40)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)=0x5) write$cgroup_int(r6, 0x0, 0x0) 21:30:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0624fc6010000a4004000000053582c137153e370848038000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 21:30:30 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 293.175129][T19572] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 21:30:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ec0)={0x18, 0x3, &(0x7f0000001d80)=@framed, &(0x7f0000001e00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 293.239755][T19577] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:30:30 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:30 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1408, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 293.301205][T19581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:30 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000000000000000000000000021000000000000009d91409707a79498161c761a92f8f2e08d4af9a4f4ef306152c4355570b2f188fe398d", 0x53}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) 21:30:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 293.388897][T19585] team0: Device ipvlan0 failed to register rx_handler 21:30:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000200)="2e04000056008109e00f80ecdb4cb9f207c804a00d00600002002efb0a6002000a0ada1b40d805000308c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x0) 21:30:30 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000000), 0x70db2da734432a8e) perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe7ce}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:30:30 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)=0x5) 21:30:30 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 293.547274][T19602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:30 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r1, &(0x7f0000001cc0)={&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14}}], 0x38}, 0xbb8) 21:30:30 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:30 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x29, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x6, 0x9, 0x0, 0x40, 0x0, 0x800, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x80}, 0x4000, 0x3, 0x6, 0x7, 0x0, 0x1f, 0x1000}, 0x0, 0x2, r2, 0x8) recvmsg$kcm(r1, &(0x7f0000001cc0)={&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x70}, 0xbb8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x1060, 0x1, 0x6b9f, [], r3, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x40) 21:30:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002900055bd25a80648c63940d0624fc6010000a4004000400053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 293.780996][T19626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:30 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:30 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) 21:30:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 293.854958][T19630] team0: Device ipvlan0 failed to register rx_handler 21:30:30 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\xfe') 21:30:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:30 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) 21:30:30 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 21:30:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006ac0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000006ec0)={0x0, 0x0, &(0x7f0000006d00)=[{0x0}, {0x0}, {&(0x7f0000006c40)="03", 0x1}], 0x3}, 0x0) 21:30:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 294.216806][T19676] team0: Device ipvlan0 failed to register rx_handler 21:30:31 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:31 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:31 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0xa5}]}}}], 0x18}, 0x0) 21:30:31 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\xfe') close(r1) 21:30:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:31 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 21:30:31 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001400)="e735aed5ab2c38bc70b92764d188aee4628e1f4a78ff2cd1c37615558b0ece9b0a5160281247f3d2464ff803943b391b1ffa422f33a51dbe02405068bf5fec49483bd1352eb38b05455891", 