0x1a08}, {0x3f4ca7bd, 0x9, 0x7e, 0x0, 0x0, 0x200}, {0x20000, 0xcd27, 0xb8, 0x0, 0x0, 0x4}]}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x4000000) 22:21:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) r3 = getpid() getpriority(0xfffffffffffffffe, r3) ptrace$setregset(0x4205, r3, 0x201, 0x0) setpriority(0x1, r3, 0xfa) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000040)=0x10000) sendmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280), 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="bd", 0x1}], 0x1}}], 0x3fffffffffffee5, 0x0) [ 338.010926][ T1976] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 338.019742][ T1976] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 22:21:44 executing program 1: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) write$P9_RREAD(r1, &(0x7f00000000c0)={0xde, 0x75, 0x1, {0xd3, "2b264cf42b922acc4d3f2d69fe4f52eb145ef93c5aff1d61d1aae27c851fcafd2a9c8c8a8b0b7eeeed97097853ade6389683afa89aad356978570bfa066a11532fd4e8cce9897a4decee027469341b74f9dd4070b5a884e1ae11bcb699d40d7c7f347ace8785ea2a65e9a35fbc19b05e81fac9d929744a7e1f9514583068412cfd0c7cb30ec3243226d20f1d8de38c88220b2f894bb4d2718820741ad07f8cc1c7bb5f333ddc33ed2a8b4f1406629204f17a211a65427fdcc5c3240243a493f7e1dc4b834fd2eba9f95a553ccff47984e6a640"}}, 0xde) write(r0, &(0x7f00000003c0)="293fe9c216dd5844c9dc1d4b71b45f65d1912d3c3af0d064624abe810d8a5d2b9b719c7da1a91bea63c076e3acbe5d21546a0c150675c079fd3b33be5a05614241c1b8c31f849f44f8620432f834cec52839d30aac6d74dc60f3e9655d97540abd6f115cb930793cab5f489b03f257634df9d86281efef32063cfde97df1db2573a9f3f210e118a2", 0x88) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x11, r0, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) [ 338.081933][ T1985] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 338.100455][ T1985] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x80ffffff}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), 0x4) r3 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000180)={0x9, 0x0, 0x2026, 0x4, 0x4, 0x4, 0x400}) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 22:21:45 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) 22:21:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0xfffffffffffffdf1) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{}, {}]}) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000600)={r1, &(0x7f0000000040), 0x0}, 0x18) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x80040) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000001c0)={0x200, @broadcast}) write$FUSE_GETXATTR(r3, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, 0x4, {0xe5d}}, 0x18) [ 338.221004][ T2094] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 338.230443][ T2094] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:45 executing program 4: clone(0x1000000000011, &(0x7f0000002dc0), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x401000004, 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) 22:21:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000070d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012001000010069703665727370616e0000001cf402000800cf331003003000000008001500000000000800160001"], 0x50}}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x58, 0xa8480) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x40000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x400) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, 0x0) setreuid(r4, r5) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in=@empty, 0x4e23, 0x0, 0x4e24, 0x1, 0xa, 0x20, 0x80, 0x33, r2, r5}, {0x5, 0x1, 0xc27a, 0x454296ae, 0x0, 0x0, 0x1, 0x8}, {0x400, 0x80, 0x4, 0x6}, 0x9, 0x6e6bbc, 0x0, 0x1, 0x2, 0x1}, {{@in=@local, 0x4d2, 0x43ea0e3a8cc1503e}, 0x2, @in=@loopback, 0x0, 0x1, 0x2, 0xff, 0x0, 0xfffffffeffffffff, 0x9b}}, 0xe8) r6 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000300)={0x9501}, 0x4) listen(r0, 0x3) 22:21:45 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000004f40)={0x1d, r2}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x100) r6 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xd4, 0x80) getpeername$netlink(r6, &(0x7f00000002c0), &(0x7f0000000300)=0xc) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000140)=[{}, {}, {}], 0x0, [{}]}, 0x88) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="e1affde3", 0x4) close(r0) [ 338.371420][ T2125] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.393473][ T2125] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 22:21:45 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0x8001) 22:21:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0xffffff7f}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_SET_TIMERSLACK(0x1d, 0x9) r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r1, r2, 0x2000000000001f, &(0x7f0000000000)={0x0, 0x0, 0x1}) read(r3, &(0x7f0000481000)=""/128, 0x374) 22:21:45 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd28000)=nil, 0xd28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5ea9e442fef070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) 22:21:45 executing program 4: r0 = getpid() getpriority(0xfffffffffffffffe, r0) ptrace$setregset(0x4205, r0, 0x201, 0x0) r1 = getpid() r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x280) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) getpriority(0xfffffffffffffffe, r1) ptrace$setregset(0x4205, r1, 0x201, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000400)='aUxv\x00\x917\xf3\x965\x81q1r\xd2D\xb6y3,Ft\'y/{\x89B\xa5\xcd\x86f\x84\x8b\xb7\f\x12\x82wW&rw\xea$T\xdf\xbf5\x8f\"\x9f\xe2\xdf\ff\xb0\xcb\x9f\x90v\xa67N\xae\xb6v6\x9e\xbd\xa1D\xf1\xfbY\xc3]\xdc\xf4\xa8\x7f;\xc51sD\xa6}\xd8+\xd7\xd1\xccr\xc0\xf1\xc0F\xe7?\x0f\xc0\x86\x9e\x16_;\x9c\xa4\x8c\x8c\xe7\xd8x|\aT\xf8\x8b7\x17\x96d\xaf\xd1\x86\x03A\xe2\xc4=\xab\nP\xfc@G\xf5\x826\x0f\xd1\xf3\xe8\xb0\x8eP8\xcbz\x9dk+\x02-\"\x9a`\xb2\xddLk\x02\x05\xba\xbfqc\x93)\xcdj\xf0hSf\xa9\x99\xb7\xe6\x85\xb7\x06\xccZ\xf6\xa1bA0!\f\xf6h\xf8\xd4\x84\x19\xa8^\xb6\x04\xe2\xe2\x98\xe6y@XUf\xea~\xdf\xc9\xe8Fk\xbfy\xfa\xf3t\xa3\x16\xb1(\xda\xe6\xd3S\x12`bp\xba\xab_\x16\xf3\xa4\x8e\xf4\xa01f\xc7\xb4O\xc2s(\x97,\xab&\xf9\xbd\xf2\xebn\xf9\xb6\xcf\x04\xc3\xa6yO\x06Om\x138>\xb8\xe5%JiO\x9d\xec\xbc,C\x9f-\x02\xf0g<\x02kkrE\x80f\x92\a\xac\xb9\xd8\xd0\x97&:\xd6\xf6\xda\x16X\xe0\xd0\x93\x06\xa2\xec\v\x9a}.7\xcb\n\xe1\xba\xfd\vg') r6 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r7, r5, 0x0, 0x4016) 22:21:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000640)=""/148, 0x94}], 0x10000000000002b1, 0x0) getpid() r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000a40)) r2 = getpid() getpriority(0xfffffffffffffffe, r2) ptrace$setregset(0x4205, r2, 0x201, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000a80)='autogroup\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000600)={0x0, 0x0, 0x7ed, 0x20}, 0x10) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) dup2(0xffffffffffffffff, r6) dup3(0xffffffffffffffff, r4, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r7 = getpid() getpriority(0xfffffffffffffffe, r7) ptrace$setregset(0x4205, r7, 0x201, 0x0) r8 = getpgid(r7) process_vm_readv(r8, &(0x7f0000000400)=[{&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/244, 0xf4}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f00000007c0)=""/74, 0x4a}, {&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/219, 0xdb}], 0x6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000500)) 22:21:45 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040), 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) fadvise64(r1, 0x0, 0xffffffff, 0x1) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000000c0)={0x60, 0x0, 0x7, {{0x3, 0x29, 0xf8214e9, 0x100000001, 0xe, 0x7, 0x40, 0x80000000}}}, 0x60) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x440000, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="279139a3ecd9290cf0b0eb419f8d5e2b0c4a963b65fd5dedae5a49d6a4072d3a74d985ff11e3d14ca59732a564a865723f00c4ca7e6b6abf401961e9a0798cdac8f59605027d2adb4a5755454b153f265edc66524373cce95bd292fffb59b470c3b08b3f7d9f61f23888da2eb323f952f7204e97be6170bf2707fd087f3a18d500626fd6c4037df06e23568d3e6c4baae95598782961be88d49801741fe7e006f6743a75df4e515ff8e97c694dfcbadab1fb9aaa296d19791ebae3ecee5fee3f923ca3a45d74a4aaab9f8f70b8c5291e8eb28abcfa38000cb0206167972dd84a33602542ad94eef084b80b058c28424d34f15ed09d835353d553eb90f85554d45a75aacc3bd0062301d9237e93425d3401c1dd2f8d8aa555cc690cdd1847fd846e4025c10b2765da3ed6ebb9a213007f302f1af450ee55c8b2e831d0610490e921e8e1950aeabdc75c10d31d42ba84a7262ac82c67ea71cf28526c13dbf3250b64e7ced7e3f6800eb1434bf0c71de9f5a6046543df91e5b5f16c01f69d8488cba1e8cc55d8969ad94beaca2cb7e80e7f373b6b879d4ed8ab4d331024847d268d5187ef482737b08052a7df07730f26e170a8f119206bf856eec4b887bc75737c344f6968c55728f5fed7506a031097e60b4d623bc13981bfc08f01bb22be72354935fb6df645bb222f2cb4b37f55463f7e5776ae67427294a5c7f2c84999b7a2954614f24c9b63e0e814e9fe349b622ae1af47c655cf4224c1021c3af7189e3d64cfe27e2e91d7e5e1d9077e0bce6b2198ca3882bae1af9358e65ee12f6def36e73472d16336c0f11233c24e15fbec4131ae475e3d72ab7427c1a3ddb25a18ac3860cdb40591f7628014930ca0391f3255fa2334d441e32e68fb1af0f7f5585ecf2c047726b0de8b4d2311669f03f7c7cc66b34ac04256daf3add46ba643c2d675cd416d05c82a2303a3795b39c4a38469b7da33bcf3210b52e5a7da602780e991fce86fb8825d31dec9f26cabb5c76b9c82e627c9351650fcfbe0d0a51be698487b23273f3f2aefe2161c3f286e685c8ae1ae25cfb4cd90bb30a1d49a605b3db3b8cc55fdb8a16a7e21313fc50373699e30f03e5f6514829acc01d85e22dbf5668454a43bf97aedc35072d50020372defee8bddb72f9d880543419fabe3199f81be0de516a9d1344c63eceb0971bb242846051054b6899545fec3bba46acf47b7dc7b832e4396ac4d4a40361f108e1a6e158f5a3eabe6c3cb8cf2ac549ebe8d727abb2e5b391b210453b4bc04f874888ee92055667c7990737ff4726a30ec18b0adfbbd347e09b3ebc7cb16262bebe8013df9a957769852756fb6544f5fcf086b388fbd293c02d34e9ed56ef84a1d26eef73fc7009e384e9de0bf90f03380695369d8bebe640f623ac72897b8b39b1dd3b302c17517eb7823f33aa1bd4efcbae37a2ad55d7f3420379b3714e4c141cce6a5d2edc0f60f902e37a8edb4387fa8b80798b695875a1359eb3604e8f508e642c9c016debdb93a7cc40b959373568163eb5c81227351cdb4baf6c0f4f22397f6f76d7428883e77fb3f2c3584c014516a3c3851acb89772aa2efdf7560695b0f6ffa3d052716757ae6a85374fbd4df3e95094beeb1690c89dd20bfd7ac0bf5757aafc76100acd74086335e32af42e5cbc01bb848b266e8bc335cd096e56721ec7f80c3830dff231748ea47e703fd72349cef1ff3a4fd81866097c578e6e9125038e6c64fe0d6a6bce688fcd6450a8ed52f26e6678de298672ae475f94e8fb4dcf07b39901143f03100e33cfdb7a8a10ea1520088a9f3bee1c9c4e736560d26672bdade6c97e8a8706de76983c64aad3c9cf148b6f1e27ed5921a353a37ca31c2b9f2e62ebacd7570e39bbdb20ce8e516166f0ff5509ad9b5199043304fccfe06311102b36f0030dfd558e91204f30d750c34d6a2ccaf3bc992d7ff139f829b2815b7b97b6c13a313eac065b1a31fbfc354ba3dec9cd5e2ba8203f855887eb3de1752e4ced899e960bde71b7e1935f411565901220e23e1ad8f44e3e55e51856a2c2110f3b15bcb38a86f171743e9e29fa427b3b7cc68c407cb5c4c38eff594539d92930aa2112a4a558b5d0f54cfb049fbebdc89d1a2f6fbf822594c5d8d937d77347d4e3f16f9d056621b28f8101abfacbc4e8170bc82acadc2559fac6638b4de4be787e22f2b15ed3f19dd235693e9e027bd723cb51d826db4d6ee2598b98ca08961529a76cc4ce19b2938724e5f785035eecc6fb0f121f37d1748fbbec6204642766174181d08f8b3ac18200b7b25b8de66eaa6b113ba8346a7252621c167c22b10e603b5a22f3421b342ab9a1e2b91911111f11d4941d75b0ef5123173ec5f561829b8208dbefb4b5d3f8af084e283ef751bf3f565350029f66aa042a563882d9b99b5e593a590429d3ff69368393db13bdc8d28767e2877e477709ef94289e13ceace31e3aaa01ed1481dbf24396ce9714463aeaaf76b0563090b4a453ae9b35ced36b8e37d2f4664f88f335953892f7d3fb517d32d3d2709009019fc8a40704f5c7093c3db96e5a9598d1eaad5a3fe4f9c7573a59bada2a7f0c645a6ccd0a6679e58d371f40b5a9b1bf8b47dd8b396f0ff4522ddf731578477c8371b5ff399c5f0106fe1f215206adef19ccd777256cb106522f9d6dddffa022546729700974b0ec34f3171a1ecca6d7fc35e5e591ad202c8829b4449796beb0ced6cc81e87cfcbdf769e2cdd851d0bedf7479a4b6f5b78c481e5975f4e8b9cfc78f6c5f39692e41c34d54a9df93c0b5dadb7a1986ed06838e1bf267d8f563cc281bb8de0e73ca7e0203c613e9e29879730524e0cc7cdd9b0b0ec65bea86469b6d18d4b8c41a859ee5d0f68ee86837c3f0f5b9b83fae56b01285662b2133bb34a14ad85849a232e8b80408b9c443e5cea72a9a0b1f4280bb5349b8f27d32e895f2172486836f8e1bdafbdfb270aa20cc0768fa2b8bd2039414fdf6a2664a6e8a98c21e51d30d520163f0334694c808c87d2e6c80c421b36ac931c8fc46ac007452a51abc359eebd4f9038d715e7bd1d68c93052bebe0987b3e0d19f3678daf00629500ee7ca6d6c8994cf8cef62a1de296c55ccfdfd543f7cd0a881a9f4de08caa4279ddcc1d0cf80e19ade4afb66aba8779eaf946a7139953fff5891351e522d2f1589dca944e42deb10f34820d201c6d0ad5d2ef2092dc5397213cc3d933bb91b1cb1a424f185fa4e6fe7b10be7ef5a3bb4112b016dac4f53821f82d4e123cee462e3c91f94ab5094cde6b55f432256b24deb36b076a05701fe78f380cbbeebd3c53391eedee63da8ef4bae091b4c38735adf21e98b6c9058a729008a13bd5705a17966159a56e224ccfeb08b5d362bf2efab049a709a37f96c305b625d1096845d37384b9e9bca607ea3756dc45d25e00ff59a02f65420e53be689bde873531f861109265c626b35e4ecf9c194c3a474020395d8c9b29f679c00e473da7a0544bc4956b3ed649f6ed2bda204c3cfa5882b99e4a7e245f28ac878be350d9bf21b0eaf36ef694488c6a191455b928e158b7d6ea4aebc1d66b93f5a6cb41bdeef2398bbd4eecdd89453665fa8d949713300a55820ff9db617efd5cf363ca8e46850f1a7a7bde579e1149e2008bee04ec186960b529977dd9d0fcb4b761b8c15a412303ed2636866d093732d172d0852ff4e21c20b5fb89f972a0e9de41262c21dc5cee720ca4369b9afb185bf840642bca2a125645b709b7f48978f01ec4ea74ad988644537c8fc1a8875087499bf378340350f2b504753d065ff967693e7137e9828782c92e4a403eee052f13bbab8e9d2b24ece295f9db23a900b4190ba3e5fc6691f447b08dfe192abf55d64f0624cfc0cc88b61fa8a07abee9728621c08f9f733eef3d35521d62b61de607b526655327dcd5d40672d255a65d80a204ba8b7758a5539021b45b226461ebd1e82454b34e096b9291e4ab94cd5004476d214255a9e8219f1bf2e97b2ce20baace8515c0700961228f78ab9d07d2f5527011d6dd71062a4a77d95b8ae03137c481d52e6516f6f20db912d9042a73f6aaa58c16e0c0fc5e6fce5b2ee0711bfa9cbf1cd0dc1d6e9e88e6692cd4bbf346a90a7c5272f966a4508f6c1304d2f5cde550ea55998b4bf24bbd8100e090168893048ab1b4883c6fe0a4684fcbfa1adaf91e02f96d9674a51b80f84fcab07e0ed04e901be9b5c2854688041c28f2950969ed6d6313f716db9b50540c95dd2f767aa7596e69a2335042a0dc4fa764f53f4fccf31f8f9fccde1ea3786070211eb8c48eeb585eb4376e3b9b2d2531a475f99aef3f01cb989103df2c4babd5e372a9297889789f78e474a969dbda98c0a87051836879c40f48329fc37b1b9502b8c65c838da6c5aa647857b7d80515b61c28af7b52698eb45b51160c4d45ef7f86fc78826fc768f1d444dfeb43580f6924008b41b9bd2036420c584b30da2b3c647fc52a06a2e0f798ea7de0847b76b6bc7e34aef795bcd2af8f3ccd683d0fb88a5686a7ab2b799c797228d12b8a371361885918337f94d0a8f26b6a9edaefb5d95b01263fdf555b098149521b924be30b764f357a5b45fb0b073c5040f9a5a0e3b3ce53611bfb9a3b6a572b11fd93e56478126e1f8d72ba95e955b7dde2afa1cc5f7ec103dca11622960d68e3b64f765032746f1d898482a11a04347650cf31588f053ed43c675d8cd8b46d2a65d5943848f92f9c59386b019a94520a569981322f91111208ec02fe8567f2e1ddd1b2e8bf7c83e9e0cda280397fca8a2eab7337bf2d6906c9c23308ec73cb6770a9516a58e59cd62316715c66d6c396d7265f6e6b6eac830e670858e2284b34ab070e480e4d4a40c612ea58bb7af58b228249ac0eef4585d506c2fdf9071529f31d40ef4fd75bd611426f8f872b3aab2fb4aa0a0b2ee62f143f912f17c1c6987f4b0baf761b1df71cfcc4fa9168b27ef04e3e29b581cc87ec55aca05c97a86345cc9a6dc903b9a9fba7478c8727d82bf28daa6df87d9d1fd416ae2a758dbd06a9dcc97bc67d81bb707316bb3d1605b8ad67cd852180058b063e4607e8a209509e43643bc17c72a1e8337e3828290879bf42050ab2ef529e06fc6bbc433b70a2b2bb8fc182fb8431a1a7b9e01d29e05252fff06bad4d67db48950511bbd4acf0bbd2216dd1ae6c6bd2625337e818be763d531bfa94d06e14769cfae606d0b19e2e97cecfbfeed626471eb03af8a6a366caadbfd5a592dbf106707662b07252faa1d89f715b8941ae138a61141405555b1872a33d68d147223e0216b46e726e93ba99d8aa964ce7a34f4b829d8862f1a0c4bbb08b75a121bfd71495af7771ec2ef5a60abd5d64796144bf043cdc29ffe573fe56f1f470afe4239720b9b45953636206ef32c611b11cb3a5bea195df2b98f55eb5257cedbd6011cc7c97058f329803907344d456fb60d1024a4d4438e302f63f26180a15de8e9d826fe98f533a060da4a77d1d200fe011c1915411fa1853525387ee4044ff61d3b7ca50ee850c96a2c94f22df1c6bf05fca371f16ef4bfcbfed2ab1720f83a8d32fee2ceb5542244cd18b64f3c36dc74ce29d957b59da0837b0cafe61d101de134a1c35a2ea8781387c957e51287cbcbfa8f0b0e27bfc80a6140f5e9fc58f0b7147924d87df6dc50569ddfc2204a86a39b05f7d8a310946b91907441843d0f60a58a464c5d3979ca8d204bfd9bfe1e7d2c26c50296dfd0fb03e5218ada3e94e6706bdfe43f252f203b4eea5c84f46c0279326a7", 0x1000) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000001180)='/dev/urandom\x00', 0x8a00, 0x0) write(r3, &(0x7f00000011c0)="0e", 0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001200)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000001240)=""/4096) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000002240)={0x0, @speck128, 0x0, "ce91adf01cc3bfd9"}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000002280)={0x0, 0x7}, &(0x7f00000022c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002300)={r5, 0x9, 0x6, 0x5a1, 0x10, 0x1}, 0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003400)={r0, &(0x7f0000002340)="6bdc52671756f4ce026751dc3e53466274c4b89fe1d0ecfb8cc3c6724dfae602a285cc2b395f823dda8029e842ccb804c452c4baac848f6bb753c881e10d0c30616dc57e7b654655aa19206371cd90191f073396654e3ccf38dd87e9c733ee691815ba929c0a693a614967a8a952b5b1e75749251dc37c689ee750b0aea2ef52fcd8c91bd103984d6b65a7f15677107285c33e47951a5383bf1cf1b7a74748508f11dee25d3853fc3b66948d83cd615abc", &(0x7f0000002400)=""/4096, 0x4}, 0x20) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000003440)='/proc/capi/capi20ncci\x00', 0x442, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000003480)='/dev/full\x00', 0x10100, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f00000034c0)=r0, 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000003500)=0x1f, 0x4) r7 = syz_open_dev$mice(&(0x7f0000003540)='/dev/input/mice\x00', 0x0, 0x280) sendmmsg$alg(r7, &(0x7f0000008140)=[{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003580)="b5b291f947d55a4f1d19bf6b19dfa3d04cc75f37a9648f89e4d09bd08b2ba57d79f3f090b503915cf16ad0a86aa17ca48557353a586502a5c812be284507e8a7864b9834cc7c6231f03587", 0x4b}, {&(0x7f0000003600)="dedfe6f9d2ce71718f48f90798bffc0eb2f7af4f7331fac3436b17a2b0715e52d442a3135b207aab3522bbd2c723993cd92435cfea183f5be7b543a830d0efa50e6b546643ae482d7e5b43aeab7cfb97411c0aacbb768e6a2964b9fd7022d7d6c315ca4bf0a78ccf7597fe83b455e7e4ed44", 0x72}], 0x2, &(0x7f00000036c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x87, "fbf7161fd804f3cef0c7d65759f6c1e6a932fd424c60e9bd8d93baaecab39f461d33215cef80ddaa6f6ab0992274906a1cbece57840dfd26184ff141f0ac08a9d80a61a8a6f0dbbacc4fcd6aa7d8a1fb9156f873475e9fabd1f358e3d89d97ae1c1ea18699febab508cd5af480319ad752498d6b4fb7c56c6b9cc622b2b2d793c3354af47e9604"}], 0xd0, 0x20000}, {0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000037c0)="c2e67de8051c777338b370a4744082decc88090f975b77c4c3eb68be543054157a524e116a31390cb715a61bf495a076a478062a131ae3e8f2caac9b0d7367334435bd96be8e3c7db46b425b622c4f0dbd2d18d7371404d5a5ecc593d68084121bbac317da9a1fdf86b1dfe341dcf2736a41de6e19aa8665831d29bac5c72eb7b195efbdd702f515", 0x88}], 0x1, &(0x7f00000038c0)=[@iv={0xb8, 0x117, 0x2, 0xa4, "57ffd1c293b02ccaf1117c935e778a93cfd294a343fde7d4ca55abfcd44d97a0a66d4047ef1e9a3e718a0414088ff2821d51fd79ff4b1212e4338c006cb44cf0eadd91f0ddd8587a53e0c252423cc40be4722b5363823d089653830d857a796f31a266a62bbbd1a4103be98e81ea5c3b224d191a904e222f1ccd5027c94c11a724c47a2cb72553a7981cf88fe8aafdd94327a7de4732549e441f4a0e849c8bd0928606b0"}], 0xb8, 0x1}, {0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003980)="758d6525e970ab11c62722cdda97413ddd96d1b7d24be6e62ef411627e20c8c663d60d6271c990f43c7173ed280b75d6ded331683956c3ea94077fa98a33ecf48d2b6e5b4db619ec5a6ab1eca36f2fd9a0482ff09370af051294adc50ae095685fb06d1aeffd5476e89711b8368fc7184fe9becc2c5d5880a1b632cdf9682de3f4511786a9ccc17a96db0dc277267ed8ad16ee7a3370d67df21903d9ba8ae5f72e9af522e81fdd51c796e60d0d8e8c06e182e13e06ce1bd3412cad7246eda58116e4962e00faebb429e1e9f4017cd93b8993344584f5bf0b6c08ee7fea37f8006b48a2fd1d38c2", 0xe7}, {&(0x7f0000003a80)="259af1ffd12d80591af8e5ae40dc01e85d6c9f14cb401e74de1a20f256689e4e677ad73ba563bf08519b6fddee42163d77f901b2549ee171ff5979b9c8cfec4a6b859b32906d3aa458ec2efad3a08b98e837b11473332a0e2847e28ca4d555c6408b609fda08e922cce5ffc6bd4300754d99de6d1bcbe613af6334c92d46c4a0d12a7a7523f1ca8c007bd81c162cadfd9be75d22545beecf6ed0e7e7216f5a3cd51253aa471025d0448af1eaaa3093406272459550399d7444a52cc9609354f50f192432420a95d2f2f5f4aab38d7e9188", 0xd1}, {&(0x7f0000003b80)="ed03917452b4d3a91218bb15f7031d43c1f218b68b046e48ea094e685374f81685682e0cb08543fdf50b1e7eec210ceba4ad4d5b327f8e0e169be2d124065c43410ef18b3e8c243811c31a097fb1efac9a46ba8ea68180c71e1239435ea36366bc8fbffa2b9eb58a6e3d65455a444a297ba0af8896c4d4a670ee2393e3877d2b1b3b6a14e77f940d4106f52adc0881bf9810bffba1ae4d936685d233d65a7e11", 0xa0}, {&(0x7f0000003c40)="4e48b556aad8836a2342283120abf962b8ca82ae1baf5b3ad503504b423c87c7d8ee72456811529d21ebc4f2d2f8332e2038a726abd2b577dae55f46409fd53c942b92410ad6059a442c05e1756ef081cd65d815dbcf722802ba19faba9aa2bb03ece1f248219b258f49be8652b93ded4f407e112c29b3ceede3f06b4b27b644303c34d030c280e55c2aca9b77ee327e1c86e4f61a", 0x95}, {&(0x7f0000003d00)="2158a7acf2e2d247427e1b9f6c5fdd31c9df3195e94a2391d3ca445b3f0b52efc77cc69e95", 0x25}, {&(0x7f0000003d40)="50bca67b6b7b47f4233860203ca24622f33faf937595da4653c5447c422ae6e95186b4fc9631c7bf492ed4", 0x2b}], 0x6, &(0x7f0000003e00)=[@op={0x18}, @iv={0x100, 0x117, 0x2, 0xe9, "42ef52967c1c4d00b7849d15c2a1a4fb04d439aeae9523744658e6eab79344edeec0e21c43db85be8c6a6111443c76ea9ba6a65a9e83dcaf762b20c51c6c19099ceb86589cd96506234156671a34cb81277bb86546ff214888f808792a58fe4ed77ae8dd0a73fd415504313099a142219313fa2d358f1eab652ebb7ec4fe0974ce99c076a6e0daada80d5b1f2866339c84f0a300369ab35b4c8689bb2d1e7b6156c147cf6f5fecb08ca7c3c1b2ad56aecfdd343b7cd9eefc78a53a3872c552f9de6eb9c069d182ecdb97e3879eee6e57c768e6cb9a095f884666b6552bef6675caaf47983076a5a5d0"}, @iv={0x90, 0x117, 0x2, 0x79, "83ac8880b4593375d13021f077421cd114c213311398e34f8b18c85e4a27d41230043f98044c6e048628b693ba452b1e9689bfb6354832dd111452b3344183849f42028152341a26676d57266d150125e5eaad640e2f892ed8c99e181a8b12a05a2aad1fffc6c78eda5c7176c51fe305b5ae9a51535b5212e4"}], 0x1a8, 0x80}, {0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000003fc0)="b9fabc100f2a1ef6a30dceb3dfb4519e5c69164b7877cba5733d1c2ec42d0f5c12f085856979d90edbc8450346d338e8135ed50346773a8897e0b21bfc38f580fb9aed4cb1e4cddc32590c9bd78e7dc8d7d1974e35367490b87b911b2abae7ee1e6db87846bb8abfd92ad86299ca182126b44cd736e53015cd76a3ea255cb1e75a", 0x81}, {&(0x7f0000004080)="33a864d823ecd9b86f9d2771a6d6b1da21", 0x11}, {&(0x7f00000040c0)="37bac037708122f063dd7715e47462ebef1ef2196e6f109288ccc834a21b5667be0b01d19a020407aa588192fd4eb698d62781331814d8dcc7a6f95fa3aa973e0fbf9bb5227c1b7424575e5db528223aae9f97dece2f13f00e515d43ab275c28fb6335a5a759a99f258d0900a707cbcdc9c4c1f75114c31f429b1700eb94e9aa61051f12ef569fed4503c3b5ce552741d09403399add37ac479848215ecf7ffd4f322f603711546064cbc41b0267bfc280a05add74fb86ccfbe478f8bfae2522e0638aa63d1ab010dbd1ffccdd53e2d9be74fa561a342fb687dfe45f58216832cc354a00c8cc679c12cab58372ea407d9c5632d1", 0xf4}, {&(0x7f00000041c0)="07a8a1f649712059f080e6ae8b66c64bf74edb112eb410c08a9972f232fdc27a005f1d9de1e767613d83d2a69007dcc7d7fb6f97633d01a49dcd74602dc00177ceb6f2f0b208a3f387eba9a104e0a1958c36fb1bca8fc49a0f802b90b07835ad2f0c08a7ea757e866d6282b1c8e20ec8183c7c55e36c62bb166d2682cb2e6610dee8576a1b15f9bbff0e4d49613a539615545dc17e6e43ba56c0622b04fd9cbbad1dcf319c7f6d6d42cce2345d6348fc36730f27237ed045451c3337e5", 0xbd}, {&(0x7f0000004280)="a8bbb6dea87289d89d9ac05e2ab3a67d3fc6b8f58723dea4c930af16695a8fb90c79f21d7844a8f95517dba2be84299041a60c644ed8312f44fb113891d400b57afbe7cdfbfaac72d85d4f722e09fd21b9a295eea72e3ffc8b4a8d828519e38e23c9", 0x62}, {&(0x7f0000004300)="6528a179062b8e1dede4b0996e1795e39c71263b685c343f5b1ffeee8c4746ce486e177113715f868972e8d2f59004245a6d7b1673c46111a207123b62e7d53d8ea2b8d2c94062", 0x47}], 0x6, &(0x7f0000004400)=[@iv={0x20, 0x117, 0x2, 0xc, "841d8b5fd86a758c549b1f38"}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x38, 0x80a0}, {0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000004440)="6869cb9291278f80627512305ebb4dbd65280581ca155c184e811810df057c2de7c5a2a71ce264c0038d77380b88d053d34bdaf841a951d8df3eb7708735c5b785b03e57a2625cb8b03f76c6bfdaddb8e11c0c8905cf4fc206bffa7dfe103da7eccd6ceac9e91a143d9bbbd5d7daee2ec21d582e7f762a716fa229601946bf03d063b96ff278b82ce62990ca1d9d1b8dae565462ddefd433c09fcaf36af4c8b2069b47025fed0081a8511c9a38795376ed0405a4f370b35dfd0bc2bc10b841cab8b889ebb4c745436727477a9073ebda7544b45efbfd2150c7d7eeff601673168a4d4f2d5144bc7260", 0xe9}, {&(0x7f0000004540)="852da96504f3c016ed4832e5a3fb00ca9cc07b68eef9a35f97ee829db91e450224ad271bf20b5c537d3ac99460030b9e6659d7184d29c21401f5a50c90842e471de7ac66a3654b0f099e932da312568f7488deb4bf3506f166672b1d07454f9658dfa0e0cc7f6b3e66efabbdf203d58c1a1d9c5b2724d7634968fa54bfa27aa89acd41da26593bafb6ab1e78788598f149e60212ac92639e4bb2ae0f", 0x9c}, {&(0x7f0000004600)="d11cd02468", 0x5}, {&(0x7f0000004640)="5609b3d6e2e08da7cf90d592a2b18cfb1e928c063d8e4f58d76d5d1240f7af949d193b90be05d1e25e4045dda14f1f3349a005a94431fdc03db8f7", 0x3b}, {&(0x7f0000004680)="642a6149033a744c6549001c26629309b44140a88880a76aab6611c84640bb7bb3eec8337dd2d9604474460a9dc38c027619fc7e497c7140c3f9ee56e40649b05c111473084d08272b0717f7b5b14c765f8673c6429cda36681646014e2f14a6efe294de4158a63e2caa3f54a10438c57bcfc19b5e39b36596b3a7747a38d6b382fe8013d66048eb3ab30bcdc2c8084a9811fd66f6700e330534344867da01842ca5a178a58049d5d7b35aad17fa299fc80157911b6c2206f0bda4791939d55d868ba447", 0xc4}], 0x5, &(0x7f0000004800)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x1018, 0x117, 0x2, 