0x4b}, {&(0x7f0000001480)="d5e5dac1586bb3a7c99132a2610072c71cc0de6dc731c7fcea5667a648ded27bffd9edd555cd030ab67835fdcd2536cd31d724697886c1fc4c4c9b487d6159e536f06abf3b59db407c5ecde0be3581b7aead90948e460dc05db01581363dc2546d296e35da056b2214060b5a5b87be2e08b058be14c64a420dec0d5935251d", 0x7f}, {&(0x7f0000001540)="36ea92d515e146722f37d2d722ee2c81d7aa0869f6829180219443d65622ff34b2a5b1a0502fe7387988f320d2b092728df2e6d3f64089750f0fd8bf4208c50aa2f1760ec971edea94ba3ceb68ae866bfeb5ac033977bcb49db329e04d114098ef6894eab9df6c96bc5bf12e25e668412ff726e337ee4a9ab3e498f5e620dded1e9bf29f51d2f4dd347e31197a126d70e4ae80da068b4754acddf7dd3eea649e3cbe66da4ac8ef72599dc06a145a5f21dee18bfea1b89b97db39bae3c2a964e1dcab9b6cbab85beb8495eb1292d30bccd4ce9cf748e8523ba12612d26c8f130b1fc9c9fa100e0388eed179", 0xeb}, {&(0x7f0000001640)="924cfcafacc179f478445142da728a2fd09f7c644fc2012864a300f98862668d8edfba67956881645aeb017704a5b4e15de2cea1952f7af758bd9ad034bf88f5b3a6e24790aa7f2489406b3a30e64788fcf81d2f9a888af2367f94c9c51ee611cb77bfb17259ca677828900ab5f07632b49d207600779e18945b45dcb62183b1f9b8eac07acd9eef04a3521bf45e04c218b620a4ca836c0d6813f2cc23966af38a0940e7151cbed00cc1c8cdd9d2964db07133165a095ee06cf10bf708ca2fc2c15d20565ea39bf214103e8aa7fef329e2e2f47feaa2cfd2541cc3f48f9d35acdc009fba5b643e6e36ce0fbe64a831a96858dace56e67ab168a89b7610e7f15e439f7c8dcb4a300fad3774310918d2ef5e190ef9fcf85dc172da9e3778cbdc4a6a297bbde1ad90e1e79a25b8a735f2fa1cd4ed7bc4467e039a98ae55e42e13e9bc624ef1b69c3ad552e07bc9d8e51747097af025557cb7d85aaf5e2e1ffb77ff7e6ae1613190bf75840b957610384d1de3a399adddf430746fe11e139b35120b758af44376342943ca34ab75c3ee9b0ba5198b9b53ed5b91d6d89993a5696e139ad8f92969d5255d8476dd63b90e2a25307572ee6d811b737d10fb3f898d6f4a7690be4456f2f8c77556abeb649f868bb4f08206bf9fd29218f7482cd441b1d8c1d8c8145dd8c06ac5f46e96e86dd2b4def57ab127cc49ecef10d49b05b8550ea04696c432f423391842f3636582408e1eaeb4d7edec28129babd92ccda1f30caa41dcb75dddd4085dde955692634f72357dbb4ec8ae825e7edee30d0ae3d7190dee407c8ed06648cc95a9bc596d1ce5633f771fedc97c4b12b7b7bc775ecaaa94062a9de7ce70301cabf138a0aa2a479ffbce312432b9231984041dd976c6dbfc9e0a2f155f588b60715823b84f176fee442c8a72f12c82006404e0344ce34eb288611c45d311e4d14212ca79ecf26b0cb70793b2f4c75cdd1940a3829f1ff69cef27e44738e8939c0d1ab03000c023e89707bfbcf40b8c22bb33610ce8517f449eb1fdd45e8fd7356a133d8bd903c98ee27c9398c9e5297eb7c0912d53615cbe1edc90cde69c56aeb7deae6d9c06067fd45cf0cd91d58f2b233afc2d944502eb3e05127b88de3c23d936802ac1cad6ef9ec1c65a2db0292521d225f4c8102b72d43817b2061db82c8e9c47b63c8c4071e8bd96620981cef0680bb9a34acb6085e0cd42691ed8298286e9c1d5494e29c3a3ff26964490e20bbbe269047df495701ab8b0deb414a0be3e3dac53cc71e2b0ea19ce769463f2240ec63d51cc39d3d13d36e326adc67e627c2eddc54c94edc9a3aeb698fdab6b932f7032c5f1ec71d5ee19392471694c68729050dbd0bc0299359c05d878ad5875bb20b5e6430c36aedcdb7df4e637d5c1ce30f750a8f4f799d03904eb2fef66afcffeb8a7faec9ea1880ce669be276aa05b1b799f587891d2300c4a12e9591a66a9f7683bdde67c973e18b2e3c6584ae6d60f9f9bb41ff9f26e45c5b24d1bf6346c060bc2db998baeb8b31e9e1a98751e93b8bb93c67cee21ed8660e3fcf30cc90129a2000c4a2d8608acf08a85439911e3cb703ce4d8ea0e39b8ba2e923073d55bb3b662c856f96b9f5b5d036b4deec1a01174cc54ef2a122c68805f6112937ea14c488f2ae57ed0f066a89fdddc3087cdcb20ab6eb29c12495c23aca2f8d9361a39a53c90f729f3f3409585092dc817856811ddef388b6ca41f3d6cdd9582d16d9069c7a1abb9a1a365b26430040dc9cddfd804fdb2fa7bda674e6f2068373ac5ae654434f7a680faec7fd8fc14c1a8c29978a59965f856a91cbeda301a0483e0fe9d19be4e1480fa155482fa7df62781592868fc01ce149efed5a7ee527a0519381c88ed346398a36b1a234124506147a992e4c5a5286d2b4c4be88444162dde24e50ef4233a0cfd7d53468052a1c4a7af973e0612c901e2f97a815f156ebd4ce0f90482e6c329144c33420dcf544d0bdcdd772c9e45972c65b68ab495720f94c5053ddd7f61ff4b431b877c1a3f221be902841b6a57668d86c9b220accc9893876f6a76ce377cdf8bc64184cc7b601fdb0eee8ababacdf219d7d915eb3983f9ee6d8ed184a8a62554fef2817e53c00e19e43638835ca3ba72dc46c723291c900a31a53ed08437b1bd8efb359fcbb368a374b2d821c0492eb1847c8368a8f119f55e69920a3ae66fe2402f447c82771431d96dd5c1e74a1cffedcd2f52f2b147363f6b7532afabef1cf2bbdec41349361189c47ce4ce33d2a8574913a8d4206000508cd16447b07a12b5090feee4714958c43d8785f66b19478f3d9f9ab94bbb0feb742583aa081995dc40d9aafc45cdec7bae247bd8326ed9fe805d0404c054169eb911b84dfd4b4b04d0222ab306c74f58ccb9cba04f85ab27177b89e3414cbde90fce48f15f137e114ff5babdb06303c3534361dd70349ab95972f8a1d713d5", 