0x1000, "19b4b2deb9656c8622575367aa6d8e74bfbd1500ede14f0cfd88cc57e7ab04fe0e64995d873450cd5ac0a7ba392f73a0bea84eb2c0cb7718e75b5eda8478fa579f7ed31dd90130219edd2f669e37b410e95d161f2f7cbc4047349ed00691f94756c2b54eb534fe7a2b7cdfacbf5e14b091071b0d6d32a6797d03800aa797aebe013a48c6dcb94bb52f6ea6978be28f27912abd8271e89264b12567775d7564b962f61d34d99ab4b869ebc8306dfd06092b8691bd09ce43dcaf66604f67efe227d056e2966e96731967303cd8b9f4ddbb13a7eb8f372f8ad1123ea39b8d1f7f282b4741a6971eb210cd031fd0425a7d9e8eebd80bf525480f345c80322c57cef90b6378f20c72ba92d39ecd0a6ba7c2542a85f318ce64235e8af7e36d8446c9b59896205f69e8350eaf7830672529862b5849135009a5adc853f3b2f0a03b411f3321469a656fdbf75aec2d7baaa9e071b2dbd4ddd1b0e411ae45adc03b31da659de47ba8ac35b94a8f9f0b0c2d18d1f1f6ea60ce8a46f3044c0ddb1ff19c0064d0c551bb121677d8773e4138012dd473232c9b91ca162e981b796fc2bded7698dcd26a660af190fc0f173630be9e30df6c51be51b1ab7314fddd31d3ce308a087f45821006864084a0a954b7336e399384e16a569ebc9e9b456e48348d6b41541b991ab2d1d40ac13a2884a5e9bc3426180ddb1fe8efc5f13d77437372469243195ead74692fd8aea6e704f4ac652d817b0ae38cc96cbba5cd87aa9acc34af0dec3b825a0f3e735664bf2c2cd45f484ee13d389904e9310ae562d2de7f205225f459a1a56b75c7b3b911972b0ada119ea6bfc68d37f0fc2a2e0c79345d3254fa2664ba8e433d36066801ad572ecaa59a22b2e5698afb42b7d35cf7f3b83216e0568f47e703da144ec5f4c7144f653dbe0c1f771286892f5e34d619c5b0fc8474f1f7497593fa37cd754bdf0dfa71fe5ff6f2f19ae2c731d730aee83cc1b8e586a2219f7485b0269f91dc8af032e3e11b109a52ef42ad00be8720b3fb4ee22d3acdcca84710ea72ce09eb06d3171d92d27ed91c8c9a6439bce6a1a0e21a4e75971c3541b5b99da82fdc05a8b071784fbdcaaa1bb642ad0c881406376ce38f8cfdd75ea052223d8623d5095f638faaf0c3b4d7cbba8a99108594075ab94b5488739523e4cfb8b7fafe0e05331438fdbee011cc6497cab485fc103943c382d8d41d021fb1d200f182d0c8fc16e5dc20867e7f197d88f3669cc1fe4c6e329ef87f3d3143124e51bf09f12f04c41c1c3e5d6e296ae0508cb0a3674177e5684f918571e053b9dc816181894a6151c46e916d3750c6d51a25780be613230b1b3fd5d79b44729b9dd09c11c1763cbb165493a9db7102f029ba79b472ac6cfc7c8d3247b1e162556506b98678fdc958b52923555067695e725e3e828d4878aec3c18db66ea4e93f267d2a6048d31dd25e804a2de2e8da87f2602db2a50c0ed976e0fb81cf034dba223d8331ac3169be6bda1d2311df42b43f0fc1d8cb911e3eedced0fe0b5ccf8a9c8e945b4aae19ad4476807aa0817042cdbf7da837765178a55bca40d73fbe41cec7a3632be3142df028b05a5027e6ab7b3fbb964f577297e3198b2d73ba01738cc766bd00802a784291e746617b69dd173783caef5401e2433c6e6452c8cb0f4cc654645c78d9a3f04361302c30a7e0f0cd7e8baf95c396aef6c28b939b0a5418585c7e74e7c07a3ae6e46ff94e29db25981353e51e6d2f73486b73ff6bb9e9f404cec77a6774804be2cbf154d15874dcef3517ba4e168e09b1ae974648b0def26c950cf8d92786a935c0ecac61968421eeaf0191f7bc59941665d1d003884f0ca287cc448197fe0b5ac1179269553cfdd03d41b9cde5650c4d0758f1dd8789c5298190e1b797f2550a60a27de4785b2400c75041ec4efcc792ec1796d5c226fb6a67ac853d1f02e91dab880b825a75847bd42b77321b811180b5ad31aec838cdb8c5df6c59b7d6268e0a4ee14a85bbfe26d7eb5108dbe4c397195adb845f3995ce3282d9f487161b41fa4f761f2d62da014b507495bc9d26c8177e324be279e0e14f4e54acaca872ce7d400bad1992477ff41d7dc055f219326522a03d60782de5a10482e9e3894cb2a6da9d6a4b0a76a4a73608f24cddd0dc673cd2a78b35f63e70be621c9fdafc9a1fe5e70c1dcb036a787c1f1be543c57f0d5c311ffc3354bdff7178ceb2d2ae27c04143d3f4b10a8557fa78b07e148c3da173f8f4bfbb42b656b53e82259a8e30a358bf5a3cf9e704ab0fd85a665bb3e2c1cf4767249fd94f6110245ebead7c12c0ceff715cb586281c0db9931696e3e59f7a8b583c7cb207ad815de1f0865b2ea4c68d736307478f9091708a97a4a4f78c16abb1d4224a9281219a6ab51f5a4411badc4cc62cf8137769f92b6c2c72e581d18e3460fb2a7d64763489c3adc5d62267a618f65db89c789fa6c74390c2fefbf0fb0c21a659ad3cf49ea83898840078c79d0a1a77b0b0b0915884cc27c6ba16f9a3687998d0cb0903aee1963c20310c946c79877b0274ca205326b24dd1bf26b381f160362360e9ec63df961f29aaee07aa5afa22cc6711e490e6fd261b1a9ac0acfcbde8b6d94dd261ed31c9f6572ef54551699baa77ce110455112e4c3dc7e9a070392e667d10a4e800e10f9174cf6e30ddeb458d8951f207e1b852c3e2e490d287c169570ef4618f519221f0a5fc31e4e1943a4cf049674e4246fdd4638695a414fd2831c91f7248087cecae05990afa240df92211e3c30de8667db1475ba88f9e72c29760bffda6182d564a1d6e8c53e9aae477fea9dca9500ad42e7b8454166e51c4157e7be4f95d9d6a1ecd4cdd3b80c81fcc31998efd798dfc2f9e5b534cfc43af46e2328985df9be768c00a8c18d0cb53991c1c7d996b7ebc0537b03fdf4ef2685d52c31ecc00cf241c4e0032619a84a8b5187d66adb9d1b0528fcc8f440bd227086e6c93ce73704ad8c2f5382af807348d5d0f55c5adca01a55d93009cd0875fda1b36312da32f0ec96c22aef6bd3c3d98def92fc0ce44a78e9fd0008d2d1040038dfbcac1bab3667a84232764c639cbefaf086d110d651e5f9218f526a39dd7f0a3a688ea73dcd52d78bb46f0e10de52cdcd8f7cdae6430cf6fd4e0711ec4e74984220822cc95e38f71155b1aec53f9eab46e7990bdaf103be998fae590655dec257f07bd99d76602d24211c879769953a60fec6e91014261abe3f88e10a212b24e5233f9b298e740415837a013293cc2be4c2bb5f10c0dccea9299c178ccf6d1fd9351075c184492289f5657d6acab05d5f269e610909222173efb3e8240de55f20d1c0fe55255b1ca5669995e8383d7b9ffc5189a9b3604efbb98a1a490d7ff9661be375be9ea33b2f10079244c8ad4a43b8a58dff101cdf01fa4a057f3609d82cb5d0f56ee6d517da67b5b8750dda814728bb0bee1cf811544d02421afefa43c82695a43d75b768d875d478f3f484fbfb5aaddfba22913f4625bb6290f74633d81c1f8aebef6a49edd05be5d6452709a772ae9db1f59c67402e7e3dc56ab07df15feca23dfa0b6381b7cdc7acab24d368ccd490497abc98967e625c6a2a762731858f5ea7db047fab5de1d9c0ac5249511601c602f492e9ceae7d612d5c09c82bbf344e248562a3b77e5826b5d43f47bd93ca1123047c0167cb5c4a99ac12981b9ebc7847aaf5f6ff5797b07a20d0fef810a959ce181f30d1ea366dd0ec9650a4284a5b38103f70f7cd3686cf729f41b14fa29b617ef22e3f1d14f6c8da9dc97c3088a27040d4fce22803f25ffa9781be97816e00740fd1d0dea862daf584b14a840ff2108b991764d6fc82b553c4db492471625457cb90a8e242eceef1a6386f1e24d0d096c9536a35818f266a8535c6c418f3c554d95759e6b32ce9d67e06c6538e49d4299dee99c66ae1ca7455b0f4c260b2f413e32ce2e41207951bb56f4be774126dac42484cf58c733abcf843a6ae607591b4d201cdb27fde1835349469e342cb244bfbb44f704d4290cc0740bfc4bb0f4f38340c2355c76e8c94969748297d6787833190228452f3b42ee68396d287cc8c6db5a4368848a1e19545b61227abc2d8421c34b44beb69019d187b136f876b1c04eed89a83d4b3562c927876c1c5742fbaa17c23949a7fb18927fcf01a9181bba27258dc961038003559b8537f85e6836b80b5487a6490ab187114adac0db9a580da94c0eee13580355d2ae72caa20010782fab0a08497a59c4be9f1049c23f0ed75db5da44b00c52032a1eba7c987eaaa6ca3bf0f9f282ac457c52f716f7c56cc3ae22b9c0875d0c4c82dd78a76ae28bb8ccba2c75d160c2a17b0b9e9b72e44fedb986df8681d7a70e0c05fc6394c550bfebfe2199846134f3eec170870f4b0b0a34bd2cdae02ad5139f8909c66e9094a9bc5b3f12d6419a167ff641cb9b6d2442bd81e94d0bd1e2a56180916313fa790ed61021852094e43dea6dc13edaec77b3bead331bd18b50b65442a57bdabe08eb8a656f2ba9a978574400c40e2e8889bcc09478fef242bd421339bac82d92ca1a961a074568a58d12441c8fcc953fea2ac529f7ed8458d3169154ce7f745d9d4f1d251f775b0a82f771e7a99b80baef335c207c5a74d624355b81a79b71c74c5da580361969afb5cb1e1497d05c9fbea8c4d7267727a1dbf75a2493f737007ffd39fb9182ecdd9a590015258fcdaf5f44c35bde5a44c07a25286ceeeca97c51e5235ddef879e880fb6b79478ca0ea12e5358a69546822c9145f53f9552451e4eaf3d023daf788703023ecb015f6b0cec678ea9d608b28fcf10b3e6d83f2763248c68dd9b081b7a166dfcc6798bc2e479a2ab2371e67a3e72d8488a1edf11eac32f7b5b20845dd4bc5c1508e556fce4248aebfc1e51372f3e2cbc6979a86a7bca3bee8d9a7393531257b81623791f46e245dfe9e916482fae97367974cfa1961ae760ae8ad7e9d2a5bc8c84c453135ab8bd8c6626bacbed4a97fde0300de7c6406f5966924558d68a4045d2ac0b62bee71eb6fe2399a6c045050560cf5399358c9fc4b7e6f81d828ed4134e56f91900d294a48eaa4dbef326c0872dfc78fdd288eefcd6327d49d8538c538b5b12bb753af9afea28e04cbecab1925f5e00a4a91dd2125845cd7146845675769f01a9115930cad91ab3804d4f30e9c941af881699b80a5606ec04eca78fca9dae0684263eccea6145b8829c5ad6cdc2ffb5e0dee33984c4cbc7f9b97d5eff410b139fd29e0f0249092321af1eb4fcb17fde60478fea3eed29827ae8973d80d923308aae97924a736e5791cda92a60de475310b0244347e84bf2548c0e45635a6723872cd1f5baa25ba39ce547e9e6d432703392135f147f10c15251518aa43ec31886838249a6d955c6713cf7cddbf2658538045848cf3b44adf277e496de022a23524be1ef3f33902c855efba4210b35acc2fdf2b4e69bf45af5de7a353b10e60817f1085af6c28d8fdf9d3e1ba6dd326787815f92fd0180b3eb9970bbfb1f6527fc9f255b4479cacfeb20cc26afa4ea1f09a8e4e8f9e307d89d25dd508332b61ca57c52cf65fffa42f3a73f2e4eb96835cb9278749ad9f8d4408243127b368cfe570f323bd02a1b5de49b0f729e84935021ee71cb114fe871ba34b14d700e00dadb5cbf1e8404e5ec0239f94b1459184aa3bf2b007fe58b89c1a82ba5e0da6a1a379a52df66c9cec620d76446df7239790e4a5c5d50db26b97849416cf2cc3b3f64581d0f5b22d047f"}], 0x1030, 0x75ff9a420530bb78}, {0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000005840)="0d7415ce9198384bfd3ff6b84cc1a5a2832b8519cdd911f2b0042c1dbb97d23428dca1b7a0f2b0b8828e55e58f77bbb8f1b1d56c048406668157b2ecdce585061b19917d65669dd83ee42d895266ea0168110ab278430ae761cba730e6d892efa033b71d8526a04df75069e031fec3d89779430b6dbb3f6647e7fbbb3ff3e6b5fa5987d441b473392a9a9cc23bb069c185eb3ba35930b33e571d93731a764e1449425e78ca468f174f93d964c617b1f3ca42bf378bef9659b06c1bd88f17504c9649af0eac8a9c9c3e8b26f9c60d27c1571b5ae1e162c8ef968e0904ae91ac3e7942281c87f9e365397da85c94b9c595e965a0e585896f", 0xf7}, {&(0x7f0000005940)="2aa9b76e4324bec74a54b2087be0ee7175e61dc3be309f44598eeb6c2bdf58e1b427c34e06d92108eaab618dbe67275676658f89b62dde4e96da86f4714f26c6b6591eb1adacffe2bdea91199cb0a96d883a55150a2073b075f89135e27a97653d800a97ea76f41d5ce9daf78c78c8846ddc54a4f686e3da36807374e1e25eabaa3610112a124256bff369545f931756477c3a50789522223285cd14952ea6fec0143a50a998929df77a5df03b72ef4e6f133c0dcc025ce5ee5c2bd609f9129e34c9ff55664092fbbf4909e9c59e8ddccee530554347ab96edde491f7c8087d40f82b3ee9570", 0xe6}, {&(0x7f0000005a40)="9ee90593efa3ff5eef75a1b56a401bf7076638f10c4d83b2ab7a7bd676a9e7ecbb88d19d47e4c2f3d75e83602c650c260b78529d2d257ff61f211074c52ff7fcf5a96d268aecfe8358a1697bfc46bef44db8d7d22b5f4aee0749344e8b3b91b92e5f1a0a407ce979ac9e9f81a35f2de63df399fa7cf287e0627f600c1894897f0790c980e0ba8e1d8942af3a6ea27a3629c3ebe93d7cf4a1297326d81e628491d672232d6471b490", 0xa8}], 0x3, &(0x7f0000005b40)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @iv={0x58, 0x117, 0x2, 0x43, "2462c05693afb3a097eb6aecd413d388127a255212aa9c506fbd67d89d3e967e55eccffc6d3613037383cc24004a7c7e66c8c32efdbad5062c04484f0c8588970ed816"}, @iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "964a321caf1b5caa9a01cf9d44eb0c37727966c3b6feac9f94c14df54f409f26e779c32b"}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x150, 0x20000016}, {0x0, 0x0, &(0x7f0000006dc0)=[{&(0x7f0000005cc0)="ea4da7f53f6eda7c469b3c0ba807a782c10fca37f0dc763fb7cffeeb26a693311be2c43f6ba98299456e79e8ed686dfd25", 0x31}, {&(0x7f0000005d00)="5dee176a73bba9d9c16fb6e1d848895b778c2597b781521094f35931b22a54b76df95f17cbe373532a270daeeb5b78c9fe810354dd1420644e720498396de1ca4425ab31cccee58439505492aa659c472f06852a674adfa021ac73d2fae255e0476c9376e864ae82abf5b28e77f2d5705479c86f8164db6663cd05d25e50ac2c60d3b7384328ebffa5db38d19bdcb541b95424f7f20b1033397c4aae8632c612e49bfcc09857ef62ded4f0", 0xab}, {&(0x7f0000005dc0)="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", 0x1000}], 0x3, &(0x7f0000006e00)=[@assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0xa827e8d69f280ef5}, @iv={0x40, 0x117, 0x2, 0x2b, "d0a7a458188005c253db616631b87c465dfe6c86654cc71fb0b13037dfe6ef7959a962bc70cb5ffb5ad65f"}], 0x1088, 0x40000000}, {0x0, 0x0, &(0x7f0000007ec0), 0x0, &(0x7f0000007f00)=[@op={0x18, 0x117, 0x3, 0x3}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x1000}, @op={0x18, 0x117, 0x3, 0x76ec4d6cb4a33260}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x110, 0x117, 0x2, 0xf9, "39bce9474c939c026aa30d53de7315e574cbf6d351d9cb0fdb2a69d3ed5781915988a01673a8183dfbd4bd431dd8772b489819eafdafb87c5d3be19af243b424888cdf927dae87be46f0a99eb21225323c4bd9d2f3ae43f50420c00b517133debd63fdee0bc9c6d0c385bc1b8e9cdd0dd213f61de8f994b60ad3bc10196c7fe00faf6db7341775bea7d8a507ff453d34487847e2986af41433d0d0296bc418bc3cdaa4969f9fce94c0860ecc9739ee8b5fce8e3820b6593d1d2d2bdc560a249d25b42ba2e3defafb798072a0d0eb0fc57716717422526309be02aa085b75cbfcf2d017365aa447faee70ddd57900632654db41d461f2b8d3f3"}, @iv={0xa0, 0x117, 0x2, 0x87, "a3e2a79fb0ba86dece0dff1d3a8f57999297d970c985bc7a093b8c8a61a5cdbac3bfaf523a5b5c9f2996a3637b26a6a6a31472440bb790a6fdd3049cff8c96ea0bf55cfd3a76b24c8def7e03b8b417be83bbf84b8a528cb5b54c4b883ec53850125f04ad9bb46366e1749772884d93425a6d1c7426b75f11569557ea08e064d3e8b5306d010c40"}], 0x228, 0x810}], 0x8, 0x60008000) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000008300)) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000008700)='/dev/vga_arbiter\x00', 0x20001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000008740)={{0x5, 0x400}, {0x225, 0x6}, 0x2, 0x1}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000008800)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000088c0)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x100000100}, 0xc, &(0x7f0000008880)={&(0x7f0000008840)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48005}, 0x4011) getsockname(r0, &(0x7f0000008900)=@nfc_llcp, &(0x7f0000008980)=0x80) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000089c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) dup(r10) [ 338.946767][ T2237] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 22:21:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0xffffff80}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x800000003, 0x0, 0x4000}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write(r0, &(0x7f0000000040)="240000001a005f0214f9f40700090400110000001fffffff000200000800040003000000", 0x24) 22:21:45 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x8400, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000200)=0x8) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000024c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x2) 22:21:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x20000000000, {0x0, 0x0, 0x0, r2, 0x1084, 0x14018}, [@IFLA_CARRIER={0x8}]}, 0x28}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:21:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x10000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 339.126513][ T2360] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 22:21:46 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400200, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000040)) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x0, &(0x7f00000001c0)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00070000c7fe9301251c96ed37145bcc0000f609"], 0x48}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x404e, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000240)={0x1, 0x1c9, 0x1000, 0x153ec0000000}) 22:21:46 executing program 0: gettid() r0 = socket$netlink(0x10, 0x3, 0x3) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f00000005c0)=""/77, 0x4d}], 0x2, &(0x7f0000000680)=""/86, 0x56}, 0xfffffffffffffffa}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000880)=""/10, 0xa}, {&(0x7f00000008c0)=""/7, 0x7}], 0x4, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x4}], 0x2, 0x2, &(0x7f0000001b80)={r1, r2+10000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$radio(0x0, 0x1, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) r6 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x547302, 0x10) r7 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000290000003d2000000000000018100000ec60e8c52ae67be242e5e2bc9a1864033ea9eea21418823aa00a5caadf624a80f7ba4c6207550dc7ecf8be782be35d42090b8e76b5c82ef74610dba26303f25d60031946079ed9e0aa00b5647b289d501a0253e4e9bf11301c41893061a4fc74716238333514525d08135d6aec3c87f14845c34c1fb069afc557bdb7079d7d4b10cfd4fa816392c8c0c38d74c55aa2829d399583495b5b42", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x5e, &(0x7f0000000240)=""/94, 0x0, 0x1, [], 0x0, 0x0, r6, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa}, 0x10}, 0xaa7b2845bb3e5534) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000400)={0x55, 0xff, 0x1f, "da785c5de54db70caee50f8112f33998ae3e14519efeace3f8b554f58b116fe2d93847fd13080f4ba3ac2f9bb87c6ad68a09fe62ac46f7e5491a916fef0dc86b3874b35e06c5f2ccdf57b7397eba0bb70c2d5f46af"}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00009330b3e7d8ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4ded6c8c7f26574fa7fadaa6ebe"], 0x50, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec000000000000"], 0x18}}], 0x1, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000200)) 22:21:46 executing program 4: r0 = socket$kcm(0xa, 0x6, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000040)=""/220) gettid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="71e602001fde54fe46b904832c8fa873d411962ff4c9801c2841fc093a52a7d1", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)="6c1a2b79be0eaee5269268ccb75a9081", 0xfffffed6}], 0x1, 0x0, 0x0, 0x20000010}, 0x0) recvmmsg(r4, &(0x7f0000004700)=[{{0x0, 0xfffffffffffffe6f, &(0x7f0000001640)=[{&(0x7f0000000200)=""/149, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x1, 0x0) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x3, 0x0, 0x0) 22:21:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x40030000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/52, 0x34, 0x12000, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e26, @local}}, 0x24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rt_sigaction(0x3e, &(0x7f0000000280)={&(0x7f0000000100)="c4027918b867a846a9440f0f4a009ac4e1435eb7ce3300000fa7c066400ff7cdc443815e366e44e60066470f38385cc7760fdea4217fc90000f326470f18adab000000", {0x6}, 0x9, &(0x7f0000000180)="43dc0c81c4a17c773e66470f38cf29c461782f832a000000c481f9e3e34383aaea000000fef2430f1077a7f3480faee9c40231b781000000000f2da000000000"}, 0x0, 0x8, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x6d, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x90) 22:21:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000002c0)=0x10000, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) setsockopt$sock_attach_bpf(r1, 0x10e, 0xc, &(0x7f0000000080), 0x4) rt_sigtimedwait(&(0x7f0000000040)={0x3}, &(0x7f00000000c0), &(0x7f0000000140)={0x0, 0x1c9c380}, 0x8) r4 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) r5 = syz_open_dev$admmidi(0x0, 0x0, 0x52801) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000240)=0x400000000000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000300)={0x0, 0x2, 0x8, 0x100000001, 0x6}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000200)={0x1, {0x77359400}, 0x800, 0x3}) r6 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000240), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r6, &(0x7f00000003c0)="e5574c64f73d1272ee1e33a287fbda7c7d0a0845e35d4306e7e406843d701b94b35736951ea6d8863af34dcd0e3508a6323ce36f619164057006b9199fa44be7e192293bb136e1282161d36762d55e826e4f562ebb43b654c6031f36b770f44628239807b7dd8fded6ca6778428bd6d51bcb954102ae0950cb3c2a3d6555643ef7f6b2c5dd89a080f893646e490bc37a6b1bf5bebde575999605568dc76b07e581e49e23f449d9e94d8ae3caf5bc45c325f3c852a318e7922ffa7a2018488bd43e0707ef3499ca6a", &(0x7f00000004c0)=""/103}, 0x20) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000340)) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a000200030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 22:21:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x100000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 339.897503][ T2503] net_ratelimit: 4 callbacks suppressed [ 339.897510][ T2503] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 22:21:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x200000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x40030000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 340.001072][ T2490] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 22:21:46 executing program 0: gettid() r0 = socket$netlink(0x10, 0x3, 0x3) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f00000005c0)=""/77, 0x4d}], 0x2, &(0x7f0000000680)=""/86, 0x56}, 0xfffffffffffffffa}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000880)=""/10, 0xa}, {&(0x7f00000008c0)=""/7, 0x7}], 0x4, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x4}], 0x2, 0x2, &(0x7f0000001b80)={r1, r2+10000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$radio(0x0, 0x1, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) r6 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x547302, 0x10) r7 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000290000003d2000000000000018100000ec60e8c52ae67be242e5e2bc9a1864033ea9eea21418823aa00a5caadf624a80f7ba4c6207550dc7ecf8be782be35d42090b8e76b5c82ef74610dba26303f25d60031946079ed9e0aa00b5647b289d501a0253e4e9bf11301c41893061a4fc74716238333514525d08135d6aec3c87f14845c34c1fb069afc557bdb7079d7d4b10cfd4fa816392c8c0c38d74c55aa2829d399583495b5b42", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x5e, &(0x7f0000000240)=""/94, 0x0, 0x1, [], 0x0, 0x0, r6, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa}, 0x10}, 0xaa7b2845bb3e5534) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000400)={0x55, 0xff, 0x1f, "da785c5de54db70caee50f8112f33998ae3e14519efeace3f8b554f58b116fe2d93847fd13080f4ba3ac2f9bb87c6ad68a09fe62ac46f7e5491a916fef0dc86b3874b35e06c5f2ccdf57b7397eba0bb70c2d5f46af"}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00009330b3e7d8ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4ded6c8c7f26574fa7fadaa6ebe"], 0x50, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec000000000000"], 0x18}}], 0x1, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000200)) 22:21:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x25d) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x21) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20048800) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000340)={{0x0, 0x4, 0x9, 0x0, '\x00', 0x2}, 0x5, 0x10, 0xfb, r5, 0x1, 0x7, 'syz0\x00', &(0x7f00000001c0)=['ppp1\x00'], 0x5, [], [0xffff, 0x0, 0xb35]}) bind$can_raw(r4, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) 22:21:47 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/78, 0x4e) exit(0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000000c0)) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x20000000, 0x1000, 0x9, 0x0, 0x2, 0x7, 0xff, 0x40, 0x7}, 0x10) 22:21:47 executing program 4: semget$private(0x0, 0x1, 0x200) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) lstat(0x0, &(0x7f0000002d40)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 22:21:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x400000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:47 executing program 0: gettid() r0 = socket$netlink(0x10, 0x3, 0x3) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f00000005c0)=""/77, 0x4d}], 0x2, &(0x7f0000000680)=""/86, 0x56}, 0xfffffffffffffffa}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000880)=""/10, 0xa}, {&(0x7f00000008c0)=""/7, 0x7}], 0x4, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x4}], 0x2, 0x2, &(0x7f0000001b80)={r1, r2+10000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$radio(0x0, 0x1, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) r6 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x547302, 0x10) r7 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000290000003d2000000000000018100000ec60e8c52ae67be242e5e2bc9a1864033ea9eea21418823aa00a5caadf624a80f7ba4c6207550dc7ecf8be782be35d42090b8e76b5c82ef74610dba26303f25d60031946079ed9e0aa00b5647b289d501a0253e4e9bf11301c41893061a4fc74716238333514525d08135d6aec3c87f14845c34c1fb069afc557bdb7079d7d4b10cfd4fa816392c8c0c38d74c55aa2829d399583495b5b42", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x5e, &(0x7f0000000240)=""/94, 0x0, 0x1, [], 0x0, 0x0, r6, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa}, 0x10}, 0xaa7b2845bb3e5534) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000400)={0x55, 0xff, 0x1f, "da785c5de54db70caee50f8112f33998ae3e14519efeace3f8b554f58b116fe2d93847fd13080f4ba3ac2f9bb87c6ad68a09fe62ac46f7e5491a916fef0dc86b3874b35e06c5f2ccdf57b7397eba0bb70c2d5f46af"}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00009330b3e7d8ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4ded6c8c7f26574fa7fadaa6ebe"], 0x50, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec000000000000"], 0x18}}], 0x1, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000200)) 22:21:47 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x2000000000, 0x0) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20, 0xfffffffffffffff5, 0x6, {0x0, 0x16}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0x1f, 0x100, &(0x7f0000000080), 0x1c) shutdown(r4, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendmmsg(r3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) sendto$inet6(r3, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0x535e2f3003f56a5b) 22:21:47 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000003c0)={0x7dd66ae8, 0x5, 0xfffffffffffffff8, 0x100000001, &(0x7f0000000280)=[{}, {}, {}, {}, {}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x0, 0x5}, {0x3, 0x2}, {0x0, 0x7f}]}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x4, 0x4ca9c0cd, 0x9, 0xfffffffffffffe01, 0x10, 0x8, 0x8722, 0xb8, 0x208, 0x54}) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x80000000, 0x2, 0x13f, 0x9, 0x1000, 0x3}) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0x81, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 22:21:47 executing program 5: unshare(0x8000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = dup2(r0, r0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000000)={0x2, {0xfff, 0x7fffffff, 0x4, 0x6}, {0x3f, 0x7, 0x2, 0xfffffffffffffff7}, {0x100000001, 0x6}}) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) 22:21:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x4000000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 340.702687][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:21:47 executing program 0: gettid() r0 = socket$netlink(0x10, 0x3, 0x3) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f00000005c0)=""/77, 0x4d}], 0x2, &(0x7f0000000680)=""/86, 0x56}, 0xfffffffffffffffa}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000880)=""/10, 0xa}, {&(0x7f00000008c0)=""/7, 0x7}], 0x4, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x4}], 0x2, 0x2, &(0x7f0000001b80)={r1, r2+10000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$radio(0x0, 0x1, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) r6 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x547302, 0x10) r7 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000290000003d2000000000000018100000ec60e8c52ae67be242e5e2bc9a1864033ea9eea21418823aa00a5caadf624a80f7ba4c6207550dc7ecf8be782be35d42090b8e76b5c82ef74610dba26303f25d60031946079ed9e0aa00b5647b289d501a0253e4e9bf11301c41893061a4fc74716238333514525d08135d6aec3c87f14845c34c1fb069afc557bdb7079d7d4b10cfd4fa816392c8c0c38d74c55aa2829d399583495b5b42", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x5e, &(0x7f0000000240)=""/94, 0x0, 0x1, [], 0x0, 0x0, r6, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa}, 0x10}, 0xaa7b2845bb3e5534) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000400)={0x55, 0xff, 0x1f, "da785c5de54db70caee50f8112f33998ae3e14519efeace3f8b554f58b116fe2d93847fd13080f4ba3ac2f9bb87c6ad68a09fe62ac46f7e5491a916fef0dc86b3874b35e06c5f2ccdf57b7397eba0bb70c2d5f46af"}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00009330b3e7d8ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4ded6c8c7f26574fa7fadaa6ebe"], 0x50, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec000000000000"], 0x18}}], 0x1, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000200)) 22:21:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000280)='GPL\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='tcindex\x00'], 0x800) 22:21:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x8000000000000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:47 executing program 4: semget$private(0x0, 0x1, 0x200) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) lstat(0x0, &(0x7f0000002d40)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 22:21:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000280)='GPL\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='tcindex\x00'], 0x800) 22:21:48 executing program 0: semget$private(0x0, 0x1, 0x200) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) lstat(0x0, &(0x7f0000002d40)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 22:21:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x80ffffff00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x400) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000001, @loopback, 0x401}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 22:21:48 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x2000000000, 0x0) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20, 0xfffffffffffffff5, 0x6, {0x0, 0x16}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0x1f, 0x100, &(0x7f0000000080), 0x1c) shutdown(r4, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendmmsg(r3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) sendto$inet6(r3, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0x535e2f3003f56a5b) 22:21:48 executing program 2: gettid() r0 = getpid() getpriority(0xfffffffffffffffe, r0) ptrace$setregset(0x4205, r0, 0x201, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') exit(0x6) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') r1 = getpid() getpriority(0xfffffffffffffffe, r1) ptrace$setregset(0x4205, r1, 0x201, 0x0) getpriority(0x6, r1) 22:21:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000280)='GPL\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='tcindex\x00'], 0x800) 22:21:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0xffffff7f00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 341.662567][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:21:48 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x2000000000, 0x0) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20, 0xfffffffffffffff5, 0x6, {0x0, 0x16}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0x1f, 0x100, &(0x7f0000000080), 0x1c) shutdown(r4, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendmmsg(r3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) sendto$inet6(r3, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0x535e2f3003f56a5b) 22:21:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000280)='GPL\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='tcindex\x00'], 0x800) 22:21:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0xffffffff00000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) 22:21:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000940)={0x5, 0xffffffff, 0x8000, 0x8, 0x41, 0x1ff, 0x8e, 0x5}, &(0x7f00000009c0)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000ac0)={0x0, 0x2}, &(0x7f0000000b00)=0x8) r1 = socket$inet_sctp(0x2, 0x37fbaca844bcd28a, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r0, 0xfffffffffffffffe}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000a40)='\x80Jmf\x1d\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000200)=0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x5010, 0x0) mount(&(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000340)={r2, 0x2, 0x1, 0x6, 0xfff, 0x7, 0x8, 0x2, {r2, @in6={{0xa, 0x4e24, 0x1, @empty, 0x2}}, 0xffffffff, 0xfffffffffffffffc, 0x3, 0x5, 0x6}}, &(0x7f0000000400)=0xb0) execveat(r3, &(0x7f0000000440)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='wlan0(vboxnet1ppp0^*vmnet0,ppp1!3.wlan1}]{em1#\x00', &(0x7f0000000500)='!cgroup.\x00'], &(0x7f0000000900)=[&(0x7f00000005c0)='ramfs\x00', &(0x7f0000000780)='ramfs\x00', &(0x7f00000007c0)='ramfs\x00', &(0x7f0000000800)='veth0\x00', &(0x7f0000000840)='%&},[bdev\x00'], 0x100) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) lstat(&(0x7f0000000a00)='./file1\x00', 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000580), 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000600)={{0x2, 0x4e23, @multicast1}, {0x0, @remote}, 0x10, {0x2, 0x4e20}, 'veth0\x00'}) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000980)={0x3}) r5 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000240), 0x0) mq_timedsend(r5, &(0x7f0000000b40)="1f1b1f577fcdf779da3301cda5e81ba24ebfb4a2957b3c8ae0d048b70fed0908f3ae7793758fd22060914a9557e2a0df8541fc67261a0f4ecb9033cd244feda73a8d7face7f60bea88e89361fbb707215e1d97d6f99945d48f05ecc5c5b11bd832c61532e3a9a5371b3b95104d928720e52c0672e8067f", 0x77, 0xff, &(0x7f00000001c0)={0x0, 0x989680}) 22:21:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x7, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 341.931644][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:21:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) [ 342.067858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 342.073665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 342.079475][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 342.085221][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:21:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)=@polexpire={0xcc, 0x1b, 0x109, 0x0, 0x0, {{{@in=@broadcast, @in=@loopback}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4a6) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000080)) 22:21:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x28, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:49 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f0000000040)='.', &(0x7f0000000000)='./file0\x00') 22:21:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x82100) 22:21:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) 22:21:49 executing program 4: r0 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x100000}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r2 = socket$inet(0xa, 0x3, 0x87) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) sendto$inet(r2, &(0x7f0000000140)="be2476c97212d1c50a1a71fdecc2f4bd1844233f8f55e9e1676c46f885f3fae714ab55092ac5e91349d2e7b904ec014ac21f7d6430f415161d23d3b135ce72ff4a3a8c4a15311c194a7069a95797611d64d9805ac67b18cf049fbe2806ffab3f73b95d16bb429500", 0x68, 0x4044010, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0xffffff5a, &(0x7f0000000040), 0x2, 0x0, 0x0, 0x1}, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0x50b, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x40000000000081) 22:21:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) 22:21:49 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getown(r0, 0x9) fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000004880)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f00000001c0)=""/148, 0x20000254) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x647f, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1000000000000000, 0x0, 0x0, 0x3, 0x2, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x9, 0xffffffffffffffff, 0x1) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) open(0x0, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000400)=""/101) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x1, 0x400) ioctl(r4, 0x80000000, &(0x7f0000000680)="e6c3230d4353d1fdb4759156fb7386413f9bb4a34e84cf5340") getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000000)={0x2, 0x9, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg(r6, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000000c0)}}, {{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000006c0)="3ee48a999034bfaed88eb801a703accf9b02b64752205371664fd9a89686c4a151780b97e48c41266295dcc8ee3843dc00f60652595624dd22513505b1581d77b6bc4f704d9278c960e94366d49f3a69f05417150a53b2afc148d32cc591326fea8b7e6e4921e0c6b561ba486427dda9957cdd582642b8680ba79522f677d117df37c9d3caba63b2d5e9226c7a37a91f14712445e817595194304a165a12b0c6459ba749c8eda6c12c8e5fcd01155ce62bf8b9708a0f46d9263fd6c429542032c354a46809", 0xc5}, {&(0x7f0000000580)="c9986b927c8b19f96d966fb3eefbe9cbe957949409e837b57bca81011085311e8952b06f3f30000cf31127eaa438fc9b4930719519b41f641da273fc0e9e37d42baa973476871f3fa8d678d8cfc19c731810a759e066d3a9e189074ae6e09ddf0979ef957fd021e01084679711d138279bcdf2faad6d3f12d03ed4ef5434810a279e6bde5a2b79b7ac06fa4057f7e0ca3f96da8149649f78abffa4b57ed9", 0x9e}, {&(0x7f00000007c0)="1df50ff1806e13e55b54cde224585f478bd096dd8153fc4aff0eabd8bcfb46f43cd94c66ea87b5fa4958e58c29907a65e7ddec16f0989c0dcd94d0ef975d1f52697364fd1e35be09986da4fd3d7efcbc9f14a00c9cca0035afc70cb1ce2dd640877d71a799cd2a341692816601db6f23f976d247f6fcea01f90fc119e17b47887087f773f57429b3cd9f070a148d85747e3b15a410c2c84e791e6df9628921f73ce014686b698cdd612c2d32", 0xac}, {&(0x7f0000000880)="1847e2b8815043eabb59289d5136771c733d39c1fa67d17ea868100229753f59dd5a599fc76afdb85cf16e62c3c51b4a7c6b0d5f2c9fbf1563d71c0901f56da0a49e668c0113f0b89c37a08a7517a6b958f7978184f6333a7b6146f7d5d24bb05386c68c96b522c08bf0f33859234bbbf42453bece205d53f350526801fc991e982a418aa584613d72", 0x89}, {&(0x7f0000000940)="7804f3f064a94eb28b505a89f024e39e23a1461e68259638f62f8d1f4a8707b6c6dd04345d77e879c8e9455f7c1208ee4f6a37387ed6a973e878b0ad61fde95d3ccab3b1584666f009f115105b263ef8d873331078d386e20924bbbac55b1668f4b1d5b913d44b3c2a01f7eec108eaa87d3f3caf61cd010969899e2ce182ca36eafc85d72284d95e449b49b1812b0c16983b01617407d143aa311d4c48296a20875b94c9ab", 0xa5}, {&(0x7f0000000a00)="d0c777f0ca84dc139abf61657bed0127144b03ddb8d7d42ba739ca984b3cd3dd132152988e1410704b128abec9005178e8589f15c483ac2dd772b2542a421b455cb7963245f2880409914ae789e71e002b0d332e92c73fa79c8207c1bd03089cb51f3c0e446c8a119d59ce32873e2a97172ac9058995d961786ea5f33c5e3488b96442737b9e55e9db1e3c4cbf2d0dc5fb1be6905f8bbee0", 0x98}, {&(0x7f0000000ac0)="2c755823105e6f2eabf7b9e27587cc45199836327ce1a28d23ddf0f72e8f35938579ec3883003fe2c55332ff14a673ae9258287558d9f4012c9d89159c77aa167c36de3ea8a336b3d24273043037c66ba8d19956215440854baa90ec26f814828ad1fbff44381e5ad11ae731743515e00848e6a36da99390c66ae8f1d57523e158a25b016a927dd8e13ee4050712b4c3e3e02df4552d570c0ef1b6b261a6c32ffefc03c14be0b9d6477ed586d6a217cc90", 0xb1}, {&(0x7f0000000b80)="e2b05970f223b3554cca25dbc65397474b9feb239705afd0419d0922ac5f24900aafa6d7d846e4f700284412272a1fbfaf8d4b654467cf8caf34c41ff97a02eacb3ddb25cd636ed6ae0d27da317112ecdce6586fd9e0b2f3bfdd44694a56b7e2c895c0ada0f4b15f5a7a7abda9c2e6e8becc3b2b7e47c08f1bcfd653fbab10242eb38e5e2c4d5ae9c5f1aba80b0940a13d421f547d3fa5776506aee39453e052272154e314cf2bd140fbeb77c4ef378a5f126950e072e988c4992c24fa5d58de0869f4d91f2c315026260bcff4dd9423ce6ea18152ce55906f15b2d34225a3656af3", 0xe2}, {&(0x7f0000000c80)="63081af003988ce667ba8b39f077098e39fecc4a9ca724a306cd466b7cfd061f71e8f60d3136e1771e781cb3aa274a3a76ffc6ef0b2b8a57b454be5b96a3c9db6edada787a67a26de93301a42b023e65ec56544212b303dc277b97a8082d602ac814fc6322e6184a3b96484682d40e6ac0ec73e040570e6319901318e91a8701a11f599041e505274e5f5398e7d1cff10d7fc2fdb349ad44e7ed7e00e89641b5132122088974ca9059e098de93f502dacaa243c4e42ef76739", 0xb9}], 0x9, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESOCT=r6, @ANYBLOB="89b936d86f52441c37204cdabccb7bb151257866b6805fbcfd51dfb031eb2d967ce0e9fa2bb4491155cf3f6c32f252d65007dd3412a100"/68, @ANYRES16]], 0x2}}], 0x2, 0x0) 22:21:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:21:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x98, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:21:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) 22:21:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) [ 342.700440][ T3199] QAT: Invalid ioctl 22:21:50 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000001240)='.') r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in6}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) 22:21:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x82100) 22:21:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) setsockopt$sock_int(r2, 0x1, 0x55, &(0x7f0000000000)=0x32, 0xfffffffffffffcff) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000280)={{0x0, 0x6}, 'port0\x00', 0x3, 0x11, 0x401, 0x3, 0x9, 0x0, 0x8, 0x0, 0x4, 0x20}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$sock_ifreq(r1, 0x8915, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x4, 0x0, @fr_pvc_info=&(0x7f0000000140)={0x3, 'lapb0\x00'}}}) setsockopt$sock_linger(r1, 0x1, 0x22, &(0x7f00000000c0)={0x1}, 0x8) 22:21:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:21:50 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getown(r0, 0x9) fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000004880)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f00000001c0)=""/148, 0x20000254) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x647f, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1000000000000000, 0x0, 0x0, 0x3, 0x2, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x9, 0xffffffffffffffff, 0x1) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) open(0x0, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000400)=""/101) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x1, 0x400) ioctl(r4, 0x80000000, &(0x7f0000000680)="e6c3230d4353d1fdb4759156fb7386413f9bb4a34e84cf5340") getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000000)={0x2, 0x9, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg(r6, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000000c0)}}, {{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000006c0)="3ee48a999034bfaed88eb801a703accf9b02b64752205371664fd9a89686c4a151780b97e48c41266295dcc8ee3843dc00f60652595624dd22513505b1581d77b6bc4f704d9278c960e94366d49f3a69f05417150a53b2afc148d32cc591326fea8b7e6e4921e0c6b561ba486427dda9957cdd582642b8680ba79522f677d117df37c9d3caba63b2d5e9226c7a37a91f14712445e817595194304a165a12b0c6459ba749c8eda6c12c8e5fcd01155ce62bf8b9708a0f46d9263fd6c429542032c354a46809", 0xc5}, {&(0x7f0000000580)="c9986b927c8b19f96d966fb3eefbe9cbe957949409e837b57bca81011085311e8952b06f3f30000cf31127eaa438fc9b4930719519b41f641da273fc0e9e37d42baa973476871f3fa8d678d8cfc19c731810a759e066d3a9e189074ae6e09ddf0979ef957fd021e01084679711d138279bcdf2faad6d3f12d03ed4ef5434810a279e6bde5a2b79b7ac06fa4057f7e0ca3f96da8149649f78abffa4b57ed9", 0x9e}, {&(0x7f00000007c0)="1df50ff1806e13e55b54cde224585f478bd096dd8153fc4aff0eabd8bcfb46f43cd94c66ea87b5fa4958e58c29907a65e7ddec16f0989c0dcd94d0ef975d1f52697364fd1e35be09986da4fd3d7efcbc9f14a00c9cca0035afc70cb1ce2dd640877d71a799cd2a341692816601db6f23f976d247f6fcea01f90fc119e17b47887087f773f57429b3cd9f070a148d85747e3b15a410c2c84e791e6df9628921f73ce014686b698cdd612c2d32", 0xac}, {&(0x7f0000000880)="1847e2b8815043eabb59289d5136771c733d39c1fa67d17ea868100229753f59dd5a599fc76afdb85cf16e62c3c51b4a7c6b0d5f2c9fbf1563d71c0901f56da0a49e668c0113f0b89c37a08a7517a6b958f7978184f6333a7b6146f7d5d24bb05386c68c96b522c08bf0f33859234bbbf42453bece205d53f350526801fc991e982a418aa584613d72", 0x89}, {&(0x7f0000000940)="7804f3f064a94eb28b505a89f024e39e23a1461e68259638f62f8d1f4a8707b6c6dd04345d77e879c8e9455f7c1208ee4f6a37387ed6a973e878b0ad61fde95d3ccab3b1584666f009f115105b263ef8d873331078d386e20924bbbac55b1668f4b1d5b913d44b3c2a01f7eec108eaa87d3f3caf61cd010969899e2ce182ca36eafc85d72284d95e449b49b1812b0c16983b01617407d143aa311d4c48296a20875b94c9ab", 0xa5}, {&(0x7f0000000a00)="d0c777f0ca84dc139abf61657bed0127144b03ddb8d7d42ba739ca984b3cd3dd132152988e1410704b128abec9005178e8589f15c483ac2dd772b2542a421b455cb7963245f2880409914ae789e71e002b0d332e92c73fa79c8207c1bd03089cb51f3c0e446c8a119d59ce32873e2a97172ac9058995d961786ea5f33c5e3488b96442737b9e55e9db1e3c4cbf2d0dc5fb1be6905f8bbee0", 0x98}, {&(0x7f0000000ac0)="2c755823105e6f2eabf7b9e27587cc45199836327ce1a28d23ddf0f72e8f35938579ec3883003fe2c55332ff14a673ae9258287558d9f4012c9d89159c77aa167c36de3ea8a336b3d24273043037c66ba8d19956215440854baa90ec26f814828ad1fbff44381e5ad11ae731743515e00848e6a36da99390c66ae8f1d57523e158a25b016a927dd8e13ee4050712b4c3e3e02df4552d570c0ef1b6b261a6c32ffefc03c14be0b9d6477ed586d6a217cc90", 0xb1}, {&(0x7f0000000b80)="e2b05970f223b3554cca25dbc65397474b9feb239705afd0419d0922ac5f24900aafa6d7d846e4f700284412272a1fbfaf8d4b654467cf8caf34c41ff97a02eacb3ddb25cd636ed6ae0d27da317112ecdce6586fd9e0b2f3bfdd44694a56b7e2c895c0ada0f4b15f5a7a7abda9c2e6e8becc3b2b7e47c08f1bcfd653fbab10242eb38e5e2c4d5ae9c5f1aba80b0940a13d421f547d3fa5776506aee39453e052272154e314cf2bd140fbeb77c4ef378a5f126950e072e988c4992c24fa5d58de0869f4d91f2c315026260bcff4dd9423ce6ea18152ce55906f15b2d34225a3656af3", 0xe2}, {&(0x7f0000000c80)="63081af003988ce667ba8b39f077098e39fecc4a9ca724a306cd466b7cfd061f71e8f60d3136e1771e781cb3aa274a3a76ffc6ef0b2b8a57b454be5b96a3c9db6edada787a67a26de93301a42b023e65ec56544212b303dc277b97a8082d602ac814fc6322e6184a3b96484682d40e6ac0ec73e040570e6319901318e91a8701a11f599041e505274e5f5398e7d1cff10d7fc2fdb349ad44e7ed7e00e89641b5132122088974ca9059e098de93f502dacaa243c4e42ef76739", 0xb9}], 0x9, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESOCT=r6, @ANYBLOB="89b936d86f52441c37204cdabccb7bb151257866b6805fbcfd51dfb031eb2d967ce0e9fa2bb4491155cf3f6c32f252d65007dd3412a100"/68, @ANYRES16]], 0x2}}], 0x2, 0x0) 22:21:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 343.301353][ T3238] validate_nla: 6 callbacks suppressed [ 343.301361][ T3238] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 343.317645][ T3238] __nla_validate_parse: 6 callbacks suppressed [ 343.317653][ T3238] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.340874][ T3238] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 22:21:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 343.363523][ T3238] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:50 executing program 4: socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xa65a, 0xdaa2, 0x9, 0x4, @time={0x0, 0x989680}, {0x5, 0x4}, {0x8, 0x2}, @time=@tick=0x7}, {0x0, 0x4000000, 0x4, 0x1, @time={0x0, 0x989680}, {0xffffffff, 0x5}, {0x0, 0x6}, @raw8={"34ec28292ddc64ce2fbe48f5"}}], 0x60) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) 22:21:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:21:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 343.556091][ T3240] QAT: Invalid ioctl 22:21:50 executing program 2: r0 = gettid() r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) fcntl$setflags(r1, 0x2, 0x1) r2 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) exit(0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x9, 0x20, 0x2004, 0x8, 0x8, 0x0, 0x2, 0x2}}) 22:21:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:21:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x17, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:50 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r0 = getpid() getpriority(0xfffffffffffffffe, r0) ptrace$setregset(0x4205, r0, 0x201, 0x0) r1 = getpid() getpriority(0xfffffffffffffffe, r1) ptrace$setregset(0x4205, r1, 0x201, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/sockstat\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000140)=""/4, 0x167}], 0x1, 0x2) 22:21:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 344.147860][ C1] protocol 88fb is buggy, dev hsr_slave_0 22:21:51 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0x1, 0xfffffffffffffffc}, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xfffffffffffff7ff) sendmsg$alg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="7cedfbc11e4f670cd3e5355154b91ade542ea48f15dcbe48e5e4d6911b23582ea5bfe044", 0x24}, {&(0x7f00000002c0)="1c1ab245c9c57d6abe943b1a51f784a383f454e36c388c15e7e883a97c8d3c9bf74564d149939affb86f36211ac871fb27fc9b828ee594243b95065287a612f300335f07d4022070f8d3ecacd9cfba8c5a551c90c3cb7a48e796c919f09cb11daa1dee8e0141d3b30ee55c47570555060a38a69d189a8bb2f82a5a48cc76b2d062cd6efd8ddbf9c9cda0b40bb53bfd8af39f0150fabd3ed7695602baa9cbfd39879dea61d6d3c967435c47f7760a4a38e6bc3c97932ce3f57f44c401f1a4ed933cd58295af", 0xc5}, {&(0x7f00000001c0)="33db8f880ac87217e2989c4ecaebe2e475d64e5760d1bdd24becf22b1301cfedc281e9f2e8853145887ddc78c78ef05af7469680", 0x34}, {&(0x7f00000003c0)="df760a0499048d5b0d6a2e6456fcdaca181deaa8dd2e634c6a83ad89b499d9395f377592683df78b5ccf9ba4e4eb72ac413c4c74aa265d55b944d666f38dcd7e2e7412841bdd57e81390726dca103bee1d1bc41b9de56aa19b4e97593c1e124852c43126ccddd8766c5c87c0b79e540fcfb2ca247c052bc6978f95c825498ca3a26fa26aa8b29938597d8e1c374e67eae89c97be948b661f9d59b4a06c2afdfe7916f4ee97a47527b468668a04a751d6374e25366f732a6f55d2ac859d8128bd59b55700fb4ede3430", 0xc9}, {&(0x7f00000004c0)="13a9b33fe9c5b78aef9cc584a412c4dc9610e1f53985e690c713923d51786bb3a7cda09bccc2a8bc53243fca7d2a41894f5caa714bcdebea98b9941c1ce13f6994e9e1b79d6b6d8eef459b7d7dbc6eb650dfa959b0bdeb755384e1aefbc138eae9e599d01aeaf7aec9d73d8eb0d8bc9765033bd9b8142181c6ffdf77330e727bf6096a8cc61459e8163700b016b94f52b1af47000a38ce0ae56262d4602f89b1aa34a2b6cb46181592056aed5e54df303c45daf00614169c6e0fa02b7f07c6b7e2edbb88cb9f0a24f98d47be74ee83e0a4de615aeb1cfc9e", 0xd8}, {&(0x7f00000006c0)="d7177046607a3ce58959ce3284b1621fbe0e4a317f7ba1586f81543cb438b047dd7d3b2ef4dca2d62ec7925cf41896d9902d5bb0efa58a5b84a1b734b518cb958f5245c7cf92d10e6be9d986368b855169a7a87a265c73cbda236aad099226eea60dd97138ff5aa7e2570809827ec59d8a9c61a6415a38d775f473ee033e8f12cfb1594bf7c01951c13c495a393f3f66c524d20f8f4bbba36b1c07dd23c1caa62a5131c2ae80eb34816236f0", 0xac}], 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000300000004000000400000000000000060000000000000001701000002e500004a00000002d118f3eda3920e1b441da54f8c7a601ef5e0ab3848afcc580eb93e4a846d01ee41d980528a91c7bdfaf8c41baff11b2c5289c1c2cb64596f566eba44b06ceafddd24260250765b4ee60000"], 0x78, 0x20000040}, 0x40811) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)={&(0x7f0000000900)='./file0\x00', r0}, 0x10) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000800)='binfmt_misc\x00', 0x80, &(0x7f0000000840)='!{\x00') r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000980), &(0x7f00000009c0)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x40080) 22:21:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:21:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x18, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 344.216776][ T3307] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 344.244122][ T3314] binfmt_misc: Unknown parameter '!{' [ 344.246797][ T3307] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.259033][ T3315] binfmt_misc: Unknown parameter '!{' 22:21:51 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000240)={0xe043e67cc0cfc78b, 0x0, "fc561df460fa82055effb772c987f130d119288b546db8676227442c172c5332", 0x0, 0x0, 0x1ff}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x863bfa665ac4ed1) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x4ca1981e7392835c, 0x102, "53be68959bc26d5590cb82ad90270c59caac7b4cca9e54c0ed6c4f3ca0a48f03", 0x6, 0x7, 0x1ff, 0x101, 0x3ff, 0x3, 0x1, 0x0, [0x7, 0xdf15, 0x1, 0x83]}) fcntl$setflags(r0, 0x2, 0x1) 22:21:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 22:21:51 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') timer_delete(0x0) fchdir(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr\x1c\xbdn\xa9\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454d1, &(0x7f00000000c0)) exit(0x0) geteuid() pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x1a, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000340)="2600000022004701050000000000000005006d20002b5fee839cd53400b017ca5b0000000000", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0xc308, 0x4) 22:21:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x20000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000000000000, 0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x3, 0x0, 0x0, 0x1, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x2, 0x1000, 0x81, 0xffff, 0x2, 0x3}) clock_gettime(0x7, &(0x7f0000000880)) fcntl$getflags(r0, 0xb) r1 = socket$isdn_base(0x22, 0x3, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000005c0)={0xc}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@remote, @in6=@loopback}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xffffff66) sendmsg$can_raw(r0, 0x0, 0x8840) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000940)="c0153ef84601551322439a4d38082bf8fea60d7a79955e52dafe377d8100cd5a88ba6085be000e2c2933d1caf3cd8b38e00d337814a2cd088730b4f3d091e9a4d400ff74fb28af15e1cf33840c2e3130a2824d14268de45486f57d410fa0b847d85d307d65b44508abf65c11af47c63d0ba0ae203471fb3403f4afe4859d001af0040188ccc0ba6853f7efbe6132c6ee5df0302bcc87a8d8bd431ff0935e26ad3c4b8503f033221767d5206c0a5a684f6c3c9602d2811922455346c49769f9e7da5be52ba4a784653a944d", 0xcb, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000840)='keyring\x00', &(0x7f0000000a40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000780)='cifs.spnego\x00', &(0x7f00000007c0)={'syz', 0x1}, r3) syz_open_dev$vbi(&(0x7f0000000a80)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000800)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x4, 0x400, 0x2}}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x54) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000ac0)=""/186, 0xba}], 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 22:21:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) [ 345.013813][ T3336] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 345.022067][ T3336] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 22:21:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x7ffff, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 345.103663][ T3353] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 345.120577][ T3353] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 22:21:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x20, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="5c000000532c770837d8894196c3ef190af16fdca8e1415d0332e1dbeca65d74491da07ecd7c305e2492f1b5f7ee0d7016a3f215cb4c7372ed542e5352614969a282ebbfa51873d48fb3d254e937e1b38da3"], &(0x7f0000000100)=0x64) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000084, 0x0, 0x48], [0xc1]}) 22:21:52 executing program 5: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 22:21:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) [ 345.245001][ T3361] kvm [3360]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 22:21:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:52 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1f, 0x7, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 22:21:52 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/protocols\x00') fchdir(r1) exit(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000140)=""/82, &(0x7f0000000000)=0x52) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="22368dc804b802440700", 0xc) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:52 executing program 5: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 22:21:52 executing program 1: unshare(0x8000400) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x800) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x50, 0x2) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 22:21:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:52 executing program 0: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 22:21:52 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='/dev/dsp#\x00', 0xfffffffffffffffb) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000540)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x9, @rand_addr="4d96e843573ab507461cc07dfe263a13", 0x9}, {0xa, 0x4e24, 0x1, @remote, 0x712}, r2, 0x1}}, 0x48) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r1, 0xcd, 0xdd}, &(0x7f00000002c0)=ANY=[@ANYBLOB="656e633d726177206861a08643b1763d2ea26328616e756269732d67656e65726963290000000000000000000000000000000000000000000000000000deffffff00"/77], &(0x7f0000000340)="c59ce5c4f94243af3708bfcaa9584a4d0521c29db155c464830a45fede075e3c2cf1d9a92f5c90817e9cf4e987753946566c45ccb6f3f05870ee277558739f3e3ffedc425ebf343cb2ec1b8bfcd35de378c9742e97c2ffd3f0d893058492ab4e2703fdcf5d82717d40d2df86440dad632b508519c6c0c668c2735053f8e2fb1310800606c4f25c622387448a079fe320975d5936699e741aefcb3b96fc6ba243494f41ee04d3fe57e032ea64354d6070c92ce987996d9589d9ce97eba7748b3d0654f550ed7d76d9a6c00ff45c", &(0x7f0000000440)=""/221) syz_open_dev$usb(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 22:21:52 executing program 5: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 22:21:52 executing program 0: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 22:21:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x10, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:52 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) userfaultfd(0x800) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000000100)=""/108, 0x6c}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000280)={0x18, 0x0, 0x4, {0x3}}, 0x18) r3 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x9, 0x60000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000380)=0x5, 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 22:21:52 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:53 executing program 0: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 22:21:53 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:53 executing program 1: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100, 0x40) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x32d682) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) connect$packet(r0, &(0x7f00000001c0)={0x11, 0x6, r1, 0x1, 0x3f, 0x6, @link_local}, 0x14) socket$pppoe(0x18, 0x1, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000002c0)={0x77359400}, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @rand_addr=0x1ff}, {0x6, @remote}, 0x20, {0x2, 0x4e23, @rand_addr=0x7}, 'vcan0\x00'}) r4 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00', r1}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x200020d1) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000540)=0x6) socket$inet_dccp(0x2, 0x6, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000580)='/dev/bus/usb/00#/00#\x00', 0xd7aa5f4, 0x200000) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f00000005c0)={0x4, {0xffffffffffffff7f, 0x1, 0x2, 0x9}}) mkdir(&(0x7f0000000600)='./file0\x00', 0x180) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$NBD_DO_IT(r7, 0xab03) r8 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f00000006c0)={0x7f90ba8f64472555, 0x38c9fac75c20024f, 0x100000000, 0x2, 0x9}) r9 = syz_open_pts(0xffffffffffffffff, 0x4100) ioctl$KDSETLED(r9, 0x4b32, 0x80) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000740)) r11 = syz_open_pts(0xffffffffffffffff, 0x404000) ioctl$VT_OPENQRY(r11, 0x5600, &(0x7f0000000780)) r12 = openat$mixer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/mixer\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000880)={r13, 0x59, "07c59d8d6722b2611b8dcdfe1fb6744322be43862278c4175a7bcb9f9411c0a2250f5160de766b306926e08c2f0c75385d0534647bedcb607a30edfe68aa012ed635333981a6798ac7b86c55ef80140d5061b7a6b9380c13c0"}, &(0x7f0000000900)=0x61) 22:21:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x4000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:53 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:53 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:53 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') r2 = getgid() r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r2, r4, r5) 22:21:53 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x10, 0x0, &(0x7f00000000c0), 0xffffffffffffff79, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="106308400000000000000014"], 0x0, 0x0, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80800, 0x0) getsockopt$inet6_dccp_int(r3, 0x21, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) ioctl(r2, 0x2, &(0x7f0000000040)="2f896bbc64da314d5b03b547b2958905f31237bd4ff266025f62a1ad9e33aec869") r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) r5 = getpid() getpriority(0xfffffffffffffffe, r5) ptrace$setregset(0x4205, r5, 0x201, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)=r5) 22:21:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x34000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000240)={0x30, 0x1, 0x0, 0x5, 0x6, 0x3, 0x0, 0x2000000004}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setxattr$security_smack_transmute(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/335], 0x1}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 347.003269][ T3454] debugfs: File '3452' in directory 'proc' already present! 