0x6db}], 0x4, &(0x7f0000002680)=[{0xb8, 0x0, 0x0, "af8efd3d8ca00be2a814404f89e8c932bbf519f6d1748ea0381ae5e73d9239a9bea1ea4d098edccd3c6593172e673540caadbebb80c590af34712ae392569b2aaaad4f612becf07a0cefeae13f2e4ca24a0a30431046bae3cc099e4a19638a536bf34011bb2cdebe6d1f786b86accfcf9e6804ccda2c5f8aa5b1d02bebcf0a99fdb3f3caee8d929efad6ec7d226ab5fec03a3d9bcf5b0b3aea2d12479514495907"}, {0x90, 0x0, 0x0, "1bd8c38f6df056be0b9e9037644eb5f9d8e9f737bcd5e2982b070166851f30d1f9478ce84687e75b48226b996707fba5701f6d3eb074a524a6cf2d96e66d141af0c0d129804c93e0359eb00bb048e5b9a3d0be367dd1d34fa93ef6136bb03feea775baaa5fd503ff22724867d57cce9026b6a4e66afc2f962e"}, {0xe0, 0x0, 0x0, "1cb59e3365e778c8a0e28d4c1e8e7f1e4ff548cb5ee987c58954b1dbd32523638a02f2ec446fafe3cca4fd7a4d09ed09e5568fe37cb2e3a248624e29f5240168abc55a5aea73c9cf307dfc52dfc0f112de069d5e2e441a68e65cc06b2a528e6b8a7f37325fd999f70458dbf8e0bcefe614198eb42144f3c6955f39468f7d6683c24f21699c8fdd7821a752213e6f6d3e81c73e21c35c09ff603a903957b21031fc21031d291563a7fd25fb46ee9aa10c235b8c1d5ca7da41eaa42e544938023ba9526913f3e135be08aa1b"}, {0xc0, 0x0, 0x0, "6d8b4238faccc778a4fce43e4d9b78a4eea83948b3aee260754ea0e07070e29ce0ccdd1b7ff93f86c758b73799bc86e11af070c365038260006b7adb129e6fe01dd85b532e13e4f71b5e42d50d5f5f0f3c75d5b261c88f93f72718c4241b2de5447fc5e323dc2704711cebfe8830a0e1629ee3a252f9cee837b8b02e6247ab64881f8a9ed19a8663eedd788b93c9ef160754fc3bbbecab2323dae588e2e6970a458306fa17572ad56e0510fc65e078"}], 0x2e8}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)=@generic={0x0, "a68a6311b404ba2a482ecc6ff6b2a9818f784a38c94dab3e262046d18e838e73a1f69f33d01d39da7719bf20a1a9f22d2ff819bbc575d581cf5ce553f1cb818feb4b1953a5fd2ad11f72f103d7e3323bcac52dd1eae93a55d92c1ddeb92d40369351185f74fb47ebde7fa7cbad13c0056d4367a4df4f3bfc578f68ebc9c5"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)="899d25dff041ff1730e35549a50132c56b9be1c819fc81146529cadc3367c744bf2a97979a230c", 0x27}, {&(0x7f00000029c0)="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", 0xfff}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="c4de69fc9387ee28efcd1a039d98d05f5a7cd80129aa57df33a1d2deb1867d8e8d55995d1bb90d68f4126ea668870dc669c84a65a3b561e6456a3e73c1d1269901128561092779da508e1571007988059594f2db2d49954e1f61790d98215041996d16ab4d852b08e09eeb00bcdf2e00e1844de0a2e44837432027f5f9803c7d137d11515cd958b8b550f678b9c03819f48c2d96512332f98f3425bd7e3d2b4ccf19cb8fbb6ee75c7f0f70ee4dc9a021f9a7f5acfc414f288f87645846a4ecea7bd3c50afbb04adcd7f919732414f370c3326898c9030fdaab1e96373622105225f5253a1f05d31161a8a7", 0xeb}, {&(0x7f0000000200)="9ed308f0ae00a2649d23cb8420717f", 0xf}], 0x2, &(0x7f0000003c40)=ANY=[@ANYBLOB="1010000000000000870100006e00000015c60381170f667292b64315b4028beae9fac408d5099dc335b52ce355b270e29ed148024e4935e1702d6ff7af5bfe85bc370f73439bfbeeb6b838bfe1ec0e874278de2b9aee8f833d30bf3ae59269f51d97e5cc6674c37443a1578015a3d5d256f631c03c375580fb6a0bfa42a58caecf7d59e90284000000000000000057b57abb12c1b99e1613886db7a39864e5233317cc31d37e9adac08d673ad93085be40d454e46b640b997e7d53b67102fbdc04c805377b56d272385c0f7d2943df486911f1d0d1e09e9ee35f202b3ae4dc083279fe696b79581839fef74148625d1375968aab69d299685806e3e25ee2d0f7aa60d6d1a8291e3b5605504eed70ceeefce87e9f7f5ca5eb2bf8fd937ff104983c8687a1234f621c0ce88112ecad32ecd33e03befc9ae807c0c83c1a0c457f8be63b691962a9c60de399d8c6d7e2fdd1646ebd8c01d0f0944bd2714527d6ff7c2dab00ecf203b7d9e9e1e520202bfda869de690b66688748d54cc9d15a6531ea43566fb9c6d1cb485c28b4a148620705bc689faa2b9cf2dee0ea656d95221242b6379a40c29a2364f42b5200dbdb840c182d9708aee6fbac2c1c67c0f38f807b37fa948dfd60f0382fcfa085af0036209a820582004b6f9e02f3caf6daa9525036b6da91f2ca88944bdfa17053ca6c4161781deb53e74c1e2334ae411e205c76879aaa7e1c2c0501002209f3bc0a00662ee183e723cd1e4375750a245f4e1975e46294dbe9d52240e93e109b6787e1b299deea24c4eed4838e8c32ba405690ce06d780d56f12baf8fd072e5842f1dd2bb19a461dd37537fc485a7399126d7fc5f38ef7732aaf7f013fc118f7ec1d781443302d18fc58764a902df79923ac15e6a32de73e15042cbcfe02301f83ca48cfbb8c59be03fbb33c76cc2063fc47e8c33dcbdbe245268aa89719aa465aa3a954bb9463352e511e6194b365379345d1a1a3fdfafe7d725b3f4d849c7c63c861d77268bbd0c453e1eba33acae32b3cae029ef36b08b54b800c7e447f0c69315fcd0b4877943009de1102038239d438ed9f592daaf169eec20dac8b6f8872a3df9d4bdc7e16e327c6837e53d87af5b8e7042f3318fe3df63f569f85f334673f978287d53366bc8874059f0a694b804490142c9748559e1d070d8286ce7b1c9d6906649183e9a8087a12fee1e98d3a13e8888b886cef47f2b18e0299a9610ae15b7bad712d77d0d09baafa3c5597e9f0b6b59bcad250685e758333113fe3475598e825a6ebe3d9fd0bed843b1d3c6403562e0b25a5bb68c90997d64f93f846f9194c31fb58ddb336bbd67b095fd11d5a20c138e5a6591011f3084279d4866290ed3a800c09606704bb318b1655f6e295b3a52ee12181a28f9b3d1458dc124533426b6f3d9e97a4a72a61f7e3b2152e7c731504a6883a2e546dd23c54035e15594506cdf13659d8659aee29134b6218f31f1697df697c76d360f5531fd9887a2bd9818734649c49ad95424a6a7ccddeba8fcd3961672531451cbfe4417abc15ec85f18d49839c3deb3b2b4131c7ec9c7914f1a00e109f16ad0a7a3408d4a6983b7a16690f6f8fbc653627040dbd09b024573fdd424d174cf21085e80bd8bc1fcba3509385ef963f3ce2041065cb7f39d8239ec0a57b5af593f609f4b3945f2e422e07c851427931a0c652f149e9a665c5bf0cda296e838d3238fa9893004bef966f64072dd47daeaf31bb353913f73278779068674b1e6493c0b934bc35d9c12a656f3187a0247d55cc120a34bcd9592ef67f374a20e4be2e50c17aa12a0cb8d7d12faa68dbb78c4db50186a28c96a3e7fbe904c7efb3cb34a4e873c590ae2b79ca927e53b02dcf58bf03301d0205c429327875f33d1ae8c9ba1386ca76e6fe3d879b16b1f5982e0f561fc2677a4ff5038cde1f373bec8afff8e7b6b1b93a907b165fcd1f24f3c6dc3088ce0d83ca5f7f40a94a820dac86fcbcd5adf741254847a7de1510a80a9fc0f7b08f51565801b0dfcfe8dcdb8eb44649648adee1e81da3de8830448f236370a6f5eade41cf7216caba8f3441896be32ec8eb9babf387c0406c7e08a03e5428dd3236ed2bea3ca54b0a2ed97d3cdc243364cd741d5a4dcb619c36544a251b708045f551f89add17597094d74308ee87eda2619d2c02d2727a287a9028d41a7904cccad9724767d9aed1ea2bbe149eb755f87a5a28ee2690217bf60d2757b8866530ffc9bc7343df1ef974a0d452bd6b96d35b0c2f48390795a1b6138ae1c1132ab1f638dfa56272528c429eeb24ec9ce29273c6c690a83b0a59cf5590135225ee22fb0113d12db092ae3f369b9bc627d283a8a896fdf63900c7deaf1f56591b3e064029c41fdfd815e0407c36d94fbb7fdcf10a0e6c4486a16c196b781979ef718b9552cb7d6231947f9640e3a6d16debdbfdbf84d90aec2d33c9fec4fdefa10b32d5a9a45b18df001eafcb1fec3164aec53e0eaa4bb5dff6df901e70bc78be2843c999f4563371692242b2ae40b8127975f889b027dc0b1f21c2d7503f0000000000000092c7917f5551e913b50753739c60cb2562ddd63db5febfa86cc4cf738a318d525b679e218ae3422c8cea794099ec35a27e9ea84e508114c452a8897da00817e589762f86ccecd6f7481012d5a5522145987c33a1fcf51d567771a19d6834ff5d6977a3240f20bf085c47f60e61e88cb03f4bf8421101ef636bf3862a02a1aaae5a2728b176ba1bc90720132fc5d1b70fc35c67742b91361565e9a6db42446c590470d165c0a45458031872d7273c4f8c5cf97991629ebb33aa8201f6bae88089e4584b9678b6d7aa4bfaac77b82a17ceeda3bfbe162f58d6beac28153d179467abfb95aedebb6cac2403c222b222aa8111f912f99a66d1d612b15e0763533958233da7c6ae560361bc58d77dc47a973ecb5308fefd5df22867dee486aa8a8bb6610829e16c8e7cfb8590f73340ff4ee89f26c83a57de2e6747fc6bbe35ebe5d07f96f718e227c41cb3d9952bdf3d3519b8fcf158015c14ab12c115dea07fc569ac722a048c28b332f42fc79918c35dee83fa991f1b1d4817c1e3ad260d2aa5fff31e6af1b6b1d64221d7895a860fd1f3e762bcc9678945fd8b1b4bc526fdb05c7135aff4b6c97d5b0101cc394e080afc023f7a2a35163568aa280694d2295021b90c8b27d0983a57fad154859e627e7e7f1d59137427d52e046739b3b8e1ee37aec6b8a0fe936532257a2c0406482601ab319c01c74933852613744eb804ed28e4438e9190da4977a77f9c390523d81262106ada90ac1b00515d6309536e1ff356aa5326adc97dde59cc8caac4b934d76b40fe08728bfe387343b83afcd9f4a51c1090ea7c0a8d6f1f5a76e0b7be9c0cac8bb518dbba7739c568b275172980c7e14a7c46aaeb70c9b26635b13e6ca4284783afdf034bd11ff6c3a251cba615b955211b23035d49d5013a23471342cd249d9c6cba72ca7629ebaa542a629df45b6917e889b53e818d0d9df0f118474349d8a4d6ace9d320f5cda39f346e4e657373a6648a4bf51f91afa037687c5ed98f6db14e9d29c0fca54b80fc57274911d9a6a8cecfcd90f1dd4e1896fe846ff0b194163ae33135a8ca1bcc556e4873a12a717d975da51ca1379d98eb9c8b089149215dd5f0304c0df4faa976562285adbd6baea6e291675766fbfdd51b336b3c0c9616696956059f3c8b82e1cac25920dfd200efdcc3de37233b36666b5ca75b069f2e0a2a504ee09f207e61da34f116bf4a5352646fde1b33929ce677efaf684b1aea4879a49c14d7a897ecdf3cca22053070651c6e7f4656b0eef6e3511a8fb5df1e5c730231c491d26df85932f8124dba94b54fe237e72a0281d5346797b7ad575a6feae6c9e9934f227c9070deb0f0bb03a963d49c061424943cb7f8cb3de96d0dc57fa7940ce0745dc74492215ecdadd8a2044e00031d7cd5da8266f83cf83b63713659138d7df99addbcfc34cb61e7430af0adaf90a9cce705a477526fa46aeca7cc73db844b60a42cbdc5db2a4b56ad85a5896aa308c64f2e14b9a1042cdac4c11b0a67955ccd34b08dfd22a2ead24eb667fdbb38c5b6b786e812e85acc116f02b725f7635d36b0841e704acf3f492ebf9a049ac5881fbdb867fd0d0479d0b42ee2118ade6c91f6a639e50ea2bef66e10f643217b6da43442b19970a18d462e78d7a76db7ba996928f3bc45bfabc66f08d87d8fa1e4eb484daf17cf05bfd870ad90095970ac92b5f6ed5ee85f99f7d4a119d556939cf985d4bafc1406f7736ae3acaea5bcfdd8c7e6085d0d84930b8830c9ddf0690d1a98a5da875f46fb6a1a9215cfc429efc7d1ff3d205b53a50f24ec27"], 