22:21:53 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:53 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 347.044998][ T3454] binder: 3452:3454 unknown command 0 [ 347.054490][ T3454] binder: 3452:3454 ioctl c0306201 20008fd0 returned -22 22:21:53 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 347.088487][ C1] net_ratelimit: 3 callbacks suppressed [ 347.088507][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 347.117340][ T3466] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 22:21:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x100000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:54 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 347.154620][ T3466] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:54 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:21:54 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:21:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x400300, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:54 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:21:54 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000240)={0x30, 0x1, 0x0, 0x5, 0x6, 0x3, 0x0, 0x2000000004}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setxattr$security_smack_transmute(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/335], 0x1}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 22:21:54 executing program 0: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:54 executing program 2: gettid() r0 = getpid() getpriority(0xfffffffffffffffe, r0) ptrace$setregset(0x4205, r0, 0x201, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='nc\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') 22:21:54 executing program 5: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) [ 347.798574][ T3454] debugfs: File '3452' in directory 'proc' already present! [ 347.806669][ T3466] binder: 3452:3466 unknown command 1087 [ 347.817882][ T3466] binder: 3452:3466 ioctl c0306201 20008fd0 returned -22 [ 347.826611][ T3454] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 347.835121][ T3454] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 22:21:54 executing program 4: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0xb, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000300), 0x10) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000240)=0x409a, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0xfffffffffffffffb, 0x9}, 'port1\x00', 0x1, 0x40, 0x7, 0x7fffffff, 0x0, 0x1, 0x1, 0x0, 0x6, 0x40}) r2 = fcntl$getown(0xffffffffffffffff, 0x9) get_robust_list(r2, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) r4 = socket$inet(0xa, 0x3, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="2368883e00400000"]}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x4c, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @rand_addr=0xffffffff}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x2, @mcast2}, @in={0x2, 0x4e22, @rand_addr=0x1}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={r5, 0x2, 0x0, 0x9}, &(0x7f00000003c0)=0x10) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x10000, 0x0, [], {0x0, @bt={0xa83e, 0x28a, 0x0, 0x2, 0x80000001, 0x6, 0x6, 0x5, 0x8, 0x3f, 0x6, 0x6, 0x1, 0x3d, 0x0, 0x2}}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000280)={0x0, 0x0}, 0x10) 22:21:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x1000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 347.891591][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:21:54 executing program 5: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:54 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40c204, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x0, 0x8, 0x0, 0xf2ff, 0x7f}, 0x0) 22:21:54 executing program 0: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x2000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0f11274b761f3b09175fe7a1b6c8922d7350221b9e173f33b7b5e4df7be846db16023f8eb1edfdc3d97b6d1b596d9ff543e2da612a7c2d4f30c823bf5958f5e21689bf3dc4ba3816a426d9bfff431c9200e3c6b88ddf7a76a2538f90f062820cd9f3c5c9c2fc91d07571e3f38367e06572291a03f1759f653396eebf00cf9f4d4fa3d949fac13689329c24a930d2e839e06630f046c7c55bab5f506654db08f9dbe70c0f84395eda352e6db7c7af743faa7af87d6b26324c12545df858870049"], 0x0, 0xe}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0x0, 0x0, 0x0, 0x40]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cr0={0x0, 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:21:54 executing program 5: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:55 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000240)={0x30, 0x1, 0x0, 0x5, 0x6, 0x3, 0x0, 0x2000000004}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setxattr$security_smack_transmute(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/335], 0x1}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 22:21:55 executing program 0: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) [ 348.472553][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:21:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x4000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x6, 0x8000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={r3, 0x7fff}, &(0x7f0000000380)=0x8) r4 = memfd_create(0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) recvmsg(0xffffffffffffffff, 0x0, 0x10000) 22:21:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:55 executing program 1: syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x806) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000240)=[0x4]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f3a21c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000240), 0x0) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x39bb3bedd67f760c) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000340)=@req={0x28, &(0x7f0000000300)={'vlan0\x00', @ifru_data=&(0x7f00000002c0)="8d244c95b59a2f04ffbb953f2dc99e0e34b3df91e1bedcc9a9eeae924d2c835f"}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x70) setsockopt$inet6_tcp_int(r0, 0x6, 0xb2d84b29ef09c0e2, &(0x7f0000000040)=0x9, 0x4) 22:21:55 executing program 2: gettid() r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='pagemap\x00\ru\xcb\x95\xa2\xa3,\xe5-\x02\xe4\xcc\b\x18T\xd0[\x8e\xa7\xfd\xf7n\x11\x86\x1bN\xa7oKd\x1aD\xf2\xa2\xa3Z\t<\x12n\x9a\x9flH\xe6/\rS\xb5M_.\x1f\xbb\x10\xfb\xdf\xda[\xb7\xb8\x9c\xbbd\x13\xb6Y-\xf0\xc6\x1c\xc7\x10\nG\b\xa4T0\xa9\xa5B\x1a\xa2\xb8+\x81n\xf2`\xd3\n\xf8\xba\xb2\x13\xce\xffFT\xc1\xb5\x9f}:\xe4a|8\xf3\x05\xec\xa0:\xb4\x9e\xe8\xce\xc7*\xaf\x96\xfb\xb3Q-h6!\xd7\x8e\xc6\xe9Y\x9f\x8dZ^\x938n\b\xce\xdc\\\x7f\x95\xda\x1d\xe1\xcd\xcf\x02\xe0\xb8L\x8a(\x05zx9O\xba+OR4\f\x97Z\xaf\xa5X+\xe0') fchdir(r1) exit(0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9a, 0x101006) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r3, 0x401}, 0x8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2800005, 0x10, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='.', &(0x7f0000001240)='.') 22:21:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) sendmsg$inet6(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="eb81b472ac3acfafa5528de827e4e17de62907f176355d2602f1a0ef7bc69550f4f7a953395530d844c253ca41b2b2a9cf4473577e393b37ca99a916b0707707a04d98a77f7fba74f11717951b2786bbeeab6242901f06e615064948d53cb0721f0f2951fd85a03f126620fb8d04d01456de877f202a5801d72161b46d3478164517be94fcf339c168cadd9344aed59408", 0x91}, {&(0x7f00000001c0)="b458fdaf2d670cd4f2d2684c4b4e7154df2d8f2495144d879160cca850442f40c7c9ca44e6441f06c03658038f9e79c1ac3ef7df67b217971ec85884756ff442db7419", 0x43}], 0x2, &(0x7f0000000280)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x2c, 0xe, 0x0, 0x7, 0x0, [@local, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @remote, @empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0xa0}, 0x20000004) write(r1, &(0x7f0000000080)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) socket$inet_udplite(0x2, 0x2, 0x88) fchmod(0xffffffffffffffff, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x8000, 0x0) 22:21:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:55 executing program 4: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="980ccb16da6f774c4652563394d570d48ce5033df34393251bfcb7a205cc3e41dd21b2e0e394077e06991115ff7b86a3af1a865ad61b6a2b5ae62baa7d5aae0bc10ee353779475505b1022fea1b2be10eb49e271e1400c20bf3c07f6ea3c7161c20b5153913a879c096c006c3f3a5f3de8212077cfd8dee023379cb76a243ca024b93e4e1a7ebb9ccbb0f567d3ea801fcdced1bf9fcaa94eb532f954c9bbb5526b7f0017019874ced42cd94e2a1784f41b02b951112d", 0xb6, 0x40000, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = gettid() r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x7, 0x80000000}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f00000002c0)=""/251) tkill(r1, 0x9) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x7fffffff, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000100)={0xa, 0x4, 0x3, 0x10001, 'syz0\x00', 0x1}) 22:21:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x40000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x5}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae05, &(0x7f0000000080)) [ 349.027860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 349.033652][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:21:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:56 executing program 1: syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x806) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000240)=[0x4]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f3a21c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000240), 0x0) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x39bb3bedd67f760c) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000340)=@req={0x28, &(0x7f0000000300)={'vlan0\x00', @ifru_data=&(0x7f00000002c0)="8d244c95b59a2f04ffbb953f2dc99e0e34b3df91e1bedcc9a9eeae924d2c835f"}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x70) setsockopt$inet6_tcp_int(r0, 0x6, 0xb2d84b29ef09c0e2, &(0x7f0000000040)=0x9, 0x4) 22:21:56 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) get_thread_area(&(0x7f0000000040)={0x9d, 0x40001000, 0x400, 0x7, 0x3, 0x401, 0x0, 0x9, 0x20, 0xb4fe}) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') timer_create(0x3, &(0x7f0000000080)={0x0, 0x25, 0x2}, &(0x7f00000000c0)) 22:21:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x80ffffff, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x10}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x101}, &(0x7f0000000140)=0x8) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) 22:21:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0xffffff7f, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0xffffff80, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x10000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:56 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x800) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000001c0)={0x3, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x3ee) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) r8 = fcntl$dupfd(r7, 0x2d998aeda787487b, r6) ioctl$PPPIOCSFLAGS(r8, 0x40047459, 0x0) openat$cgroup_procs(r8, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x3ee) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) r9 = fcntl$dupfd(r5, 0x2d998aeda787487b, r4) ioctl$PPPIOCSFLAGS(r9, 0x40047459, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) fcntl$dupfd(r10, 0xa0f, r3) r11 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x200000000000002) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000280)) ioctl$EVIOCGKEY(r11, 0x80404518, &(0x7f0000000240)=""/124) 22:21:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x200000000000025a, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x0, 0x10, &(0x7f0000000100)}, 0x48) 22:21:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:57 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0005) r1 = accept4(r0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8, &(0x7f0000ffc000/0x2000)=nil, 0x5) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000004ac0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000004a00)=0x90) 22:21:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x40030000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:57 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x82, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="100000400300"/16, 0x40000010}]) 22:21:57 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) r3 = creat(&(0x7f0000000880)='./file0\x00', 0x105) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000008c0)=0xf098, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) r6 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe0d) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$UI_END_FF_UPLOAD(r8, 0x406855c9, &(0x7f0000000740)={0xa, 0xfffffffffffffff7, {0x8b59a1d97b094a86, 0x10000, 0x100000001, {0x1, 0x6}, {0x86, 0x739}, @cond=[{0x3, 0x8000, 0x5, 0x9, 0x0, 0x8}, {0x5, 0x9, 0x1c, 0x7, 0x7fff, 0x80}]}, {0x51, 0xfff, 0x2d80, {0x5, 0x6}, {0x100000001, 0x1}, @ramp={0xf96, 0x8, {0x80000000000, 0x0, 0x7f, 0x7}}}}) setresgid(r4, r5, r7) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000078050000f0030000f0030000180300000000000018030000e0040000e0040000e0040000e0040000e004000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x5d8) 22:21:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720"}, 0x28) 22:21:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:57 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x82, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="100000400300"/16, 0x40000010}]) [ 350.624661][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:21:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x100000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 350.667126][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:21:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x84e22, @broadcast}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b4000000000375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b00001beda9e55b4c1823308c7db92d"}, 0xd8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000000000)={@remote, 0x1, 0x2, 0xcfcd252a9f159a05, 0x2, 0x710d, 0x2}, 0x20) 22:21:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x200000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x20, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x80, 0x101, 0x10001, 0x0, 0x0, 0x8, 0x2}, [@FRA_FLOW={0x8, 0xb, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x8a0}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, [{0x14, 0x1, [@IFLA_VF_VLAN={0x10}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 350.903098][ T3694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.945231][ T3697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 22:21:58 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='ns\x00') fchdir(r1) exit(0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x1) pivot_root(&(0x7f00004cffff)='.', &(0x7f0000001240)='.') getsockname(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) 22:21:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:58 executing program 1: ioctl(0xffffffffffffffff, 0x40044160, 0x0) 22:21:58 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x400000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:58 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000180)={{0x3, 0x100000000}, {0xffffffff, 0x73}, 0x5, 0x5, 0x1ff}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x40) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) 22:21:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, 0x10, 0x829, 0x0, 0x2, {0xffff, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xfefffffffb3e030a}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) write$P9_RREAD(r1, &(0x7f00000000c0)={0xa3, 0x75, 0x2, {0x98, "4a4a2297138e5f6a5d088bd4eed083dc7c1548b4a9645e402972db3632f4da8c746819dd8f928ea1fab924489cd9057edae2cb443933dee51a0cfbf43da96b9483745011c6c9fed05a23b781a245ac250a8c92c3a97eb0e713167185e9d86bd8daa6bbbf4a39798732fe3c96b1432454bbd122afc949c66037564bfa3739d02475e35c122ab7f9838af56a5091e91c6bc3c7c8c0eb5f5631"}}, 0xa3) 22:21:58 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x4000000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 351.507936][ C0] protocol 88fb is buggy, dev hsr_slave_0 22:21:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:58 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:21:58 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x8000000000000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:58 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000180)={{0x3, 0x100000000}, {0xffffffff, 0x73}, 0x5, 0x5, 0x1ff}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x40) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) 22:21:59 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:21:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x80ffffff00000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:21:59 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000180)={{0x3, 0x100000000}, {0xffffffff, 0x73}, 0x5, 0x5, 0x1ff}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x40) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) 22:21:59 executing program 2: unshare(0x2000400) io_setup(0x1, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r1}) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e302"}], 0x28}}], 0x1, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, r6, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r9 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000680)={r10, @rand_addr=0x5, @rand_addr=0xff800}, 0xffffffffffffffb8) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000140)={r11, @remote, @loopback}, 0x3) ioctl$FICLONE(r6, 0x40049409, r8) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000480)={'team0\x00', r11}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="24010000", @ANYRES16=r12, @ANYBLOB="000426bd7000fedbdf250300000008000100", @ANYRES32=r10, @ANYBLOB="bc000200400001002400f50070c0280452697479000000000000000000000000000000000000000000000000080003000e00000008349e48d781f1f1000400018ea5c60e8930ad41740bcf4e8c5332d1a79d18", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="080007000000000008000100", @ANYRES32=r10, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r15, &(0x7f0000000640)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @link_local}, 0x14) r17 = syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x8, 0x800) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xfffffc77) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r18, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', r18}) r20 = socket(0x10, 0x3, 0x0) ioctl(r20, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") getsockname$packet(r20, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001400)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001a80)={@loopback, 0x0}, &(0x7f0000001ac0)=0x14) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r24, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r24, &(0x7f0000000640)={0x11, 0x0, r25, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r26, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r27 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r27, 0xc00caee0, &(0x7f0000000240)={0x1}) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r28, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x34, 0x0, "9a00d38b746182c674a091e67c5247fde12adf7a882321dd0d2cc79bfff2ec89a4a95cbb6e5436d76660287063c998430e1295b0d3923b45082cff270fc09c9e1ca0cc77b8c43a8cb33e7ff11414b04f"}, 0xd8) bind$inet6(r28, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r28, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, "5cb65778722c5720d883b47b5cd28f0375184192cd3b9c7c2637715f3c5db5d3f290a654df33994b4cb9c8e1bd31296a02b3006ddac6c17015c61eaa2e25889f5b8e2f1beda9e55b4c1823308c7db92d"}, 0xd8) getsockopt$inet6_mreq(r28, 0x29, 0x14, &(0x7f0000001b00)={@rand_addr, 0x0}, &(0x7f0000001b40)=0x14) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r31, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r31, &(0x7f0000000640)={0x11, 0x0, r32, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r30, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r33, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r34 = socket$nl_route(0x10, 0x3, 0x0) r35 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r35, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r35, &(0x7f0000000640)={0x11, 0x0, r36, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r35, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r34, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r37, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r39, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r39, &(0x7f0000000640)={0x11, 0x0, r40, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r38, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r41, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r42 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r42, 0xc00caee0, &(0x7f0000000240)={0x1}) r43 = socket$nl_route(0x10, 0x3, 0x0) r44 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r44, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r44, &(0x7f0000000640)={0x11, 0x0, r45, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r44, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r43, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r46, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r42, 0x8933, &(0x7f0000001b80)={'team0\x00', r46}) r48 = socket(0x10, 0x3, 0x0) ioctl(r48, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") accept4$packet(r48, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001cc0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'veth0_to_bond\x00', 0x0}) r52 = socket$nl_route(0x10, 0x3, 0x0) r53 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r53, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r53, &(0x7f0000000640)={0x11, 0x0, r54, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r53, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r52, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r55, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r56 = socket$nl_route(0x10, 0x3, 0x0) r57 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r57, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r57, &(0x7f0000000640)={0x11, 0x0, r58, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r56, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r59, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) r60 = socket(0x10, 0x3, 0x0) ioctl(r60, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r61 = socket$nl_route(0x10, 0x3, 0x0) r62 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r62, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r62, &(0x7f0000000640)={0x11, 0x0, r63, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r62, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r61, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r64, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(r60, 0x8933, &(0x7f0000001e40)={'bridge0\x00', r64}) r66 = socket$nl_route(0x10, 0x3, 0x0) r67 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r67, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r67, &(0x7f0000000640)={0x11, 0x0, r68, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r67, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r66, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRES32=r69, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000300000000000e10ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c118ed4800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000007f00000008c91af67c82576a74db5c"], 0x444}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001e80)={0x614, r12, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r19}, {0x124, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff7fffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xbc79}}}]}}, {{0x8, 0x1, r21}, {0x1b0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r37}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xfffffffffffffff9, 0x5, 0x9, 0xfffffffffffffff8}]}}}]}}, {{0x8, 0x1, r41}, {0x1a4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r47}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r49}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r50}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r51}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r55}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r59}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xf80}}, {0x8, 