0x1200}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000505d25a80648c63940d0324fc60100002400a000a00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 21:30:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:31 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 294.575111][T19707] team0: Device ipvlan0 failed to register rx_handler [ 294.617766][T19714] netlink: zone id is out of range 21:30:31 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:31 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 294.644322][T19714] netlink: zone id is out of range [ 294.670604][T19714] netlink: zone id is out of range 21:30:31 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 294.715008][T19714] netlink: zone id is out of range [ 294.725738][T19714] netlink: zone id is out of range [ 294.756324][T19714] netlink: zone id is out of range 21:30:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 294.786981][T19714] netlink: zone id is out of range 21:30:31 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000a00)='/proc/meminfo\x00', 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000a00)='/proc/meminfo\x00', 0x0, 0x0) dup2(r0, r1) 21:30:31 executing program 5: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:31 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 294.809903][T19714] netlink: zone id is out of range [ 294.851657][T19714] netlink: zone id is out of range [ 294.861528][T19737] team0: Device ipvlan0 failed to register rx_handler [ 294.872546][T19714] netlink: zone id is out of range 21:30:31 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x79781def) 21:30:31 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:31 executing program 5: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:31 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') dup2(r0, r1) 21:30:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:31 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:30:32 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:32 executing program 5: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b07e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:32 executing program 2: syslog(0x4, &(0x7f0000000000)=""/179, 0xb3) 21:30:32 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000053c0)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x3, 0x0, 0x0, 0xf, 0x2, [], "7f42"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "af5f"}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000005300)=""/186, 0x38, 0xba, 0x1}, 0x20) 21:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 21:30:32 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 295.340778][T19771] team0: Device ipvlan0 failed to register rx_handler 21:30:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xd3, &(0x7f0000000180)=""/211, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 21:30:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 21:30:32 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:32 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000a00)='/proc/meminfo\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 21:30:32 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 21:30:32 executing program 2: r0 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) fcntl$setlease(r0, 0x3, 0x0) 21:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:32 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000a00)='/proc/meminfo\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000100)=""/4096, 0x1000) 21:30:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 21:30:32 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:32 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:32 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xaa71}) 21:30:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 21:30:32 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:32 executing program 1: r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) fdatasync(r0) 21:30:32 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:32 executing program 1: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) epoll_create1(0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0x3be, 0x563, 0x0, 0x100}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xffff, 0x80}, {0x3, 0x8}]}) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="369745972e26c2b625bf7114a5f5feb099d9355918c195598ed6174ebc5e76e349f29071813d1287ae813b040b2818fcd5454ece5339f0f884856bbd78408d8a188ff86bcde570563d2b4e25ed1194ddf2b1d082d9345164f6dec8068a56655c9b2666d99920e0cbd207b13e055b4168f823ad3200539288e47e5ee42b59334f1bc43f5f84565de90c0357a5e28993c35f5c31d260623e10329a8f44556a045b5c8f9682dc1f98364e9b162be7464c7f31e4d20c25f7345d8f14d8f6877ef139d47b416797c7dc697ef9", 0xca, 0xfffffffffffffffc) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000002c0)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000300)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) 21:30:32 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) pipe(0x0) chdir(&(0x7f0000000040)='./file0\x00') utime(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) write$9p(r0, &(0x7f0000001400)="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", 0x10) sendfile(r0, r1, 0x0, 0x10000) 21:30:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 21:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x10}, 0x0) 21:30:33 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:33 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x66, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) [ 296.193109][T19849] loop2: detected capacity change from 0 to 512 21:30:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 296.293078][ T37] audit: type=1804 audit(1615843833.176:68): pid=19849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749408311/syzkaller.f15YOj/423/file0/file0" dev="sda1" ino=15075 res=1 errno=0 21:30:33 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x10}, 0x0) [ 296.368545][T19849] loop2: detected capacity change from 0 to 512 21:30:33 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 296.396986][ T37] audit: type=1804 audit(1615843833.206:69): pid=19849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir749408311/syzkaller.f15YOj/423/file0/file0" dev="sda1" ino=15075 res=1 errno=0 [ 296.425168][T19849] EXT4-fs (loop2): Unrecognized mount option "%" or missing value 21:30:33 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb42b1951eeec9a11}]}}, &(0x7f0000000180)=""/167, 0x2a, 0xa7, 0x1}, 0x20) 21:30:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x10}, 0x0) 21:30:33 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:33 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:33 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 21:30:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:33 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:34 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f0000000080)={0x0, "dfb4f9ba2ba6f9d7a2c3f85c881b3d6ff30e45401424f7f6a84ec85e3b197ecc7642d7aa3b47db3092f65c50f5e3ef0a93aaaf5415baf8387832ad08a24abe71"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000c80)={r0}, &(0x7f0000000cc0)={'enc=', 'raw', ' hash=', {'nhpoly1305-generic\x00'}}, 0x0, 0x0) 21:30:34 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:34 executing program 2: r0 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x3) 21:30:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:34 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 297.504072][T19941] __nla_validate_parse: 28 callbacks suppressed [ 297.504088][T19941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:34 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x24, 0x1a, 0x77b69d4a368810df, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x4, 0x38}]}, 0x24}}, 0x0) 21:30:34 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:34 