0x6, r65}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x3f, 0x0, 0x4f, 0x4}, {0xb5, 0xadf5, 0xfffffffffffffff9, 0x8000}, {0xd3, 0xe8, 0xf09, 0x2}, {0x7fff, 0x4, 0x2, 0x9}, {0xff, 0xffffffff, 0x4b42, 0x6}, {0x7fff, 0x89e5, 0x7fffffff, 0x6}, {0x5, 0x81, 0x20, 0x4136}, {0x10000, 0x7c1, 0x400000000000000, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r69}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0xa730e3b6a4d78ae7}, 0x10) r70 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x15000, 0x0) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x5, r59, 0x3, r70}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4b}, @map, @map={0x18, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x7a, &(0x7f0000000100)=""/122, 0xa2a80, 0x8, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0xffffffffffff49b7}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x0, 0x925, 0x5}, 0x10}, 0x70) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000004480)={0x10000000000001, 0x84, 0x800000005, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) 22:21:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:21:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0xffffff7f00000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:59 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 352.467882][ C1] net_ratelimit: 3 callbacks suppressed [ 352.467890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 352.479288][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 352.485069][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 352.490827][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:21:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:21:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0xffffffff00000000, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:21:59 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:21:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x2, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:21:59 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), 0x10000000000000cc, 0x0, 0x11d}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x3}]}, 0xc, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f00000003c0)=""/237, 0x4a7}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f0000000140)=""/37, 0x25}], 0x6, 0x5900) 22:21:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) [ 352.872269][ T3791] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 352.903738][ T3791] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.947874][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 352.953640][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 352.962400][ T3794] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 352.970566][ T3794] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.187841][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.193659][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:22:00 executing program 2: r0 = memfd_create(&(0x7f0000000000), 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x10001) sendfile(r0, r0, &(0x7f0000000040), 0xff8) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/117) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x0, 0x0) 22:22:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x4, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:00 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f00000000c0)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x8000000, 0xf8, 0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'vxcan1\x00'}, 0x18) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000008000000000000000200000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffefffffff00"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28]) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0xc0185500, &(0x7f00000000c0)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000001c0)={0x2, 0x70, 0x80000000, 0x7, 0x3, 0x3ff, 0x0, 0x20, 0x84, 0xd, 0x800, 0x8, 0x3, 0x8, 0x1, 0x7ff, 0x9, 0x2a9, 0x0, 0x7, 0x2, 0x3, 0x1, 0x10f5, 0xfff, 0x401, 0xf11, 0x1354d215, 0x1, 0x0, 0x7, 0x94, 0x0, 0x1, 0x100000001, 0xad80, 0x4, 0x4, 0x0, 0x20000, 0x0, @perf_bp={&(0x7f0000000000), 0x10}, 0x8000, 0x9, 0xe7d4, 0x8, 0x80, 0x5, 0x4}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f00000000c0)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 22:22:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 2: munmap(&(0x7f00007fa000/0x2000)=nil, 0x2000) syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') sigaltstack(&(0x7f00004ce000/0x4000)=nil, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') lseek(r0, 0x20400000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0xa, 0x3, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000400)=@ethtool_stats}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)={0x100000001, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x5, [{{0x2, 0x4e22, @rand_addr=0x4430}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x8}}]}, 0x310) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mprotect(&(0x7f0000465000/0x600000)=nil, 0x600000, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0x2000008f) 22:22:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x10, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:00 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 353.587861][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 353.590247][ C1] protocol 88fb is buggy, dev hsr_slave_0 22:22:00 executing program 2: r0 = socket(0x0, 0x4, 0x1) write(r0, &(0x7f00000000c0)="240000001a00cd18e289d3659248001d020b49ffed000000800728000800030001000000", 0x24) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x604180, 0x0) fcntl$getflags(r1, 0xb) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x200002) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) 22:22:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="ae78ea331f2fb4b1eed8e78911eafd9e9331fc9cf3b546fc5e8cef12a7b48ada5fdda7db605b4469890931c39d30dbec14ab5f9a0056e86784b04b882b193dba2a98e54d74a3620012b8ac537862dd7df567cb9c29a001f436649d366ba736928c4ad17655196f9edd8620df6417722f8b2a495c7b8c6779434f69cd394036dbcd11e38dd0515f52a1c97d874c7eb62a9f51f5a088dd108e205ec2df2a58e286ab88a8339a71150e999bdd452d22e5bef351", 0xb2}, {&(0x7f0000000200)="9f645c", 0x3}], 0x2) socket$netlink(0x10, 0x3, 0x5) 22:22:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x4000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0xfff, 0xff8, 0x57b9, 0x8000000000000000, 0x1a, 0x3, 0x4, 0xb1, 0x1, 0x100000001}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000200)={0xd8, &(0x7f0000000280)="7ffb5d15f8547c9d1619b182e0a6358500a6cdf671677df5508704fa9c3ac9d924c636b71b142cbbc8cb163612c25a5c113374b3c82a8a9cb36f80462401f5b5ca965907a3dd47bf6c5da1b60a8d1a099c900bfc6697ff42d741861d210daf13463f88d67c59c81d05fdc3b03c7c5c0e88ee1703d06c3a04b51a5fd4a056e23727fb07dd5c79312a92317bf77273379943df27ffb1b757aa8d8ab4fecb1ded206f59d472a0ffdec76e464b73e94a84c3c6931eb6c755cfaa0ba3b416257e7934bc29e6bda81938182b40417b8cacf8a3879b3e6ea25f53ba"}) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000000c0)={{0x4, @addr=0x5}, 0x8, 0x1, 0xfffffffffffffffa}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f00000001c0)={'ip6erspan0\x00', {0x2, 0x4e22, @local}}) 22:22:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffeea, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 22:22:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x34000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0x10, "67b732"}, 0x5, 0x2) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000100)=0x17f) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x70, &(0x7f0000000080)={r3}, &(0x7f0000000140)=0x18) 22:22:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast2, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, 0x2, 0x2, 0x5}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x121, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 22:22:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) [ 354.096432][ T3878] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 354.111898][ T3878] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x100000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) [ 354.157937][ T3889] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:22:01 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 354.243980][ T3889] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:01 executing program 4: r0 = semget$private(0x0, 0x8, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x701081, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xe231166dfce4e3b, &(0x7f00000000c0)="54b510a320b393ad13eb40cecf3e396735d9136d24d12845c11fedf340b5d518bb34eaeff5bf5a748dc0644d95c332e421553166f435b96c24a0a6acb7d825131638b0202c94b6b75263640517b47f2455a9c5173fd32480070f00e4f669e9c455548c8f7c050a5d0e556c18822ac2371632ff72aaebdeee887a2f1aebe9b62cd261ec4b7e1824971f03c9b8edbbf4e219becf8071c3d30599f747262f522d0eb2d3b131451da636300d2f28d3a94ced157e47ff84b5b632fa2f7a219e", 0xbd) semop(r0, &(0x7f0000000000)=[{0x2, 0x8001}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 22:22:01 executing program 2: socket$rxrpc(0x21, 0x2, 0xa) unshare(0x8000400) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) pipe(&(0x7f0000000440)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x4, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000100), 0x10) mount(&(0x7f00000001c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='affs\x00', 0x200000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) fdatasync(r1) socket$key(0xf, 0x3, 0x2) 22:22:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:01 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 354.447519][ T3911] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 354.456182][ T3911] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x1000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:01 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x400000000011, r0, 0x10000000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) r3 = fcntl$dupfd(r2, 0x605, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000000)=0x3ff) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240)=0x1, 0x0) accept4$alg(r4, 0x0, 0x0, 0x800) 22:22:01 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 354.685655][ T3935] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 354.694618][ T3935] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:01 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x2000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:02 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000100)=0x2) fdatasync(r1) 22:22:02 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x4000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x40000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:02 executing program 1: pipe2(&(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x80ffffff, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:02 executing program 1: pipe2(&(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:02 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000000)=0x9) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e20, @rand_addr=0x400}}, [0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x8, 0x951, 0x7ff, 0x9, 0x0, 0x3, 0x4, 0x8000000000000000, 0xfffffffffffffffe]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0xffffffff}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r5, 0x9}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000100)={'bond0\x00', r6}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'batadv0\x00'}}, 0x1e) 22:22:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0xffffff7f, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:02 executing program 1: pipe2(&(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:02 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:02 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0xffffff80, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000240), 0x0) write$UHID_INPUT(r0, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 22:22:02 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x10000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:03 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x40030000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 1: pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x100000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x3, 0x800000000000000d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240), 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000140)={0x9, 0x6, 0xc68}) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x800, 0x1, 0x3}, 0x20) 22:22:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 1: pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:03 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x200000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 1: pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:03 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) add_key$keyring(&(0x7f0000000700)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) io_setup(0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000001c0)=""/135) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0x4}, 0x68) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) io_destroy(0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000340)) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000180), 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x7fffffff, 0x0, 0x3, 0x4}, &(0x7f0000000500)=0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080)=0x400, &(0x7f00000000c0)=0x1) r6 = memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000000)) socket(0x0, 0x80005, 0x0) 22:22:03 executing program 1: pipe2(&(0x7f0000000080), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 356.945588][ T4090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.953058][ T4090] IPv6: NLM_F_CREATE should be set when creating new route [ 356.960325][ T4090] IPv6: NLM_F_CREATE should be set when creating new route 22:22:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x4000000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) 22:22:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:22:03 executing program 1: pipe2(&(0x7f0000000080), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x8000000000000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:22:04 executing program 1: pipe2(&(0x7f0000000080), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:04 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) 22:22:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x80ffffff00000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:04 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea843029104000039000900220005001400000008000500140f081001f3678b80142314e9030b975668a5b16732009b1104b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) add_key$keyring(&(0x7f0000000700)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) io_setup(0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000001c0)=""/135) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0x4}, 0x68) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) io_destroy(0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000340)) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000180), 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x7fffffff, 0x0, 0x3, 0x4}, &(0x7f0000000500)=0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000240), 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080)=0x400, &(0x7f00000000c0)=0x1) r6 = memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000000)) socket(0x0, 0x80005, 0x0) 22:22:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:22:04 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 357.490022][ T4145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 22:22:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0xffffff7f00000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:04 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 22:22:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:04 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 357.747855][ C1] net_ratelimit: 20 callbacks suppressed [ 357.747863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 357.747886][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 357.753577][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 357.759293][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:22:05 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) 22:22:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 22:22:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0xffffffff00000000, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:05 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) 22:22:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:05 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:05 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 22:22:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x2, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:05 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:05 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 358.707871][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 358.713676][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 358.719452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 358.725464][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:22:05 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:05 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) 22:22:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:05 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:05 executing program 0 (fault-call:4 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 359.163373][ T4227] FAULT_INJECTION: forcing a failure. [ 359.163373][ T4227] name failslab, interval 1, probability 0, space 0, times 0 [ 359.187868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 359.191376][ T4227] CPU: 0 PID: 4227 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 359.193667][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 359.201031][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.201036][ T4227] Call Trace: [ 359.201062][ T4227] dump_stack+0x172/0x1f0 [ 359.201082][ T4227] should_fail.cold+0xa/0x15 [ 359.228953][ T4227] ? release_sock+0x156/0x1c0 [ 359.233620][ T4227] ? fault_create_debugfs_attr+0x180/0x180 [ 359.239402][ T4227] ? page_to_nid.part.0+0x20/0x20 [ 359.244406][ T4227] ? ___might_sleep+0x163/0x280 [ 359.249243][ T4227] __should_failslab+0x121/0x190 [ 359.254168][ T4227] should_failslab+0x9/0x14 [ 359.258646][ T4227] kmem_cache_alloc_node+0x268/0x740 [ 359.263943][ T4227] __alloc_skb+0xd5/0x5e0 [ 359.268272][ T4227] ? netdev_alloc_frag+0x1b0/0x1b0 [ 359.273385][ T4227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.279661][ T4227] ? netlink_autobind.isra.0+0x228/0x310 [ 359.285274][ T4227] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 359.291489][ T4227] netlink_sendmsg+0x972/0xd60 [ 359.296228][ T4227] ? netlink_unicast+0x710/0x710 [ 359.301158][ T4227] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 359.306702][ T4227] ? apparmor_socket_sendmsg+0x2a/0x30 [ 359.312166][ T4227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.318401][ T4227] ? security_socket_sendmsg+0x8d/0xc0 [ 359.323846][ T4227] ? netlink_unicast+0x710/0x710 [ 359.328767][ T4227] sock_sendmsg+0xd7/0x130 [ 359.333167][ T4227] ___sys_sendmsg+0x3e2/0x920 [ 359.337819][ T4227] ? copy_msghdr_from_user+0x440/0x440 [ 359.343247][ T4227] ? lock_downgrade+0x920/0x920 [ 359.348072][ T4227] ? __fget+0xa3/0x560 [ 359.352116][ T4227] ? __fget+0x384/0x560 [ 359.356269][ T4227] ? ksys_dup3+0x3e0/0x3e0 [ 359.360674][ T4227] ? get_pid_task+0xc9/0x190 [ 359.365246][ T4227] ? __fget_light+0x1a9/0x230 [ 359.370158][ T4227] ? __fdget+0x1b/0x20 [ 359.374201][ T4227] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.380520][ T4227] ? sockfd_lookup_light+0xcb/0x180 [ 359.385691][ T4227] __sys_sendmmsg+0x1bf/0x4d0 [ 359.390353][ T4227] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 359.395366][ T4227] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.401588][ T4227] ? fput_many+0x12c/0x1a0 [ 359.406018][ T4227] ? fput+0x1b/0x20 [ 359.409812][ T4227] ? ksys_write+0x1cf/0x290 [ 359.414287][ T4227] ? __ia32_sys_read+0xb0/0xb0 [ 359.419036][ T4227] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 359.425088][ T4227] __x64_sys_sendmmsg+0x9d/0x100 [ 359.430092][ T4227] do_syscall_64+0xfa/0x760 [ 359.434585][ T4227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.440460][ T4227] RIP: 0033:0x4598e9 [ 359.444326][ T4227] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:22:06 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 359.463901][ T4227] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 359.472293][ T4227] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 359.480247][ T4227] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 359.488191][ T4227] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 359.496134][ T4227] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 359.504083][ T4227] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 22:22:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:22:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x10, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:06 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:06 executing program 0 (fault-call:4 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) [ 359.657293][ T4247] FAULT_INJECTION: forcing a failure. [ 359.657293][ T4247] name failslab, interval 1, probability 0, space 0, times 0 [ 359.677586][ T4247] CPU: 0 PID: 4247 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 359.685062][ T4247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.695121][ T4247] Call Trace: [ 359.698410][ T4247] dump_stack+0x172/0x1f0 [ 359.702753][ T4247] should_fail.cold+0xa/0x15 [ 359.707334][ T4247] ? fault_create_debugfs_attr+0x180/0x180 [ 359.713119][ T4247] ? page_to_nid.part.0+0x20/0x20 [ 359.718118][ T4247] ? ___might_sleep+0x163/0x280 [ 359.722940][ T4247] __should_failslab+0x121/0x190 [ 359.727848][ T4247] should_failslab+0x9/0x14 [ 359.732318][ T4247] kmem_cache_alloc_node_trace+0x274/0x750 [ 359.738094][ T4247] ? kasan_unpoison_shadow+0x35/0x50 [ 359.743352][ T4247] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 359.749135][ T4247] __kmalloc_node_track_caller+0x3d/0x70 [ 359.754741][ T4247] __kmalloc_reserve.isra.0+0x40/0xf0 [ 359.760085][ T4247] __alloc_skb+0x10b/0x5e0 [ 359.764474][ T4247] ? netdev_alloc_frag+0x1b0/0x1b0 [ 359.769558][ T4247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.775769][ T4247] ? netlink_autobind.isra.0+0x228/0x310 [ 359.781377][ T4247] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 359.787592][ T4247] netlink_sendmsg+0x972/0xd60 [ 359.792444][ T4247] ? netlink_unicast+0x710/0x710 [ 359.797358][ T4247] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 359.802879][ T4247] ? apparmor_socket_sendmsg+0x2a/0x30 [ 359.808311][ T4247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.814522][ T4247] ? security_socket_sendmsg+0x8d/0xc0 [ 359.819952][ T4247] ? netlink_unicast+0x710/0x710 [ 359.824861][ T4247] sock_sendmsg+0xd7/0x130 [ 359.829250][ T4247] ___sys_sendmsg+0x3e2/0x920 [ 359.833896][ T4247] ? copy_msghdr_from_user+0x440/0x440 [ 359.839325][ T4247] ? lock_downgrade+0x920/0x920 [ 359.844152][ T4247] ? __fget+0xa3/0x560 [ 359.848196][ T4247] ? __fget+0x384/0x560 [ 359.852324][ T4247] ? ksys_dup3+0x3e0/0x3e0 [ 359.856714][ T4247] ? get_pid_task+0xc9/0x190 [ 359.861289][ T4247] ? __fget_light+0x1a9/0x230 [ 359.865947][ T4247] ? __fdget+0x1b/0x20 [ 359.870011][ T4247] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.876223][ T4247] ? sockfd_lookup_light+0xcb/0x180 [ 359.881395][ T4247] __sys_sendmmsg+0x1bf/0x4d0 [ 359.886043][ T4247] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 359.891043][ T4247] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.897253][ T4247] ? fput_many+0x12c/0x1a0 [ 359.901641][ T4247] ? fput+0x1b/0x20 [ 359.905421][ T4247] ? ksys_write+0x1cf/0x290 [ 359.909943][ T4247] ? __ia32_sys_read+0xb0/0xb0 [ 359.914678][ T4247] ? switch_fpu_return+0x1fa/0x4f0 [ 359.919761][ T4247] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 359.925802][ T4247] __x64_sys_sendmmsg+0x9d/0x100 [ 359.930717][ T4247] do_syscall_64+0xfa/0x760 [ 359.935204][ T4247] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.941066][ T4247] RIP: 0033:0x4598e9 [ 359.944943][ T4247] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.964618][ T4247] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 359.972997][ T4247] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 359.981047][ T4247] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 359.988991][ T4247] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 359.996934][ T4247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 360.004893][ T4247] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 22:22:06 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x4000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:06 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) 22:22:06 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) 22:22:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 22:22:07 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:07 executing program 0 (fault-call:4 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x34000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) [ 360.296781][ T4279] FAULT_INJECTION: forcing a failure. [ 360.296781][ T4279] name failslab, interval 1, probability 0, space 0, times 0 [ 360.313071][ T4279] CPU: 1 PID: 4279 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 360.320548][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.330610][ T4279] Call Trace: [ 360.333905][ T4279] dump_stack+0x172/0x1f0 [ 360.338249][ T4279] should_fail.cold+0xa/0x15 [ 360.342844][ T4279] ? debug_smp_processor_id+0x3c/0x214 [ 360.348309][ T4279] ? fault_create_debugfs_attr+0x180/0x180 [ 360.354115][ T4279] __should_failslab+0x121/0x190 [ 360.354151][ T4279] should_failslab+0x9/0x14 [ 360.363553][ T4279] kmem_cache_alloc+0x47/0x710 [ 360.363570][ T4279] ? lock_acquire+0x190/0x410 [ 360.363584][ T4279] ? netlink_deliver_tap+0x146/0xbf0 [ 360.363605][ T4279] skb_clone+0x154/0x3d0 [ 360.382516][ T4279] netlink_deliver_tap+0x94d/0xbf0 [ 360.387628][ T4279] netlink_unicast+0x5a2/0x710 [ 360.392391][ T4279] ? netlink_attachskb+0x7c0/0x7c0 [ 360.397499][ T4279] ? _copy_from_iter_full+0x25d/0x8a0 [ 360.402873][ T4279] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 360.408585][ T4279] ? __check_object_size+0x3d/0x437 [ 360.413761][ T4279] netlink_sendmsg+0x8a5/0xd60 [ 360.418511][ T4279] ? netlink_unicast+0x710/0x710 [ 360.423423][ T4279] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 360.428959][ T4279] ? apparmor_socket_sendmsg+0x2a/0x30 [ 360.434392][ T4279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.440607][ T4279] ? security_socket_sendmsg+0x8d/0xc0 [ 360.446037][ T4279] ? netlink_unicast+0x710/0x710 [ 360.450950][ T4279] sock_sendmsg+0xd7/0x130 [ 360.455340][ T4279] ___sys_sendmsg+0x3e2/0x920 [ 360.459992][ T4279] ? copy_msghdr_from_user+0x440/0x440 [ 360.465431][ T4279] ? lock_downgrade+0x920/0x920 [ 360.470288][ T4279] ? __fget+0xa3/0x560 [ 360.474371][ T4279] ? __fget+0x384/0x560 [ 360.478525][ T4279] ? ksys_dup3+0x3e0/0x3e0 [ 360.482935][ T4279] ? get_pid_task+0xc9/0x190 [ 360.487504][ T4279] ? __fget_light+0x1a9/0x230 [ 360.492163][ T4279] ? __fdget+0x1b/0x20 [ 360.496210][ T4279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.502431][ T4279] ? sockfd_lookup_light+0xcb/0x180 [ 360.507607][ T4279] __sys_sendmmsg+0x1bf/0x4d0 [ 360.512264][ T4279] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 360.517269][ T4279] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 360.523490][ T4279] ? fput_many+0x12c/0x1a0 [ 360.527879][ T4279] ? fput+0x1b/0x20 [ 360.531726][ T4279] ? ksys_write+0x1cf/0x290 [ 360.536206][ T4279] ? __ia32_sys_read+0xb0/0xb0 [ 360.540960][ T4279] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 360.547025][ T4279] __x64_sys_sendmmsg+0x9d/0x100 [ 360.551949][ T4279] do_syscall_64+0xfa/0x760 [ 360.556442][ T4279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.562313][ T4279] RIP: 0033:0x4598e9 [ 360.566192][ T4279] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.585779][ T4279] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 22:22:07 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 360.594183][ T4279] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 360.602135][ T4279] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 360.610254][ T4279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.618228][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 360.626170][ T4279] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 22:22:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 22:22:07 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:07 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:07 executing program 0 (fault-call:4 fault-nth:3): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x100000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:07 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:07 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) [ 361.069337][ T4300] FAULT_INJECTION: forcing a failure. [ 361.069337][ T4300] name failslab, interval 1, probability 0, space 0, times 0 [ 361.081981][ T4300] CPU: 0 PID: 4300 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 361.089428][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.099506][ T4300] Call Trace: [ 361.102822][ T4300] dump_stack+0x172/0x1f0 [ 361.107155][ T4300] should_fail.cold+0xa/0x15 [ 361.111744][ T4300] ? debug_smp_processor_id+0x3c/0x214 [ 361.117202][ T4300] ? fault_create_debugfs_attr+0x180/0x180 [ 361.123010][ T4300] __should_failslab+0x121/0x190 [ 361.127945][ T4300] should_failslab+0x9/0x14 [ 361.132449][ T4300] kmem_cache_alloc+0x47/0x710 [ 361.137211][ T4300] ? lock_acquire+0x190/0x410 [ 361.141940][ T4300] ? napi_disable+0xe0/0xe0 [ 361.146443][ T4300] skb_clone+0x154/0x3d0 [ 361.150678][ T4300] dev_queue_xmit_nit+0x342/0x990 [ 361.155743][ T4300] ? validate_xmit_xfrm+0x43c/0xf10 [ 361.160935][ T4300] ? __kmalloc_node_track_caller+0x3d/0x70 [ 361.166743][ T4300] dev_hard_start_xmit+0xbb/0x9c0 [ 361.171767][ T4300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.178020][ T4300] __dev_queue_xmit+0x2b15/0x3650 [ 361.183039][ T4300] ? __netlink_lookup+0x3fa/0x7b0 [ 361.188057][ T4300] ? __kasan_check_read+0x11/0x20 [ 361.193078][ T4300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.199311][ T4300] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 361.204607][ T4300] ? __copy_skb_header+0x250/0x550 [ 361.209904][ T4300] ? __skb_checksum_complete+0x3f0/0x3f0 [ 361.215536][ T4300] ? __kasan_check_write+0x14/0x20 [ 361.220641][ T4300] ? __skb_clone+0x5c8/0x820 [ 361.225226][ T4300] dev_queue_xmit+0x18/0x20 [ 361.229722][ T4300] ? dev_queue_xmit+0x18/0x20 [ 361.234393][ T4300] netlink_deliver_tap+0x8e2/0xbf0 [ 361.239510][ T4300] netlink_unicast+0x5a2/0x710 [ 361.244279][ T4300] ? netlink_attachskb+0x7c0/0x7c0 [ 361.249386][ T4300] ? _copy_from_iter_full+0x25d/0x8a0 [ 361.254769][ T4300] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 361.260507][ T4300] ? __check_object_size+0x3d/0x437 [ 361.265706][ T4300] netlink_sendmsg+0x8a5/0xd60 [ 361.270478][ T4300] ? netlink_unicast+0x710/0x710 [ 361.270492][ T4300] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 361.270504][ T4300] ? apparmor_socket_sendmsg+0x2a/0x30 [ 361.270524][ T4300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.280952][ T4300] ? security_socket_sendmsg+0x8d/0xc0 [ 361.280966][ T4300] ? netlink_unicast+0x710/0x710 [ 361.280981][ T4300] sock_sendmsg+0xd7/0x130 [ 361.280995][ T4300] ___sys_sendmsg+0x3e2/0x920 [ 361.281017][ T4300] ? copy_msghdr_from_user+0x440/0x440 [ 361.292654][ T4300] ? lock_downgrade+0x920/0x920 [ 361.292670][ T4300] ? __fget+0xa3/0x560 [ 361.292689][ T4300] ? __fget+0x384/0x560 [ 361.292704][ T4300] ? ksys_dup3+0x3e0/0x3e0 [ 361.292721][ T4300] ? get_pid_task+0xc9/0x190 [ 361.339548][ T4300] ? __fget_light+0x1a9/0x230 [ 361.344230][ T4300] ? __fdget+0x1b/0x20 [ 361.348314][ T4300] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.354552][ T4300] ? sockfd_lookup_light+0xcb/0x180 [ 361.359751][ T4300] __sys_sendmmsg+0x1bf/0x4d0 [ 361.364434][ T4300] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 361.369477][ T4300] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.375721][ T4300] ? fput_many+0x12c/0x1a0 [ 361.380136][ T4300] ? fput+0x1b/0x20 [ 361.383941][ T4300] ? ksys_write+0x1cf/0x290 [ 361.388437][ T4300] ? __ia32_sys_read+0xb0/0xb0 [ 361.393196][ T4300] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 361.399260][ T4300] __x64_sys_sendmmsg+0x9d/0x100 [ 361.404225][ T4300] do_syscall_64+0xfa/0x760 [ 361.408723][ T4300] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.414605][ T4300] RIP: 0033:0x4598e9 [ 361.418493][ T4300] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.438086][ T4300] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 361.446498][ T4300] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 361.454457][ T4300] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 361.462419][ T4300] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:22:08 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) [ 361.470386][ T4300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 361.478357][ T4300] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 22:22:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x400300, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:08 executing program 0 (fault-call:4 fault-nth:4): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:08 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:08 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 361.663523][ T4324] FAULT_INJECTION: forcing a failure. [ 361.663523][ T4324] name failslab, interval 1, probability 0, space 0, times 0 [ 361.676181][ T4324] CPU: 0 PID: 4324 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 361.683631][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.693698][ T4324] Call Trace: [ 361.697007][ T4324] dump_stack+0x172/0x1f0 [ 361.701343][ T4324] should_fail.cold+0xa/0x15 [ 361.705938][ T4324] ? fault_create_debugfs_attr+0x180/0x180 [ 361.711749][ T4324] ? run_filter+0x229/0x4f0 [ 361.716269][ T4324] ? __kasan_check_read+0x11/0x20 [ 361.721315][ T4324] __should_failslab+0x121/0x190 [ 361.722829][ T4328] FAULT_INJECTION: forcing a failure. [ 361.722829][ T4328] name failslab, interval 1, probability 0, space 0, times 0 [ 361.726244][ T4324] should_failslab+0x9/0x14 [ 361.726259][ T4324] kmem_cache_alloc+0x47/0x710 [ 361.726271][ T4324] ? packet_getname+0x5f0/0x5f0 [ 361.726288][ T4324] ? lock_downgrade+0x920/0x920 [ 361.757730][ T4324] skb_clone+0x154/0x3d0 [ 361.761964][ T4324] packet_rcv+0xde1/0x1420 [ 361.766374][ T4324] ? run_filter+0x4f0/0x4f0 [ 361.770869][ T4324] dev_queue_xmit_nit+0x222/0x990 [ 361.775892][ T4324] dev_hard_start_xmit+0xbb/0x9c0 [ 361.780922][ T4324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.787165][ T4324] __dev_queue_xmit+0x2b15/0x3650 [ 361.792286][ T4324] ? __netlink_lookup+0x3fa/0x7b0 [ 361.797305][ T4324] ? __kasan_check_read+0x11/0x20 [ 361.802324][ T4324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.808574][ T4324] ? netdev_core_pick_tx+0x2f0/0x2f0 22:22:08 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 361.813845][ T4324] ? __copy_skb_header+0x250/0x550 [ 361.818951][ T4324] ? __skb_checksum_complete+0x3f0/0x3f0 [ 361.824580][ T4324] ? __kasan_check_write+0x14/0x20 [ 361.829684][ T4324] ? __skb_clone+0x5c8/0x820 [ 361.834270][ T4324] dev_queue_xmit+0x18/0x20 [ 361.838761][ T4324] ? dev_queue_xmit+0x18/0x20 [ 361.843431][ T4324] netlink_deliver_tap+0x8e2/0xbf0 [ 361.848539][ T4324] netlink_unicast+0x5a2/0x710 [ 361.853301][ T4324] ? netlink_attachskb+0x7c0/0x7c0 [ 361.858403][ T4324] ? _copy_from_iter_full+0x25d/0x8a0 [ 361.863770][ T4324] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 361.869480][ T4324] ? __check_object_size+0x3d/0x437 [ 361.874672][ T4324] netlink_sendmsg+0x8a5/0xd60 [ 361.879435][ T4324] ? netlink_unicast+0x710/0x710 [ 361.884375][ T4324] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 361.889930][ T4324] ? apparmor_socket_sendmsg+0x2a/0x30 [ 361.895385][ T4324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.901620][ T4324] ? security_socket_sendmsg+0x8d/0xc0 [ 361.907089][ T4324] ? netlink_unicast+0x710/0x710 [ 361.912022][ T4324] sock_sendmsg+0xd7/0x130 [ 361.916432][ T4324] ___sys_sendmsg+0x3e2/0x920 [ 361.921106][ T4324] ? copy_msghdr_from_user+0x440/0x440 [ 361.926551][ T4324] ? lock_downgrade+0x920/0x920 [ 361.931392][ T4324] ? __fget+0xa3/0x560 [ 361.935454][ T4324] ? __fget+0x384/0x560 [ 361.939605][ T4324] ? ksys_dup3+0x3e0/0x3e0 [ 361.944010][ T4324] ? get_pid_task+0xc9/0x190 [ 361.948591][ T4324] ? __fget_light+0x1a9/0x230 [ 361.953256][ T4324] ? __fdget+0x1b/0x20 [ 361.957331][ T4324] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.963560][ T4324] ? sockfd_lookup_light+0xcb/0x180 [ 361.968747][ T4324] __sys_sendmmsg+0x1bf/0x4d0 [ 361.973415][ T4324] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 361.978442][ T4324] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.984673][ T4324] ? fput_many+0x12c/0x1a0 [ 361.989075][ T4324] ? fput+0x1b/0x20 [ 361.992882][ T4324] ? ksys_write+0x1cf/0x290 [ 361.997374][ T4324] ? __ia32_sys_read+0xb0/0xb0 [ 362.002128][ T4324] ? switch_fpu_return+0x1fa/0x4f0 [ 362.007231][ T4324] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 362.013290][ T4324] __x64_sys_sendmmsg+0x9d/0x100 [ 362.018230][ T4324] do_syscall_64+0xfa/0x760 [ 362.022726][ T4324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.028620][ T4324] RIP: 0033:0x4598e9 [ 362.032503][ T4324] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.052087][ T4324] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.060497][ T4324] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 362.068452][ T4324] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 362.076403][ T4324] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.084354][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 362.092308][ T4324] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 [ 362.100279][ T4328] CPU: 1 PID: 4328 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 362.107724][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.107729][ T4328] Call Trace: [ 362.107753][ T4328] dump_stack+0x172/0x1f0 [ 362.121047][ T4328] should_fail.cold+0xa/0x15 [ 362.121063][ T4328] ? release_sock+0x156/0x1c0 [ 362.129930][ T4328] ? fault_create_debugfs_attr+0x180/0x180 [ 362.129945][ T4328] ? page_to_nid.part.0+0x20/0x20 [ 362.129960][ T4328] ? ___might_sleep+0x163/0x280 [ 362.129974][ T4328] __should_failslab+0x121/0x190 [ 362.129986][ T4328] should_failslab+0x9/0x14 [ 362.130003][ T4328] kmem_cache_alloc_node+0x268/0x740 [ 362.140435][ T4328] __alloc_skb+0xd5/0x5e0 [ 362.140451][ T4328] ? netdev_alloc_frag+0x1b0/0x1b0 [ 362.140472][ T4328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.140486][ T4328] ? netlink_autobind.isra.0+0x228/0x310 [ 362.140499][ T4328] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 362.140514][ T4328] netlink_sendmsg+0x972/0xd60 [ 362.197203][ T4328] ? netlink_unicast+0x710/0x710 [ 362.202136][ T4328] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 362.207683][ T4328] ? apparmor_socket_sendmsg+0x2a/0x30 [ 362.213134][ T4328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.219365][ T4328] ? security_socket_sendmsg+0x8d/0xc0 [ 362.224818][ T4328] ? netlink_unicast+0x710/0x710 [ 362.229756][ T4328] sock_sendmsg+0xd7/0x130 [ 362.234168][ T4328] ___sys_sendmsg+0x3e2/0x920 [ 362.238847][ T4328] ? copy_msghdr_from_user+0x440/0x440 [ 362.244300][ T4328] ? lock_downgrade+0x920/0x920 [ 362.249147][ T4328] ? __fget+0xa3/0x560 [ 362.253215][ T4328] ? __fget+0x384/0x560 [ 362.257369][ T4328] ? ksys_dup3+0x3e0/0x3e0 [ 362.261785][ T4328] ? get_pid_task+0xc9/0x190 [ 362.266379][ T4328] ? __fget_light+0x1a9/0x230 [ 362.271051][ T4328] ? __fdget+0x1b/0x20 [ 362.275096][ T4328] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 362.281310][ T4328] ? sockfd_lookup_light+0xcb/0x180 [ 362.286482][ T4328] __sys_sendmmsg+0x1bf/0x4d0 [ 362.291137][ T4328] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 362.296150][ T4328] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.302387][ T4328] ? fput_many+0x12c/0x1a0 [ 362.306804][ T4328] ? fput+0x1b/0x20 [ 362.310608][ T4328] ? ksys_write+0x1cf/0x290 [ 362.315108][ T4328] ? __ia32_sys_read+0xb0/0xb0 [ 362.319868][ T4328] ? switch_fpu_return+0x1fa/0x4f0 [ 362.324966][ T4328] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 362.331008][ T4328] __x64_sys_sendmmsg+0x9d/0x100 [ 362.335923][ T4328] do_syscall_64+0xfa/0x760 [ 362.340412][ T4328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.346280][ T4328] RIP: 0033:0x4598e9 [ 362.350147][ T4328] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.369727][ T4328] RSP: 002b:00007f3f63e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.378118][ T4328] RAX: ffffffffffffffda RBX: 00007f3f63e97c90 RCX: 00000000004598e9 [ 362.386113][ T4328] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 362.394059][ T4328] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.402014][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f63e986d4 22:22:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x1000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:09 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:09 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x8, 0xa}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x48, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x44000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001900050bed0080647e6394f20100d2000500f83711407f480f0003000b00100002000092411756ab5764", 0x2e}], 0x1}, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f00000005c0)="da9cdf2654d977f2b979158325fc54dd8af6af77e6e65cdad7aa12c3d922b20235a02be00a34b38ac1f0bb0fb9dc22880e5809aa8b20a4d959570841ddc714abfb1795d6219febebc7473fa7999e46df8c6dacd3730977a56691", 0x233}], 0x1045) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000380)={0x100000000, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, 0x0) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f00000004c0)="18c880d1f852ba8fe9e8b32ba3bea9516603490669a76e5d0407785cc152e307a16431616d2f8f23a2b208abccdb83af8c") ioctl$PPPIOCSMRRU(r6, 0x4004743b, 0x0) r7 = syz_open_dev$admmidi(0x0, 0x0, 0x82100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000240), 0x0) setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, &(0x7f0000000200)=0x80000001, 0x4) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 362.409970][ T4328] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 22:22:09 executing program 0 (fault-call:4 fault-nth:5): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:09 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x2000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 362.510174][ T4343] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 362.544053][ T4343] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 362.586818][ T4349] FAULT_INJECTION: forcing a failure. [ 362.586818][ T4349] name failslab, interval 1, probability 0, space 0, times 0 [ 362.604197][ T4346] FAULT_INJECTION: forcing a failure. [ 362.604197][ T4346] name failslab, interval 1, probability 0, space 0, times 0 [ 362.616109][ T4349] CPU: 1 PID: 4349 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 362.624222][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.634271][ T4349] Call Trace: [ 362.637573][ T4349] dump_stack+0x172/0x1f0 [ 362.641904][ T4349] should_fail.cold+0xa/0x15 [ 362.646486][ T4349] ? fault_create_debugfs_attr+0x180/0x180 [ 362.652282][ T4349] ? page_to_nid.part.0+0x20/0x20 [ 362.657296][ T4349] ? ___might_sleep+0x163/0x280 [ 362.662138][ T4349] __should_failslab+0x121/0x190 [ 362.667064][ T4349] should_failslab+0x9/0x14 [ 362.671572][ T4349] kmem_cache_alloc_node_trace+0x274/0x750 [ 362.677370][ T4349] ? kasan_unpoison_shadow+0x35/0x50 [ 362.682646][ T4349] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 362.688447][ T4349] __kmalloc_node_track_caller+0x3d/0x70 [ 362.694073][ T4349] __kmalloc_reserve.isra.0+0x40/0xf0 [ 362.699442][ T4349] __alloc_skb+0x10b/0x5e0 [ 362.703851][ T4349] ? netdev_alloc_frag+0x1b0/0x1b0 [ 362.708956][ T4349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.715189][ T4349] ? netlink_autobind.isra.0+0x228/0x310 [ 362.720819][ T4349] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 362.727051][ T4349] netlink_sendmsg+0x972/0xd60 [ 362.731813][ T4349] ? netlink_unicast+0x710/0x710 [ 362.736742][ T4349] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 362.742279][ T4349] ? apparmor_socket_sendmsg+0x2a/0x30 [ 362.747744][ T4349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.753972][ T4349] ? security_socket_sendmsg+0x8d/0xc0 [ 362.759440][ T4349] ? netlink_unicast+0x710/0x710 [ 362.764364][ T4349] sock_sendmsg+0xd7/0x130 [ 362.768767][ T4349] ___sys_sendmsg+0x3e2/0x920 [ 362.773433][ T4349] ? copy_msghdr_from_user+0x440/0x440 [ 362.778882][ T4349] ? lock_downgrade+0x920/0x920 [ 362.783722][ T4349] ? __fget+0xa3/0x560 [ 362.787779][ T4349] ? __fget+0x384/0x560 [ 362.791927][ T4349] ? ksys_dup3+0x3e0/0x3e0 [ 362.796327][ T4349] ? get_pid_task+0xc9/0x190 [ 362.800906][ T4349] ? __fget_light+0x1a9/0x230 [ 362.805566][ T4349] ? __fdget+0x1b/0x20 [ 362.809624][ T4349] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 362.815843][ T4349] ? sockfd_lookup_light+0xcb/0x180 [ 362.821029][ T4349] __sys_sendmmsg+0x1bf/0x4d0 [ 362.825692][ T4349] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 362.830715][ T4349] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.836946][ T4349] ? fput_many+0x12c/0x1a0 [ 362.841347][ T4349] ? fput+0x1b/0x20 [ 362.845147][ T4349] ? ksys_write+0x1cf/0x290 [ 362.849647][ T4349] ? __ia32_sys_read+0xb0/0xb0 [ 362.854399][ T4349] ? switch_fpu_return+0x1fa/0x4f0 [ 362.859498][ T4349] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 362.865560][ T4349] __x64_sys_sendmmsg+0x9d/0x100 [ 362.870488][ T4349] do_syscall_64+0xfa/0x760 [ 362.874986][ T4349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.880863][ T4349] RIP: 0033:0x4598e9 [ 362.884738][ T4349] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.904322][ T4349] RSP: 002b:00007f3f63e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.912720][ T4349] RAX: ffffffffffffffda RBX: 00007f3f63e97c90 RCX: 00000000004598e9 [ 362.920678][ T4349] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 362.928633][ T4349] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.936591][ T4349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f63e986d4 [ 362.944545][ T4349] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 [ 362.952519][ T4346] CPU: 0 PID: 4346 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 362.952707][ C1] net_ratelimit: 18 callbacks suppressed [ 362.952713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 362.959961][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.959966][ T4346] Call Trace: [ 362.959982][ T4346] dump_stack+0x172/0x1f0 [ 362.959999][ T4346] should_fail.cold+0xa/0x15 [ 362.965645][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 362.971349][ T4346] ? tc_new_tfilter+0x6e1/0x1c70 [ 362.971366][ T4346] ? fault_create_debugfs_attr+0x180/0x180 [ 362.981501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 362.984693][ T4346] ? page_to_nid.part.0+0x20/0x20 [ 362.989022][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 362.993551][ T4346] ? ___might_sleep+0x163/0x280 [ 363.020650][ T4346] __should_failslab+0x121/0x190 22:22:09 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 363.020667][ T4346] should_failslab+0x9/0x14 [ 363.031187][ T4346] kmem_cache_alloc_trace+0x2d3/0x790 [ 363.031204][ T4346] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 363.031220][ T4346] ? tcf_chain_tp_find+0x1bb/0x350 [ 363.056771][ T4346] tc_new_tfilter+0xeb2/0x1c70 [ 363.061533][ T4346] ? tc_del_tfilter+0x1530/0x1530 [ 363.066556][ T4346] ? refcount_dec_not_one+0x1f0/0x1f0 [ 363.071953][ T4346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.078186][ T4346] ? debug_smp_processor_id+0x3c/0x214 [ 363.083645][ T4346] ? perf_trace_lock_acquire+0xf5/0x530 22:22:09 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 363.089198][ T4346] ? refcount_dec_and_test_checked+0x1b/0x20 [ 363.095181][ T4346] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 363.101471][ T4346] ? rtnetlink_rcv_msg+0x7f2/0xb00 [ 363.106584][ T4346] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 363.111691][ T4346] ? __netlink_ns_capable+0x104/0x140 [ 363.117067][ T4346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.123304][ T4346] ? tc_del_tfilter+0x1530/0x1530 [ 363.128327][ T4346] rtnetlink_rcv_msg+0x838/0xb00 [ 363.133261][ T4346] ? rtnetlink_put_metrics+0x580/0x580 22:22:10 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 363.138711][ T4346] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 363.143994][ T4346] ? __copy_skb_header+0x250/0x550 [ 363.149105][ T4346] netlink_rcv_skb+0x177/0x450 [ 363.153861][ T4346] ? rtnetlink_put_metrics+0x580/0x580 [ 363.159323][ T4346] ? netlink_ack+0xb30/0xb30 [ 363.163915][ T4346] ? netlink_deliver_tap+0x254/0xbf0 [ 363.169289][ T4346] rtnetlink_rcv+0x1d/0x30 [ 363.173700][ T4346] netlink_unicast+0x531/0x710 [ 363.178468][ T4346] ? netlink_attachskb+0x7c0/0x7c0 [ 363.183580][ T4346] ? _copy_from_iter_full+0x25d/0x8a0 [ 363.188954][ T4346] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 363.194667][ T4346] ? __check_object_size+0x3d/0x437 [ 363.199862][ T4346] netlink_sendmsg+0x8a5/0xd60 [ 363.204621][ T4346] ? netlink_unicast+0x710/0x710 [ 363.209554][ T4346] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 363.215098][ T4346] ? apparmor_socket_sendmsg+0x2a/0x30 [ 363.220561][ T4346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.226790][ T4346] ? security_socket_sendmsg+0x8d/0xc0 [ 363.232260][ T4346] ? netlink_unicast+0x710/0x710 22:22:10 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 363.237192][ T4346] sock_sendmsg+0xd7/0x130 [ 363.241616][ T4346] ___sys_sendmsg+0x3e2/0x920 [ 363.246297][ T4346] ? copy_msghdr_from_user+0x440/0x440 [ 363.251756][ T4346] ? lock_downgrade+0x920/0x920 [ 363.256608][ T4346] ? __fget+0xa3/0x560 [ 363.260681][ T4346] ? __fget+0x384/0x560 [ 363.264856][ T4346] ? ksys_dup3+0x3e0/0x3e0 [ 363.269266][ T4346] ? get_pid_task+0xc9/0x190 [ 363.273851][ T4346] ? __fget_light+0x1a9/0x230 [ 363.278530][ T4346] ? __fdget+0x1b/0x20 [ 363.282587][ T4346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 22:22:10 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 363.288816][ T4346] ? sockfd_lookup_light+0xcb/0x180 [ 363.294014][ T4346] __sys_sendmmsg+0x1bf/0x4d0 [ 363.298701][ T4346] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 363.298728][ T4346] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 363.309936][ T4346] ? fput_many+0x12c/0x1a0 [ 363.314347][ T4346] ? fput+0x1b/0x20 [ 363.318159][ T4346] ? ksys_write+0x1cf/0x290 [ 363.322658][ T4346] ? __ia32_sys_read+0xb0/0xb0 [ 363.327414][ T4346] ? switch_fpu_return+0x1fa/0x4f0 [ 363.332530][ T4346] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 22:22:10 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 363.338599][ T4346] __x64_sys_sendmmsg+0x9d/0x100 [ 363.343637][ T4346] do_syscall_64+0xfa/0x760 [ 363.348145][ T4346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.354034][ T4346] RIP: 0033:0x4598e9 [ 363.357918][ T4346] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.377515][ T4346] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 22:22:10 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) [ 363.385925][ T4346] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 363.393898][ T4346] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 363.401861][ T4346] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.409826][ T4346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 363.417786][ T4346] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 [ 363.447001][ T4343] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:22:10 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 363.493953][ T4343] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.507873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 363.513726][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 363.555265][ T4379] FAULT_INJECTION: forcing a failure. [ 363.555265][ T4379] name failslab, interval 1, probability 0, space 0, times 0 [ 363.572407][ T4379] CPU: 0 PID: 4379 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 363.579956][ T4379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.590001][ T4379] Call Trace: [ 363.593286][ T4379] dump_stack+0x172/0x1f0 [ 363.597595][ T4379] should_fail.cold+0xa/0x15 [ 363.602162][ T4379] ? debug_smp_processor_id+0x3c/0x214 [ 363.607593][ T4379] ? fault_create_debugfs_attr+0x180/0x180 [ 363.613376][ T4379] __should_failslab+0x121/0x190 [ 363.618288][ T4379] should_failslab+0x9/0x14 [ 363.622763][ T4379] kmem_cache_alloc+0x47/0x710 [ 363.627521][ T4379] ? lock_acquire+0x190/0x410 [ 363.632171][ T4379] ? netlink_deliver_tap+0x146/0xbf0 [ 363.637431][ T4379] skb_clone+0x154/0x3d0 [ 363.641667][ T4379] netlink_deliver_tap+0x94d/0xbf0 [ 363.646757][ T4379] netlink_unicast+0x5a2/0x710 [ 363.651496][ T4379] ? netlink_attachskb+0x7c0/0x7c0 [ 363.656699][ T4379] ? _copy_from_iter_full+0x25d/0x8a0 [ 363.662045][ T4379] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 363.667735][ T4379] ? __check_object_size+0x3d/0x437 [ 363.672917][ T4379] netlink_sendmsg+0x8a5/0xd60 [ 363.677657][ T4379] ? netlink_unicast+0x710/0x710 [ 363.682566][ T4379] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 363.688089][ T4379] ? apparmor_socket_sendmsg+0x2a/0x30 [ 363.693520][ T4379] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.699743][ T4379] ? security_socket_sendmsg+0x8d/0xc0 [ 363.705172][ T4379] ? netlink_unicast+0x710/0x710 [ 363.710083][ T4379] sock_sendmsg+0xd7/0x130 [ 363.714473][ T4379] ___sys_sendmsg+0x3e2/0x920 [ 363.719152][ T4379] ? copy_msghdr_from_user+0x440/0x440 [ 363.724583][ T4379] ? lock_downgrade+0x920/0x920 [ 363.729405][ T4379] ? __fget+0xa3/0x560 [ 363.733456][ T4379] ? __fget+0x384/0x560 [ 363.737584][ T4379] ? ksys_dup3+0x3e0/0x3e0 [ 363.741986][ T4379] ? get_pid_task+0xc9/0x190 [ 363.746547][ T4379] ? __fget_light+0x1a9/0x230 [ 363.751196][ T4379] ? __fdget+0x1b/0x20 [ 363.755237][ T4379] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.761448][ T4379] ? sockfd_lookup_light+0xcb/0x180 [ 363.766618][ T4379] __sys_sendmmsg+0x1bf/0x4d0 [ 363.771269][ T4379] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 363.776281][ T4379] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 363.782504][ T4379] ? fput_many+0x12c/0x1a0 [ 363.786892][ T4379] ? fput+0x1b/0x20 [ 363.790689][ T4379] ? ksys_write+0x1cf/0x290 [ 363.795166][ T4379] ? __ia32_sys_read+0xb0/0xb0 [ 363.799900][ T4379] ? switch_fpu_return+0x1fa/0x4f0 [ 363.804986][ T4379] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 363.811024][ T4379] __x64_sys_sendmmsg+0x9d/0x100 [ 363.815933][ T4379] do_syscall_64+0xfa/0x760 [ 363.820407][ T4379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.826266][ T4379] RIP: 0033:0x4598e9 [ 363.830132][ T4379] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.849702][ T4379] RSP: 002b:00007f3f63e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 363.858082][ T4379] RAX: ffffffffffffffda RBX: 00007f3f63e97c90 RCX: 00000000004598e9 [ 363.866022][ T4379] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 363.873964][ T4379] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.881920][ T4379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f63e986d4 [ 363.889872][ T4379] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 22:22:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a73ff0)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "ac8562c0ce461f088a5bd9d004969e5eaff3dd36"}, 0x15, 0x6) write$sndseq(r0, &(0x7f0000000000)=[{0x5b94, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x30) 22:22:10 executing program 0 (fault-call:4 fault-nth:6): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x4000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:10 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 363.907896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 363.913703][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 363.960399][ T4383] FAULT_INJECTION: forcing a failure. [ 363.960399][ T4383] name failslab, interval 1, probability 0, space 0, times 0 [ 363.986106][ T4383] CPU: 1 PID: 4383 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 363.993592][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.003636][ T4383] Call Trace: 22:22:10 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 364.006928][ T4383] dump_stack+0x172/0x1f0 [ 364.011258][ T4383] should_fail.cold+0xa/0x15 [ 364.015861][ T4383] ? fault_create_debugfs_attr+0x180/0x180 [ 364.021670][ T4383] ? page_to_nid.part.0+0x20/0x20 [ 364.026692][ T4383] ? ___might_sleep+0x163/0x280 [ 364.031541][ T4383] __should_failslab+0x121/0x190 [ 364.036476][ T4383] should_failslab+0x9/0x14 [ 364.040970][ T4383] kmem_cache_alloc_trace+0x2d3/0x790 [ 364.046337][ T4383] ? do_raw_read_unlock+0x3f/0x70 [ 364.051358][ T4383] ? _raw_read_unlock+0x2d/0x50 [ 364.056201][ T4383] ? lockdep_init_map+0x1be/0x6d0 [ 364.056284][ T4383] tcindex_init+0x44/0x140 [ 364.065616][ T4383] tc_new_tfilter+0x1097/0x1c70 [ 364.070467][ T4383] ? tc_del_tfilter+0x1530/0x1530 [ 364.070484][ T4383] ? lock_acquire+0x190/0x410 [ 364.070500][ T4383] ? rcu_preempt_deferred_qs_irqrestore+0x1fc/0xd60 [ 364.070517][ T4383] ? rtnetlink_rcv_msg+0x7f2/0xb00 [ 364.070537][ T4383] ? __rcu_read_unlock+0x220/0x6b0 [ 364.096939][ T4383] ? tc_del_tfilter+0x1530/0x1530 [ 364.101967][ T4383] rtnetlink_rcv_msg+0x838/0xb00 [ 364.106903][ T4383] ? rtnetlink_put_metrics+0x580/0x580 [ 364.112366][ T4383] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 364.117654][ T4383] ? __copy_skb_header+0x250/0x550 [ 364.122764][ T4383] netlink_rcv_skb+0x177/0x450 [ 364.127519][ T4383] ? rtnetlink_put_metrics+0x580/0x580 [ 364.132971][ T4383] ? netlink_ack+0xb30/0xb30 [ 364.137566][ T4383] ? netlink_deliver_tap+0x254/0xbf0 [ 364.142851][ T4383] rtnetlink_rcv+0x1d/0x30 [ 364.147270][ T4383] netlink_unicast+0x531/0x710 [ 364.147866][ C0] protocol 88fb is buggy, dev hsr_slave_0 22:22:11 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 364.152021][ T4383] ? netlink_attachskb+0x7c0/0x7c0 [ 364.152038][ T4383] ? _copy_from_iter_full+0x25d/0x8a0 [ 364.157767][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 364.162811][ T4383] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 364.162824][ T4383] ? __check_object_size+0x3d/0x437 [ 364.162838][ T4383] netlink_sendmsg+0x8a5/0xd60 [ 364.162856][ T4383] ? netlink_unicast+0x710/0x710 [ 364.194416][ T4383] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 364.199960][ T4383] ? apparmor_socket_sendmsg+0x2a/0x30 [ 364.205414][ T4383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.205429][ T4383] ? security_socket_sendmsg+0x8d/0xc0 [ 364.205448][ T4383] ? netlink_unicast+0x710/0x710 [ 364.222089][ T4383] sock_sendmsg+0xd7/0x130 [ 364.222105][ T4383] ___sys_sendmsg+0x3e2/0x920 [ 364.222137][ T4383] ? copy_msghdr_from_user+0x440/0x440 [ 364.236640][ T4383] ? lock_downgrade+0x920/0x920 [ 364.241487][ T4383] ? __fget+0xa3/0x560 [ 364.245563][ T4383] ? __fget+0x384/0x560 [ 364.249723][ T4383] ? ksys_dup3+0x3e0/0x3e0 [ 364.254150][ T4383] ? get_pid_task+0xc9/0x190 [ 364.258738][ T4383] ? __fget_light+0x1a9/0x230 [ 364.263412][ T4383] ? __fdget+0x1b/0x20 [ 364.267483][ T4383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.273721][ T4383] ? sockfd_lookup_light+0xcb/0x180 [ 364.278894][ T4383] __sys_sendmmsg+0x1bf/0x4d0 [ 364.283547][ T4383] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 364.288570][ T4383] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 364.294804][ T4383] ? fput_many+0x12c/0x1a0 [ 364.299216][ T4383] ? fput+0x1b/0x20 [ 364.302998][ T4383] ? ksys_write+0x1cf/0x290 [ 364.307471][ T4383] ? __ia32_sys_read+0xb0/0xb0 [ 364.312209][ T4383] ? switch_fpu_return+0x1fa/0x4f0 [ 364.317296][ T4383] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 364.323341][ T4383] __x64_sys_sendmmsg+0x9d/0x100 [ 364.328264][ T4383] do_syscall_64+0xfa/0x760 [ 364.332756][ T4383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.338621][ T4383] RIP: 0033:0x4598e9 [ 364.342490][ T4383] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:22:11 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 364.362089][ T4383] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.370477][ T4383] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 364.378431][ T4383] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 364.386399][ T4383] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 364.394353][ T4383] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 364.402296][ T4383] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 22:22:11 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) 22:22:11 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 364.448967][ T4400] FAULT_INJECTION: forcing a failure. [ 364.448967][ T4400] name failslab, interval 1, probability 0, space 0, times 0 [ 364.461696][ T4400] CPU: 1 PID: 4400 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 364.469143][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.479188][ T4400] Call Trace: [ 364.482480][ T4400] dump_stack+0x172/0x1f0 [ 364.486813][ T4400] should_fail.cold+0xa/0x15 [ 364.491421][ T4400] ? debug_smp_processor_id+0x3c/0x214 [ 364.496871][ T4400] ? fault_create_debugfs_attr+0x180/0x180 [ 364.496896][ T4400] __should_failslab+0x121/0x190 [ 364.507593][ T4400] should_failslab+0x9/0x14 [ 364.512175][ T4400] kmem_cache_alloc+0x47/0x710 [ 364.516934][ T4400] ? lock_acquire+0x190/0x410 [ 364.521593][ T4400] ? napi_disable+0xe0/0xe0 [ 364.521614][ T4400] skb_clone+0x154/0x3d0 [ 364.521629][ T4400] dev_queue_xmit_nit+0x342/0x990 [ 364.521647][ T4400] ? validate_xmit_xfrm+0x43c/0xf10 [ 364.521661][ T4400] ? __kmalloc_node_track_caller+0x3d/0x70 [ 364.521677][ T4400] dev_hard_start_xmit+0xbb/0x9c0 [ 364.521692][ T4400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.521708][ T4400] __dev_queue_xmit+0x2b15/0x3650 [ 364.551375][ T4400] ? __netlink_lookup+0x3fa/0x7b0 [ 364.551392][ T4400] ? __kasan_check_read+0x11/0x20 [ 364.551409][ T4400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.551428][ T4400] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 364.551442][ T4400] ? __copy_skb_header+0x250/0x550 [ 364.551458][ T4400] ? __skb_checksum_complete+0x3f0/0x3f0 [ 364.551477][ T4400] ? __kasan_check_write+0x14/0x20 [ 364.551490][ T4400] ? __skb_clone+0x5c8/0x820 [ 364.551506][ T4400] dev_queue_xmit+0x18/0x20 [ 364.551518][ T4400] ? dev_queue_xmit+0x18/0x20 [ 364.551529][ T4400] netlink_deliver_tap+0x8e2/0xbf0 [ 364.551547][ T4400] netlink_unicast+0x5a2/0x710 [ 364.589356][ T4400] ? netlink_attachskb+0x7c0/0x7c0 [ 364.589370][ T4400] ? _copy_from_iter_full+0x25d/0x8a0 [ 364.589387][ T4400] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 364.589400][ T4400] ? __check_object_size+0x3d/0x437 [ 364.589418][ T4400] netlink_sendmsg+0x8a5/0xd60 22:22:11 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) socket$isdn_base(0x22, 0x3, 0x0) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) [ 364.649948][ T4400] ? netlink_unicast+0x710/0x710 [ 364.649964][ T4400] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 364.649980][ T4400] ? apparmor_socket_sendmsg+0x2a/0x30 [ 364.650000][ T4400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.672082][ T4400] ? security_socket_sendmsg+0x8d/0xc0 [ 364.672096][ T4400] ? netlink_unicast+0x710/0x710 [ 364.672111][ T4400] sock_sendmsg+0xd7/0x130 [ 364.672125][ T4400] ___sys_sendmsg+0x3e2/0x920 [ 364.672140][ T4400] ? copy_msghdr_from_user+0x440/0x440 [ 364.672153][ T4400] ? lock_downgrade+0x920/0x920 [ 364.672168][ T4400] ? __fget+0xa3/0x560 [ 364.705898][ T4400] ? __fget+0x384/0x560 [ 364.710055][ T4400] ? ksys_dup3+0x3e0/0x3e0 [ 364.714475][ T4400] ? get_pid_task+0xc9/0x190 [ 364.719071][ T4400] ? __fget_light+0x1a9/0x230 [ 364.723744][ T4400] ? __fdget+0x1b/0x20 [ 364.727810][ T4400] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.734058][ T4400] ? sockfd_lookup_light+0xcb/0x180 [ 364.739257][ T4400] __sys_sendmmsg+0x1bf/0x4d0 [ 364.743933][ T4400] ? __ia32_sys_sendmsg+0xb0/0xb0 22:22:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x40000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 364.748976][ T4400] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 364.755214][ T4400] ? fput_many+0x12c/0x1a0 [ 364.759627][ T4400] ? fput+0x1b/0x20 [ 364.763433][ T4400] ? ksys_write+0x1cf/0x290 [ 364.767933][ T4400] ? __ia32_sys_read+0xb0/0xb0 [ 364.767951][ T4400] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 364.767969][ T4400] __x64_sys_sendmmsg+0x9d/0x100 [ 364.767988][ T4400] do_syscall_64+0xfa/0x760 [ 364.778778][ T4400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.778789][ T4400] RIP: 0033:0x4598e9 [ 364.778804][ T4400] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.778816][ T4400] RSP: 002b:00007f3f63e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.778830][ T4400] RAX: ffffffffffffffda RBX: 00007f3f63e97c90 RCX: 00000000004598e9 [ 364.778838][ T4400] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 364.778845][ T4400] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:22:11 executing program 0 (fault-call:4 fault-nth:7): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:11 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 364.778853][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f63e986d4 [ 364.778861][ T4400] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 [ 364.872130][ T4417] FAULT_INJECTION: forcing a failure. [ 364.872130][ T4417] name failslab, interval 1, probability 0, space 0, times 0 [ 364.885027][ T4417] CPU: 0 PID: 4417 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 364.892484][ T4417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.902526][ T4417] Call Trace: [ 364.902550][ T4417] dump_stack+0x172/0x1f0 [ 364.902569][ T4417] should_fail.cold+0xa/0x15 [ 364.902588][ T4417] ? fault_create_debugfs_attr+0x180/0x180 [ 364.910182][ T4417] ? page_to_nid.part.0+0x20/0x20 [ 364.925539][ T4417] ? ___might_sleep+0x163/0x280 [ 364.925555][ T4417] __should_failslab+0x121/0x190 [ 364.925568][ T4417] should_failslab+0x9/0x14 [ 364.925580][ T4417] kmem_cache_alloc_trace+0x2d3/0x790 [ 364.925598][ T4417] tcindex_set_parms+0x144/0x1e50 [ 364.939813][ T4417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.939828][ T4417] ? debug_smp_processor_id+0x3c/0x214 [ 364.939842][ T4417] ? debug_smp_processor_id+0x3c/0x214 [ 364.939855][ T4417] ? tcindex_alloc_perfect_hash+0x320/0x320 [ 364.939871][ T4417] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 364.946125][ T4420] FAULT_INJECTION: forcing a failure. [ 364.946125][ T4420] name failslab, interval 1, probability 0, space 0, times 0 [ 364.950211][ T4417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.950224][ T4417] ? __nla_validate_parse+0x2d0/0x1ed0 [ 364.950241][ T4417] ? nla_memcpy+0xb0/0xb0 [ 364.950255][ T4417] ? tc_new_tfilter+0x1797/0x1c70 [ 364.950269][ T4417] ? __kasan_check_read+0x11/0x20 [ 364.950284][ T4417] tcindex_change+0x230/0x318 [ 365.022202][ T4417] ? tcindex_change+0x230/0x318 [ 365.027046][ T4417] ? tcindex_set_parms+0x1e50/0x1e50 [ 365.032327][ T4417] ? wait_for_completion+0x440/0x440 [ 365.037604][ T4417] ? tcindex_lookup+0x9d/0x3c0 [ 365.042349][ T4417] ? tcindex_set_parms+0x1e50/0x1e50 [ 365.047616][ T4417] tc_new_tfilter+0xa4b/0x1c70 [ 365.052371][ T4417] ? tc_del_tfilter+0x1530/0x1530 [ 365.057383][ T4417] ? refcount_dec_not_one+0x1f0/0x1f0 [ 365.062743][ T4417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.068965][ T4417] ? debug_smp_processor_id+0x3c/0x214 [ 365.074412][ T4417] ? perf_trace_lock_acquire+0xf5/0x530 [ 365.079945][ T4417] ? refcount_dec_and_test_checked+0x1b/0x20 [ 365.085918][ T4417] ? rtnetlink_rcv_msg+0x7f2/0xb00 [ 365.091022][ T4417] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 365.096119][ T4417] ? __netlink_ns_capable+0x104/0x140 [ 365.101486][ T4417] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.107707][ T4417] ? tc_del_tfilter+0x1530/0x1530 [ 365.112718][ T4417] rtnetlink_rcv_msg+0x838/0xb00 [ 365.117664][ T4417] ? rtnetlink_put_metrics+0x580/0x580 [ 365.123111][ T4417] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 365.128381][ T4417] ? __copy_skb_header+0x250/0x550 [ 365.133477][ T4417] netlink_rcv_skb+0x177/0x450 [ 365.138226][ T4417] ? rtnetlink_put_metrics+0x580/0x580 [ 365.143667][ T4417] ? netlink_ack+0xb30/0xb30 [ 365.148244][ T4417] ? netlink_deliver_tap+0x254/0xbf0 [ 365.153516][ T4417] rtnetlink_rcv+0x1d/0x30 [ 365.157926][ T4417] netlink_unicast+0x531/0x710 [ 365.162679][ T4417] ? netlink_attachskb+0x7c0/0x7c0 [ 365.167774][ T4417] ? _copy_from_iter_full+0x25d/0x8a0 [ 365.173132][ T4417] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 365.178835][ T4417] ? __check_object_size+0x3d/0x437 [ 365.184021][ T4417] netlink_sendmsg+0x8a5/0xd60 [ 365.188771][ T4417] ? netlink_unicast+0x710/0x710 [ 365.193694][ T4417] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 365.199229][ T4417] ? apparmor_socket_sendmsg+0x2a/0x30 [ 365.204670][ T4417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.210892][ T4417] ? security_socket_sendmsg+0x8d/0xc0 [ 365.216347][ T4417] ? netlink_unicast+0x710/0x710 [ 365.221280][ T4417] sock_sendmsg+0xd7/0x130 [ 365.225690][ T4417] ___sys_sendmsg+0x3e2/0x920 [ 365.230355][ T4417] ? copy_msghdr_from_user+0x440/0x440 [ 365.235801][ T4417] ? lock_downgrade+0x920/0x920 [ 365.240632][ T4417] ? __fget+0xa3/0x560 [ 365.244688][ T4417] ? __fget+0x384/0x560 [ 365.248831][ T4417] ? ksys_dup3+0x3e0/0x3e0 [ 365.253230][ T4417] ? get_pid_task+0xc9/0x190 [ 365.257803][ T4417] ? __fget_light+0x1a9/0x230 [ 365.262457][ T4417] ? __fdget+0x1b/0x20 [ 365.266507][ T4417] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.272727][ T4417] ? sockfd_lookup_light+0xcb/0x180 [ 365.277909][ T4417] __sys_sendmmsg+0x1bf/0x4d0 [ 365.282574][ T4417] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 365.287600][ T4417] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.293825][ T4417] ? fput_many+0x12c/0x1a0 [ 365.298228][ T4417] ? fput+0x1b/0x20 [ 365.302021][ T4417] ? ksys_write+0x1cf/0x290 [ 365.306510][ T4417] ? __ia32_sys_read+0xb0/0xb0 [ 365.311257][ T4417] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 365.317309][ T4417] __x64_sys_sendmmsg+0x9d/0x100 [ 365.322237][ T4417] do_syscall_64+0xfa/0x760 [ 365.326725][ T4417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.332601][ T4417] RIP: 0033:0x4598e9 [ 365.336483][ T4417] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.356068][ T4417] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 365.364464][ T4417] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 365.372418][ T4417] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 365.380373][ T4417] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.388328][ T4417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 22:22:11 executing program 5 (fault-call:4 fault-nth:4): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 365.396284][ T4417] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 [ 365.404276][ T4420] CPU: 1 PID: 4420 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 365.411728][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.421771][ T4420] Call Trace: [ 365.421790][ T4420] dump_stack+0x172/0x1f0 [ 365.421805][ T4420] should_fail.cold+0xa/0x15 [ 365.421820][ T4420] ? fault_create_debugfs_attr+0x180/0x180 [ 365.421833][ T4420] ? run_filter+0x229/0x4f0 [ 365.421850][ T4420] ? __kasan_check_read+0x11/0x20 22:22:12 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) [ 365.449269][ T4420] __should_failslab+0x121/0x190 [ 365.454200][ T4420] should_failslab+0x9/0x14 [ 365.458706][ T4420] kmem_cache_alloc+0x47/0x710 [ 365.463473][ T4420] ? packet_getname+0x5f0/0x5f0 [ 365.468319][ T4420] ? lock_downgrade+0x920/0x920 [ 365.473170][ T4420] skb_clone+0x154/0x3d0 [ 365.477403][ T4420] packet_rcv+0xde1/0x1420 [ 365.477424][ T4420] ? run_filter+0x4f0/0x4f0 [ 365.477437][ T4420] dev_queue_xmit_nit+0x222/0x990 [ 365.477456][ T4420] dev_hard_start_xmit+0xbb/0x9c0 [ 365.496334][ T4420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.502567][ T4420] __dev_queue_xmit+0x2b15/0x3650 [ 365.502582][ T4420] ? __netlink_lookup+0x3fa/0x7b0 [ 365.502597][ T4420] ? __kasan_check_read+0x11/0x20 [ 365.502616][ T4420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.523860][ T4420] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 365.529137][ T4420] ? __copy_skb_header+0x250/0x550 [ 365.529153][ T4420] ? __skb_checksum_complete+0x3f0/0x3f0 [ 365.529171][ T4420] ? __kasan_check_write+0x14/0x20 [ 365.529182][ T4420] ? __skb_clone+0x5c8/0x820 [ 365.529197][ T4420] dev_queue_xmit+0x18/0x20 22:22:12 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) [ 365.529211][ T4420] ? dev_queue_xmit+0x18/0x20 [ 365.558716][ T4420] netlink_deliver_tap+0x8e2/0xbf0 [ 365.563848][ T4420] netlink_unicast+0x5a2/0x710 [ 365.568610][ T4420] ? netlink_attachskb+0x7c0/0x7c0 [ 365.573730][ T4420] ? _copy_from_iter_full+0x25d/0x8a0 [ 365.579125][ T4420] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 365.584855][ T4420] ? __check_object_size+0x3d/0x437 [ 365.590049][ T4420] netlink_sendmsg+0x8a5/0xd60 [ 365.594810][ T4420] ? netlink_unicast+0x710/0x710 [ 365.599743][ T4420] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 365.605319][ T4420] ? apparmor_socket_sendmsg+0x2a/0x30 [ 365.605338][ T4420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.616997][ T4420] ? security_socket_sendmsg+0x8d/0xc0 [ 365.622450][ T4420] ? netlink_unicast+0x710/0x710 [ 365.627385][ T4420] sock_sendmsg+0xd7/0x130 [ 365.631799][ T4420] ___sys_sendmsg+0x3e2/0x920 [ 365.631817][ T4420] ? copy_msghdr_from_user+0x440/0x440 [ 365.631831][ T4420] ? lock_downgrade+0x920/0x920 [ 365.631849][ T4420] ? __fget+0xa3/0x560 [ 365.650826][ T4420] ? __fget+0x384/0x560 [ 365.654994][ T4420] ? ksys_dup3+0x3e0/0x3e0 [ 365.659429][ T4420] ? get_pid_task+0xc9/0x190 [ 365.664029][ T4420] ? __fget_light+0x1a9/0x230 [ 365.668725][ T4420] ? __fdget+0x1b/0x20 [ 365.672804][ T4420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.679042][ T4420] ? sockfd_lookup_light+0xcb/0x180 [ 365.684242][ T4420] __sys_sendmmsg+0x1bf/0x4d0 [ 365.688921][ T4420] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 365.693957][ T4420] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.700192][ T4420] ? fput_many+0x12c/0x1a0 22:22:12 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) [ 365.704609][ T4420] ? fput+0x1b/0x20 [ 365.708412][ T4420] ? ksys_write+0x1cf/0x290 [ 365.712911][ T4420] ? __ia32_sys_read+0xb0/0xb0 [ 365.717658][ T4420] ? switch_fpu_return+0x1fa/0x4f0 [ 365.717672][ T4420] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 365.717689][ T4420] __x64_sys_sendmmsg+0x9d/0x100 [ 365.728844][ T4420] do_syscall_64+0xfa/0x760 [ 365.728862][ T4420] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.728872][ T4420] RIP: 0033:0x4598e9 22:22:12 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) [ 365.728888][ T4420] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.767600][ T4420] RSP: 002b:00007f3f63e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 365.776009][ T4420] RAX: ffffffffffffffda RBX: 00007f3f63e97c90 RCX: 00000000004598e9 [ 365.783972][ T4420] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 365.791938][ T4420] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:22:12 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x4, 0x0) r2 = dup(r1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x282) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0045878, 0x0) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000480)={0x7}, 0x1) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) prctl$PR_SET_TSC(0x1a, 0x3) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = dup2(r5, r7) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x1}}, 0x44800) sendto$inet(r5, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000001c0)={'lo\x00'}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="cb2b184ff6c25a54b15621e30ef2e941ba45774c23124a4b994cea35b39beb6454925593d4475b94b7c8415391493b2524a5db9995c3e6156d0886a800524d98b76b62dc6dae905ed818a8e8695485d2d77ba3b950e70af8eadb3d907fbeb6e942afc9bf82c78bd1bdf879198b128b2beda0", 0x72}, {&(0x7f00000002c0)="95b4b9e64063b781c442fe61054f22abbc93bfdf41ba1153ca9c26886462041746c8d66b75373889f634f88e6671e5c929c6c8454cc51044b5776bd314c489eb0be0afd2f07975faaf57a723593ae6a511dc5874b0a9c8b5e46e6a7262d8671a1dc3e56e9693808713b579e29f51bba894", 0x71}, {&(0x7f0000000680)="9890027ef237f03c151494ba77347d4a52609cb126640c0247f720bb72e2143c6c3dbc94b4a1363c7a446ec3abdd3ea21a619dbd8c8bc478e1787c307ac3596b3e5d4c44aaae6f031eb92fbdd8c7f308c999e6a511941115175f5c4cf13a48a66bca0128246db61f4ef6", 0x6a}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/316], 0x13c, 0x810}, 0x4000011) sendto$inet(r5, &(0x7f0000000700)="ef415671e0688cbfeacbd9f92995e342b643a088f1edeaab10253e2eab98d34861554c7dce562fad6df6a6fa208ef70af50a834630c57e6240b458544e1dccb8591999fa94e6e67260cf4802f7b34dc6fe023a031d380426ad494be27554fe10ddc229a210db1f7beab34f29be82d38f4dc2309a49d0d7da7fb074cfa550a67405dc5d009d0bf6f620ba9b4f527d64c22acfb34306afde34bbb6fc73bf613713d00a07c1e0b179f0da0722d9e0d1bec81e407fe2d9c3aa0942daa7bac40102864364a8fea70e90d2033280fae77625054db600e6a8bb2685c278cfeee200"/237, 0xed, 0xc0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000000c0)=0x208000004) semget$private(0x0, 0x3, 0x204) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40246608, &(0x7f0000000380)={0x10000, 0x80, 0xec9e, 0xfffffffffffffffe, 0x2, 0x28}) [ 365.799896][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f63e986d4 [ 365.799904][ T4420] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 22:22:12 executing program 0 (fault-call:4 fault-nth:8): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x80ffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 22:22:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x2) [ 366.001336][ T4451] FAULT_INJECTION: forcing a failure. [ 366.001336][ T4451] name failslab, interval 1, probability 0, space 0, times 0 [ 366.020295][ T4451] CPU: 1 PID: 4451 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 366.027773][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.037822][ T4451] Call Trace: [ 366.041108][ T4451] dump_stack+0x172/0x1f0 [ 366.045436][ T4451] should_fail.cold+0xa/0x15 [ 366.050024][ T4451] ? fault_create_debugfs_attr+0x180/0x180 [ 366.055826][ T4451] ? page_to_nid.part.0+0x20/0x20 [ 366.060846][ T4451] ? ___might_sleep+0x163/0x280 [ 366.065695][ T4451] __should_failslab+0x121/0x190 [ 366.065715][ T4451] should_failslab+0x9/0x14 [ 366.075126][ T4451] kmem_cache_alloc_trace+0x2d3/0x790 [ 366.080499][ T4451] tcindex_set_parms+0x1f1/0x1e50 [ 366.085525][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.091785][ T4451] ? debug_smp_processor_id+0x3c/0x214 22:22:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0xffffff7f, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 366.097243][ T4451] ? debug_smp_processor_id+0x3c/0x214 [ 366.102699][ T4451] ? tcindex_alloc_perfect_hash+0x320/0x320 [ 366.108590][ T4451] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 366.114475][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.120709][ T4451] ? __nla_validate_parse+0x2d0/0x1ed0 [ 366.126170][ T4451] ? nla_memcpy+0xb0/0xb0 [ 366.130489][ T4451] ? tc_new_tfilter+0x1797/0x1c70 [ 366.130505][ T4451] ? __kasan_check_read+0x11/0x20 [ 366.130521][ T4451] tcindex_change+0x230/0x318 [ 366.130536][ T4451] ? tcindex_change+0x230/0x318 [ 366.150020][ T4451] ? tcindex_set_parms+0x1e50/0x1e50 [ 366.155312][ T4451] ? wait_for_completion+0x440/0x440 [ 366.160587][ T4451] ? tcindex_lookup+0x9d/0x3c0 [ 366.160600][ T4451] ? tcindex_set_parms+0x1e50/0x1e50 [ 366.160615][ T4451] tc_new_tfilter+0xa4b/0x1c70 [ 366.160636][ T4451] ? tc_del_tfilter+0x1530/0x1530 [ 366.160650][ T4451] ? refcount_dec_not_one+0x1f0/0x1f0 [ 366.160667][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.160680][ T4451] ? debug_smp_processor_id+0x3c/0x214 [ 366.160700][ T4451] ? perf_trace_lock_acquire+0xf5/0x530 [ 366.192012][ T4451] ? refcount_dec_and_test_checked+0x1b/0x20 [ 366.192033][ T4451] ? rtnetlink_rcv_msg+0x7f2/0xb00 [ 366.192054][ T4451] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 366.192067][ T4451] ? __netlink_ns_capable+0x104/0x140 [ 366.192083][ T4451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.192096][ T4451] ? tc_del_tfilter+0x1530/0x1530 [ 366.192109][ T4451] rtnetlink_rcv_msg+0x838/0xb00 [ 366.192127][ T4451] ? rtnetlink_put_metrics+0x580/0x580 [ 366.209056][ T4451] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 366.209071][ T4451] ? __copy_skb_header+0x250/0x550 [ 366.209089][ T4451] netlink_rcv_skb+0x177/0x450 [ 366.209104][ T4451] ? rtnetlink_put_metrics+0x580/0x580 [ 366.209117][ T4451] ? netlink_ack+0xb30/0xb30 [ 366.209132][ T4451] ? netlink_deliver_tap+0x254/0xbf0 [ 