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e75", 0x6b, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 21:30:34 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:34 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[]) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x80000001, 0x7fff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000710000/0x1000)=nil, 0x1000, 0x800001, 0x10010, r0, 0xe58000) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x82) write$9p(r1, &(0x7f0000001400)="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", 0x10) sendfile(r1, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 21:30:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 297.789793][T19962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:34 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:34 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e75", 0x6b, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:34 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 297.919071][T19976] loop2: detected capacity change from 0 to 512 21:30:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 21:30:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 298.049631][T19976] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.062185][ T37] audit: type=1804 audit(1615843834.946:70): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749408311/syzkaller.f15YOj/428/file0" dev="sda1" ino=15109 res=1 errno=0 21:30:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 298.105832][T19995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb90202000004000000", 0x17}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 298.161915][ T37] audit: type=1804 audit(1615843834.966:71): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir749408311/syzkaller.f15YOj/428/file0" dev="sda1" ino=15109 res=1 errno=0 21:30:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x9, 0x2, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:30:35 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:35 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e75", 0x6b, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 298.310313][T20009] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb90202000004000000", 0x17}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:35 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21:30:35 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f0000000080)={0x0, "dfb4f9ba2ba6f9d7a2c3f85c881b3d6ff30e45401424f7f6a84ec85e3b197ecc7642d7aa3b47db3092f65c50f5e3ef0a93aaaf5415baf8387832ad08a24abe71"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, 0x0, 0x0) 21:30:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:35 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e75", 0x6b, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb90202000004000000", 0x17}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 21:30:35 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f", 0x23}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:35 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 298.915443][T20055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 21:30:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f", 0x23}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21:30:35 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:35 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:35 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e", 0x6a, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 299.114325][T20076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f", 0x23}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 21:30:36 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:36 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21:30:36 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e", 0x6a, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 21:30:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d06", 0x29}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:36 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:36 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 299.387587][T20108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d06", 