366.276588][ T4451] rtnetlink_rcv+0x1d/0x30 [ 366.281004][ T4451] netlink_unicast+0x531/0x710 [ 366.285775][ T4451] ? netlink_attachskb+0x7c0/0x7c0 [ 366.290871][ T4451] ? _copy_from_iter_full+0x25d/0x8a0 [ 366.296225][ T4451] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 366.301923][ T4451] ? __check_object_size+0x3d/0x437 [ 366.307105][ T4451] netlink_sendmsg+0x8a5/0xd60 [ 366.311858][ T4451] ? netlink_unicast+0x710/0x710 [ 366.316770][ T4451] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 366.322295][ T4451] ? apparmor_socket_sendmsg+0x2a/0x30 [ 366.327732][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.333947][ T4451] ? security_socket_sendmsg+0x8d/0xc0 [ 366.339388][ T4451] ? netlink_unicast+0x710/0x710 [ 366.344307][ T4451] sock_sendmsg+0xd7/0x130 22:22:13 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) [ 366.348700][ T4451] ___sys_sendmsg+0x3e2/0x920 [ 366.353369][ T4451] ? copy_msghdr_from_user+0x440/0x440 [ 366.358825][ T4451] ? lock_downgrade+0x920/0x920 [ 366.363668][ T4451] ? __fget+0xa3/0x560 [ 366.367738][ T4451] ? __fget+0x384/0x560 [ 366.371891][ T4451] ? ksys_dup3+0x3e0/0x3e0 [ 366.376307][ T4451] ? get_pid_task+0xc9/0x190 [ 366.380888][ T4451] ? __fget_light+0x1a9/0x230 [ 366.380901][ T4451] ? __fdget+0x1b/0x20 [ 366.380916][ T4451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.380928][ T4451] ? sockfd_lookup_light+0xcb/0x180 [ 366.380943][ T4451] __sys_sendmmsg+0x1bf/0x4d0 [ 366.380958][ T4451] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 366.380981][ T4451] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 366.389669][ T4451] ? fput_many+0x12c/0x1a0 [ 366.389683][ T4451] ? fput+0x1b/0x20 [ 366.389694][ T4451] ? ksys_write+0x1cf/0x290 [ 366.389712][ T4451] ? __ia32_sys_read+0xb0/0xb0 [ 366.434728][ T4451] ? switch_fpu_return+0x1fa/0x4f0 [ 366.439844][ T4451] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 366.445929][ T4451] __x64_sys_sendmmsg+0x9d/0x100 [ 366.450869][ T4451] do_syscall_64+0xfa/0x760 [ 366.455376][ T4451] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.461262][ T4451] RIP: 0033:0x4598e9 [ 366.465155][ T4451] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.484760][ T4451] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.493163][ T4451] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 22:22:13 executing program 1 (fault-call:4 fault-nth:0): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 366.501118][ T4451] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 366.509069][ T4451] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.517034][ T4451] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 366.524978][ T4451] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 [ 366.563323][ T4469] FAULT_INJECTION: forcing a failure. [ 366.563323][ T4469] name failslab, interval 1, probability 0, space 0, times 0 [ 366.579814][ T4469] CPU: 0 PID: 4469 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 366.587270][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.597310][ T4469] Call Trace: [ 366.600611][ T4469] dump_stack+0x172/0x1f0 [ 366.604930][ T4469] should_fail.cold+0xa/0x15 [ 366.609506][ T4469] ? get_pid_task+0xc9/0x190 [ 366.614087][ T4469] ? fault_create_debugfs_attr+0x180/0x180 [ 366.619890][ T4469] ? page_to_nid.part.0+0x20/0x20 [ 366.624903][ T4469] ? ___might_sleep+0x163/0x280 [ 366.629743][ T4469] __should_failslab+0x121/0x190 [ 366.634666][ T4469] should_failslab+0x9/0x14 [ 366.639162][ T4469] kmem_cache_alloc+0x2aa/0x710 [ 366.644000][ T4469] ? __kasan_check_read+0x11/0x20 [ 366.649014][ T4469] ? memset+0x32/0x40 [ 366.653001][ T4469] mpol_new+0x122/0x2d0 [ 366.657146][ T4469] kernel_mbind+0x2e5/0xe00 [ 366.661638][ T4469] ? wait_for_completion+0x440/0x440 [ 366.666914][ T4469] ? __mpol_equal+0x370/0x370 [ 366.671580][ T4469] ? ksys_write+0x1cf/0x290 [ 366.676073][ T4469] ? __ia32_sys_read+0xb0/0xb0 [ 366.680823][ T4469] ? switch_fpu_return+0x1fa/0x4f0 [ 366.685924][ T4469] __x64_sys_mbind+0xe1/0x1a0 [ 366.690598][ T4469] do_syscall_64+0xfa/0x760 [ 366.695093][ T4469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.700969][ T4469] RIP: 0033:0x4598e9 [ 366.704853][ T4469] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.724446][ T4469] RSP: 002b:00007f862e641c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 366.732847][ T4469] RAX: ffffffffffffffda RBX: 00007f862e641c90 RCX: 00000000004598e9 [ 366.740805][ T4469] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 00000000203b5000 [ 366.748753][ T4469] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000002 [ 366.756695][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f862e6426d4 22:22:13 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x4, 0x0) r2 = dup(r1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x282) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0045878, 0x0) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000480)={0x7}, 0x1) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) prctl$PR_SET_TSC(0x1a, 0x3) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = dup2(r5, r7) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x1}}, 0x44800) sendto$inet(r5, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000001c0)={'lo\x00'}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="cb2b184ff6c25a54b15621e30ef2e941ba45774c23124a4b994cea35b39beb6454925593d4475b94b7c8415391493b2524a5db9995c3e6156d0886a800524d98b76b62dc6dae905ed818a8e8695485d2d77ba3b950e70af8eadb3d907fbeb6e942afc9bf82c78bd1bdf879198b128b2beda0", 0x72}, {&(0x7f00000002c0)="95b4b9e64063b781c442fe61054f22abbc93bfdf41ba1153ca9c26886462041746c8d66b75373889f634f88e6671e5c929c6c8454cc51044b5776bd314c489eb0be0afd2f07975faaf57a723593ae6a511dc5874b0a9c8b5e46e6a7262d8671a1dc3e56e9693808713b579e29f51bba894", 0x71}, {&(0x7f0000000680)="9890027ef237f03c151494ba77347d4a52609cb126640c0247f720bb72e2143c6c3dbc94b4a1363c7a446ec3abdd3ea21a619dbd8c8bc478e1787c307ac3596b3e5d4c44aaae6f031eb92fbdd8c7f308c999e6a511941115175f5c4cf13a48a66bca0128246db61f4ef6", 0x6a}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/316], 0x13c, 0x810}, 0x4000011) sendto$inet(r5, &(0x7f0000000700)="ef415671e0688cbfeacbd9f92995e342b643a088f1edeaab10253e2eab98d34861554c7dce562fad6df6a6fa208ef70af50a834630c57e6240b458544e1dccb8591999fa94e6e67260cf4802f7b34dc6fe023a031d380426ad494be27554fe10ddc229a210db1f7beab34f29be82d38f4dc2309a49d0d7da7fb074cfa550a67405dc5d009d0bf6f620ba9b4f527d64c22acfb34306afde34bbb6fc73bf613713d00a07c1e0b179f0da0722d9e0d1bec81e407fe2d9c3aa0942daa7bac40102864364a8fea70e90d2033280fae77625054db600e6a8bb2685c278cfeee200"/237, 0xed, 0xc0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000000c0)=0x208000004) semget$private(0x0, 0x3, 0x204) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40246608, &(0x7f0000000380)={0x10000, 0x80, 0xec9e, 0xfffffffffffffffe, 0x2, 0x28}) 22:22:13 executing program 0 (fault-call:4 fault-nth:9): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 366.764647][ T4469] R13: 00000000004c5d26 R14: 00000000004da728 R15: 0000000000000007 22:22:13 executing program 1 (fault-call:4 fault-nth:1): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 22:22:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0xffffff80, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 22:22:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x3) 22:22:13 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x4, 0x0) r2 = dup(r1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x282) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0045878, 0x0) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000480)={0x7}, 0x1) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) prctl$PR_SET_TSC(0x1a, 0x3) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = dup2(r5, r7) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x1}}, 0x44800) sendto$inet(r5, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000001c0)={'lo\x00'}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="cb2b184ff6c25a54b15621e30ef2e941ba45774c23124a4b994cea35b39beb6454925593d4475b94b7c8415391493b2524a5db9995c3e6156d0886a800524d98b76b62dc6dae905ed818a8e8695485d2d77ba3b950e70af8eadb3d907fbeb6e942afc9bf82c78bd1bdf879198b128b2beda0", 0x72}, {&(0x7f00000002c0)="95b4b9e64063b781c442fe61054f22abbc93bfdf41ba1153ca9c26886462041746c8d66b75373889f634f88e6671e5c929c6c8454cc51044b5776bd314c489eb0be0afd2f07975faaf57a723593ae6a511dc5874b0a9c8b5e46e6a7262d8671a1dc3e56e9693808713b579e29f51bba894", 0x71}, {&(0x7f0000000680)="9890027ef237f03c151494ba77347d4a52609cb126640c0247f720bb72e2143c6c3dbc94b4a1363c7a446ec3abdd3ea21a619dbd8c8bc478e1787c307ac3596b3e5d4c44aaae6f031eb92fbdd8c7f308c999e6a511941115175f5c4cf13a48a66bca0128246db61f4ef6", 0x6a}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/316], 0x13c, 0x810}, 0x4000011) sendto$inet(r5, &(0x7f0000000700)="ef415671e0688cbfeacbd9f92995e342b643a088f1edeaab10253e2eab98d34861554c7dce562fad6df6a6fa208ef70af50a834630c57e6240b458544e1dccb8591999fa94e6e67260cf4802f7b34dc6fe023a031d380426ad494be27554fe10ddc229a210db1f7beab34f29be82d38f4dc2309a49d0d7da7fb074cfa550a67405dc5d009d0bf6f620ba9b4f527d64c22acfb34306afde34bbb6fc73bf613713d00a07c1e0b179f0da0722d9e0d1bec81e407fe2d9c3aa0942daa7bac40102864364a8fea70e90d2033280fae77625054db600e6a8bb2685c278cfeee200"/237, 0xed, 0xc0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000000c0)=0x208000004) semget$private(0x0, 0x3, 0x204) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40246608, &(0x7f0000000380)={0x10000, 0x80, 0xec9e, 0xfffffffffffffffe, 0x2, 0x28}) [ 366.871559][ T4476] FAULT_INJECTION: forcing a failure. [ 366.871559][ T4476] name failslab, interval 1, probability 0, space 0, times 0 [ 366.945651][ T4476] CPU: 0 PID: 4476 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 366.953176][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.962201][ T4487] FAULT_INJECTION: forcing a failure. [ 366.962201][ T4487] name failslab, interval 1, probability 0, space 0, times 0 [ 366.963219][ T4476] Call Trace: [ 366.963243][ T4476] dump_stack+0x172/0x1f0 [ 366.963259][ T4476] should_fail.cold+0xa/0x15 [ 366.963280][ T4476] ? __kasan_check_read+0x11/0x20 [ 366.992992][ T4476] ? fault_create_debugfs_attr+0x180/0x180 [ 366.998795][ T4476] ? page_to_nid.part.0+0x20/0x20 [ 367.003816][ T4476] ? ___might_sleep+0x163/0x280 [ 367.008658][ T4476] __should_failslab+0x121/0x190 [ 367.013586][ T4476] should_failslab+0x9/0x14 [ 367.018074][ T4476] kmem_cache_alloc_trace+0x2d3/0x790 [ 367.023429][ T4476] ? kasan_kmalloc+0x9/0x10 [ 367.027914][ T4476] ? kmem_cache_alloc_trace+0x346/0x790 [ 367.033447][ T4476] tcindex_filter_result_init+0x7d/0x160 [ 367.039064][ T4476] tcindex_set_parms+0x5ea/0x1e50 [ 367.044091][ T4476] ? tcindex_alloc_perfect_hash+0x320/0x320 [ 367.049976][ T4476] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 367.055867][ T4476] ? nla_memcpy+0xb0/0xb0 [ 367.060197][ T4476] ? tc_new_tfilter+0x1797/0x1c70 [ 367.065207][ T4476] ? __kasan_check_read+0x11/0x20 [ 367.070223][ T4476] tcindex_change+0x230/0x318 [ 367.074883][ T4476] ? tcindex_change+0x230/0x318 [ 367.079726][ T4476] ? tcindex_set_parms+0x1e50/0x1e50 [ 367.085003][ T4476] ? wait_for_completion+0x440/0x440 [ 367.090280][ T4476] ? tcindex_lookup+0x9d/0x3c0 [ 367.095027][ T4476] ? tcindex_set_parms+0x1e50/0x1e50 [ 367.100297][ T4476] tc_new_tfilter+0xa4b/0x1c70 [ 367.105071][ T4476] ? tc_del_tfilter+0x1530/0x1530 [ 367.110082][ T4476] ? refcount_dec_not_one+0x1f0/0x1f0 [ 367.115438][ T4476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.121660][ T4476] ? debug_smp_processor_id+0x3c/0x214 [ 367.127112][ T4476] ? perf_trace_lock_acquire+0xf5/0x530 [ 367.132642][ T4476] ? refcount_dec_and_test_checked+0x1b/0x20 [ 367.138611][ T4476] ? rtnetlink_rcv_msg+0x7f2/0xb00 [ 367.143712][ T4476] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 367.148803][ T4476] ? __netlink_ns_capable+0x104/0x140 [ 367.154165][ T4476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.160393][ T4476] ? tc_del_tfilter+0x1530/0x1530 [ 367.165401][ T4476] rtnetlink_rcv_msg+0x838/0xb00 [ 367.170332][ T4476] ? rtnetlink_put_metrics+0x580/0x580 [ 367.175776][ T4476] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 367.181047][ T4476] ? __copy_skb_header+0x250/0x550 [ 367.186142][ T4476] netlink_rcv_skb+0x177/0x450 [ 367.190895][ T4476] ? rtnetlink_put_metrics+0x580/0x580 [ 367.196348][ T4476] ? netlink_ack+0xb30/0xb30 [ 367.200939][ T4476] ? netlink_deliver_tap+0x254/0xbf0 [ 367.206210][ T4476] rtnetlink_rcv+0x1d/0x30 [ 367.210630][ T4476] netlink_unicast+0x531/0x710 [ 367.215380][ T4476] ? netlink_attachskb+0x7c0/0x7c0 [ 367.220476][ T4476] ? _copy_from_iter_full+0x25d/0x8a0 [ 367.225836][ T4476] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 367.231541][ T4476] ? __check_object_size+0x3d/0x437 [ 367.236733][ T4476] netlink_sendmsg+0x8a5/0xd60 [ 367.241491][ T4476] ? netlink_unicast+0x710/0x710 [ 367.246418][ T4476] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 367.251953][ T4476] ? apparmor_socket_sendmsg+0x2a/0x30 [ 367.257402][ T4476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.263632][ T4476] ? security_socket_sendmsg+0x8d/0xc0 [ 367.269078][ T4476] ? netlink_unicast+0x710/0x710 [ 367.274003][ T4476] sock_sendmsg+0xd7/0x130 [ 367.278399][ T4476] ___sys_sendmsg+0x3e2/0x920 [ 367.283059][ T4476] ? copy_msghdr_from_user+0x440/0x440 [ 367.288506][ T4476] ? lock_downgrade+0x920/0x920 [ 367.293344][ T4476] ? __fget+0xa3/0x560 [ 367.297404][ T4476] ? __fget+0x384/0x560 [ 367.301564][ T4476] ? ksys_dup3+0x3e0/0x3e0 [ 367.305970][ T4476] ? get_pid_task+0xc9/0x190 [ 367.310548][ T4476] ? __fget_light+0x1a9/0x230 [ 367.315211][ T4476] ? __fdget+0x1b/0x20 [ 367.319268][ T4476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.325489][ T4476] ? sockfd_lookup_light+0xcb/0x180 [ 367.330689][ T4476] __sys_sendmmsg+0x1bf/0x4d0 [ 367.335357][ T4476] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 367.340380][ T4476] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 367.346605][ T4476] ? fput_many+0x12c/0x1a0 [ 367.351006][ T4476] ? fput+0x1b/0x20 [ 367.354798][ T4476] ? ksys_write+0x1cf/0x290 [ 367.359288][ T4476] ? __ia32_sys_read+0xb0/0xb0 [ 367.364044][ T4476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 367.370102][ T4476] __x64_sys_sendmmsg+0x9d/0x100 [ 367.375034][ T4476] do_syscall_64+0xfa/0x760 [ 367.379524][ T4476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.385416][ T4476] RIP: 0033:0x4598e9 [ 367.389299][ T4476] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.408886][ T4476] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 367.417297][ T4476] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 367.425251][ T4476] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 367.433208][ T4476] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 367.441164][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 [ 367.449123][ T4476] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 [ 367.457094][ T4487] CPU: 1 PID: 4487 Comm: syz-executor.1 Not tainted 5.3.0+ #0 [ 367.464559][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.474604][ T4487] Call Trace: [ 367.477895][ T4487] dump_stack+0x172/0x1f0 [ 367.482222][ T4487] should_fail.cold+0xa/0x15 [ 367.486801][ T4487] ? fault_create_debugfs_attr+0x180/0x180 [ 367.492599][ T4487] ? page_to_nid.part.0+0x20/0x20 [ 367.497615][ T4487] ? ___might_sleep+0x163/0x280 [ 367.502474][ T4487] __should_failslab+0x121/0x190 [ 367.507402][ T4487] should_failslab+0x9/0x14 [ 367.511973][ T4487] kmem_cache_alloc+0x2aa/0x710 [ 367.516822][ T4487] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 367.522547][ T4487] ? vma_merge+0x4ac/0xe60 [ 367.526963][ T4487] ? __kasan_check_read+0x11/0x20 [ 367.531989][ T4487] vm_area_dup+0x21/0x170 [ 367.536330][ T4487] __split_vma+0xab/0x560 [ 367.540652][ T4487] ? vmacache_find+0x65/0x310 [ 367.545323][ T4487] split_vma+0xa6/0xf0 [ 367.549389][ T4487] kernel_mbind+0x971/0xe00 [ 367.553898][ T4487] ? wait_for_completion+0x440/0x440 [ 367.559182][ T4487] ? __mpol_equal+0x370/0x370 [ 367.563853][ T4487] ? ksys_write+0x1cf/0x290 [ 367.568352][ T4487] ? __ia32_sys_read+0xb0/0xb0 [ 367.573108][ T4487] __x64_sys_mbind+0xe1/0x1a0 [ 367.577795][ T4487] do_syscall_64+0xfa/0x760 [ 367.582319][ T4487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.588204][ T4487] RIP: 0033:0x4598e9 [ 367.592097][ T4487] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.611692][ T4487] RSP: 002b:00007f862e620c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 367.620101][ T4487] RAX: ffffffffffffffda RBX: 00007f862e620c90 RCX: 00000000004598e9 [ 367.628060][ T4487] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 00000000203b5000 [ 367.636017][ T4487] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000002 [ 367.643977][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f862e6216d4 [ 367.651937][ T4487] R13: 00000000004c5d26 R14: 00000000004da728 R15: 0000000000000007 [ 367.664697][ T4476] kasan: CONFIG_KASAN_INLINE enabled [ 367.679442][ T4476] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 367.697221][ T4476] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 367.704162][ T4476] CPU: 1 PID: 4476 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 367.711611][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.721690][ T4476] RIP: 0010:tcf_action_destroy+0x71/0x160 [ 367.727398][ T4476] Code: c3 08 44 89 ee e8 df 3a ba fb 41 83 fd 20 0f 84 c9 00 00 00 e8 50 39 ba fb 48 89 d8 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 <80> 3c 08 00 0f 85 c0 00 00 00 4c 8b 33 4d 85 f6 0f 84 9d 00 00 00 [ 367.746991][ T4476] RSP: 0018:ffff88804a18eff0 EFLAGS: 00010246 [ 367.753039][ T4476] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 367.760994][ T4476] RDX: 0000000000040000 RSI: ffffffff85b8a030 RDI: 0000000000000000 [ 367.768954][ T4476] RBP: ffff88804a18f020 R08: ffff8880552224c0 R09: fffffbfff120aaf7 [ 367.776910][ T4476] R10: fffffbfff120aaf6 R11: ffffffff890557b3 R12: 0000000000000000 [ 367.784862][ T4476] R13: 0000000000000000 R14: ffff88804a18f7a0 R15: 0000000000000001 [ 367.792826][ T4476] FS: 00007f83bba3d700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 367.801736][ T4476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.808298][ T4476] CR2: 0000001b2f722000 CR3: 0000000092235000 CR4: 00000000001426e0 [ 367.816252][ T4476] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.824196][ T4476] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.832138][ T4476] Call Trace: [ 367.835415][ T4476] tcf_exts_destroy+0x38/0xb0 [ 367.840065][ T4476] tcindex_set_parms+0xf7f/0x1e50 [ 367.845063][ T4476] ? tcindex_alloc_perfect_hash+0x320/0x320 [ 367.850932][ T4476] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 367.856804][ T4476] ? nla_memcpy+0xb0/0xb0 [ 367.861108][ T4476] ? tc_new_tfilter+0x1797/0x1c70 [ 367.866119][ T4476] ? __kasan_check_read+0x11/0x20 [ 367.871116][ T4476] tcindex_change+0x230/0x318 [ 367.875777][ T4476] ? tcindex_change+0x230/0x318 [ 367.880611][ T4476] ? tcindex_set_parms+0x1e50/0x1e50 [ 367.885872][ T4476] ? wait_for_completion+0x440/0x440 [ 367.891169][ T4476] ? tcindex_lookup+0x9d/0x3c0 [ 367.895905][ T4476] ? tcindex_set_parms+0x1e50/0x1e50 [ 367.901160][ T4476] tc_new_tfilter+0xa4b/0x1c70 [ 367.905913][ T4476] ? tc_del_tfilter+0x1530/0x1530 [ 367.910910][ T4476] ? refcount_dec_not_one+0x1f0/0x1f0 [ 367.916255][ T4476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.922464][ T4476] ? debug_smp_processor_id+0x3c/0x214 [ 367.927905][ T4476] ? perf_trace_lock_acquire+0xf5/0x530 [ 367.933435][ T4476] ? refcount_dec_and_test_checked+0x1b/0x20 [ 367.939391][ T4476] ? rtnetlink_rcv_msg+0x7f2/0xb00 [ 367.944479][ T4476] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 367.949561][ T4476] ? __netlink_ns_capable+0x104/0x140 [ 367.954908][ T4476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.961119][ T4476] ? tc_del_tfilter+0x1530/0x1530 [ 367.966116][ T4476] rtnetlink_rcv_msg+0x838/0xb00 [ 367.971028][ T4476] ? rtnetlink_put_metrics+0x580/0x580 [ 367.976465][ T4476] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 367.981728][ T4476] ? __copy_skb_header+0x250/0x550 [ 367.986817][ T4476] netlink_rcv_skb+0x177/0x450 [ 367.991558][ T4476] ? rtnetlink_put_metrics+0x580/0x580 [ 367.997023][ T4476] ? netlink_ack+0xb30/0xb30 [ 368.001585][ T4476] ? netlink_deliver_tap+0x254/0xbf0 [ 368.006852][ T4476] rtnetlink_rcv+0x1d/0x30 [ 368.011243][ T4476] netlink_unicast+0x531/0x710 [ 368.016013][ T4476] ? netlink_attachskb+0x7c0/0x7c0 [ 368.021098][ T4476] ? _copy_from_iter_full+0x25d/0x8a0 [ 368.026446][ T4476] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 368.032139][ T4476] ? __check_object_size+0x3d/0x437 [ 368.037322][ T4476] netlink_sendmsg+0x8a5/0xd60 [ 368.042073][ T4476] ? netlink_unicast+0x710/0x710 [ 368.046983][ T4476] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 368.052500][ T4476] ? apparmor_socket_sendmsg+0x2a/0x30 [ 368.057944][ T4476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.064176][ T4476] ? security_socket_sendmsg+0x8d/0xc0 [ 368.069613][ T4476] ? netlink_unicast+0x710/0x710 [ 368.074526][ T4476] sock_sendmsg+0xd7/0x130 [ 368.078928][ T4476] ___sys_sendmsg+0x3e2/0x920 [ 368.083589][ T4476] ? copy_msghdr_from_user+0x440/0x440 [ 368.089031][ T4476] ? lock_downgrade+0x920/0x920 [ 368.093864][ T4476] ? __fget+0xa3/0x560 [ 368.097924][ T4476] ? __fget+0x384/0x560 [ 368.102065][ T4476] ? ksys_dup3+0x3e0/0x3e0 [ 368.106456][ T4476] ? get_pid_task+0xc9/0x190 [ 368.111019][ T4476] ? __fget_light+0x1a9/0x230 [ 368.115688][ T4476] ? __fdget+0x1b/0x20 [ 368.119734][ T4476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.125944][ T4476] ? sockfd_lookup_light+0xcb/0x180 [ 368.131113][ T4476] __sys_sendmmsg+0x1bf/0x4d0 [ 368.135763][ T4476] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 368.140767][ T4476] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 368.147021][ T4476] ? fput_many+0x12c/0x1a0 [ 368.151410][ T4476] ? fput+0x1b/0x20 [ 368.155188][ T4476] ? ksys_write+0x1cf/0x290 [ 368.159665][ T4476] ? __ia32_sys_read+0xb0/0xb0 [ 368.164402][ T4476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 368.170471][ T4476] __x64_sys_sendmmsg+0x9d/0x100 [ 368.175386][ T4476] do_syscall_64+0xfa/0x760 [ 368.179859][ T4476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.185718][ T4476] RIP: 0033:0x4598e9 [ 368.189585][ T4476] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.209168][ T4476] RSP: 002b:00007f83bba3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.217562][ T4476] RAX: ffffffffffffffda RBX: 00007f83bba3cc90 RCX: 00000000004598e9 [ 368.225505][ T4476] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000004 [ 368.233451][ T4476] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 368.241401][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83bba3d6d4 22:22:15 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xebe5, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/78, 0x4e) setgid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) semget(0x0, 0x0, 0x20) r4 = getpgrp(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x257, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20003, 0x0, 0x0, 0x0, 0x1}, r4, 0xd, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) ioctl$void(r5, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007774000000000000f41b25f416d58937e7e899e0524843c9577f8df71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c6fbdf200796a8fd217367c017f76f131c8693ac43b77471be91424707d2c3545b812f7f58f436706f17b26ae3208bc362eb1372b79e5809f51528f2436610c52b724993141a2cb7a0a9c50ca0a16787a4d0c82e2d9829219e3d910228437d90fa5b7256c49aac96b000000002150a405"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6c84, 0x600080) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create1(0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x100000000000, 0x4, 0x1) [ 368.249354][ T4476] R13: 00000000004c70b0 R14: 00000000004dc780 R15: 0000000000000005 [ 368.257331][ T4476] Modules linked in: [ 368.261395][ C1] net_ratelimit: 14 callbacks suppressed [ 368.261404][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.272803][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 368.278630][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.284381][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 368.290211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.295954][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:22:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0x6}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x603ef31e1bb36d45}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x4) [ 368.301811][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.307583][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 368.308673][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 368.319132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 368.321022][ T3921] kobject: 'loop4' (000000000f639482): kobject_uevent_env [ 368.332670][ T3921] kobject: 'loop4' (000000000f639482): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 368.343146][ T4476] ---[ end trace 9f5b2fe4a0d94567 ]--- 22:22:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x10000000000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 368.350206][ T3921] kobject: 'loop5' (00000000f543862c): kobject_uevent_env [ 368.357432][ T4476] RIP: 0010:tcf_action_destroy+0x71/0x160 [ 368.363314][ T4476] Code: c3 08 44 89 ee e8 df 3a ba fb 41 83 fd 20 0f 84 c9 00 00 00 e8 50 39 ba fb 48 89 d8 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 <80> 3c 08 00 0f 85 c0 00 00 00 4c 8b 33 4d 85 f6 0f 84 9d 00 00 00 [ 368.383267][ T3921] kobject: 'loop5' (00000000f543862c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 368.391874][ T4476] RSP: 0018:ffff88804a18eff0 EFLAGS: 00010246 [ 368.400516][ T3921] kobject: 'loop3' (0000000017cb8dba): kobject_uevent_env [ 368.403086][ T4476] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 368.408514][ T3921] kobject: 'loop3' (0000000017cb8dba): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 368.434057][ T4476] RDX: 0000000000040000 RSI: ffffffff85b8a030 RDI: 0000000000000000 22:22:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x2, 0x100000000000000, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x40030000000000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 368.447908][ T4476] RBP: ffff88804a18f020 R08: ffff8880552224c0 R09: fffffbfff120aaf7 [ 368.463996][ T4476] R10: fffffbfff120aaf6 R11: ffffffff890557b3 R12: 0000000000000000 [ 368.477206][ T4476] R13: 0000000000000000 R14: ffff88804a18f7a0 R15: 0000000000000001 [ 368.485383][ T4476] FS: 00007f83bba3d700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 368.495708][ T3921] kobject: 'loop3' (0000000017cb8dba): kobject_uevent_env [ 368.502924][ T3921] kobject: 'loop3' (0000000017cb8dba): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 368.507571][ T4476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.524087][ T4476] CR2: 0000000001b23e80 CR3: 0000000092235000 CR4: 00000000001426e0 [ 368.532442][ T4476] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.541318][ T4476] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.550321][ T4476] Kernel panic - not syncing: Fatal exception [ 368.557681][ T4476] Kernel Offset: disabled [ 368.561996][ T4476] Rebooting in 86400 seconds..