0x29}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:36 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e", 0x6a, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) 21:30:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x24, 0x1a, 0x77b69d4a368810df, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 21:30:36 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:36 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d06", 0x29}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 299.610389][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:36 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(r1, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e", 0x6a, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) write$9p(r0, &(0x7f0000001400)="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", 0x10) sendfile(r0, r1, 0x0, 0x10000) 21:30:36 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17", 0x2c}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) 21:30:36 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, 0x0, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 299.810471][T20151] loop2: detected capacity change from 0 to 512 21:30:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17", 0x2c}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 299.917875][T20151] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.936439][ T37] audit: type=1804 audit(1615843836.816:72): pid=20159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749408311/syzkaller.f15YOj/436/file0/file0" dev="sda1" ino=15113 res=1 errno=0 [ 299.984726][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:36 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, 0x0, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x9, 0x2, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) msgsnd(0x0, 0x0, 0x0, 0x0) 21:30:36 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17", 0x2c}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) [ 300.105519][ T37] audit: type=1804 audit(1615843836.856:73): pid=20159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir749408311/syzkaller.f15YOj/436/file0/file0" dev="sda1" ino=15113 res=1 errno=0 [ 300.229802][ T37] audit: type=1800 audit(1615843836.956:74): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=15113 res=0 errno=0 [ 300.266606][T20187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 21:30:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x55, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b36"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:37 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:37 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, 0x0, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b0", 0x2d}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4], 0x38}}, 0x0) 21:30:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b0", 0x2d}], 0x1, 0x0, 0x0, 0x10}, 0x0) 21:30:37 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x30, 0x1a, 0x77b69d4a368810df, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x30}}, 0x0) 21:30:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4], 0x38}}, 0x0) 21:30:37 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x55, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b36"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2e0000001a008104e00f80ecdb4cb9020200000400000001810540fb1200030004830f1474227d4d0622ce17b0", 0x2d}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 300.896859][T20230] validate_nla: 8 callbacks suppressed [ 300.896869][T20230] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:30:37 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4], 0x38}}, 0x0) [ 300.943010][T20235] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:30:37 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x55, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b36"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:37 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$vcsn(0x0, 0x80000000, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e", 0x6a, 0x4000081, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x9, 0x2, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:30:37 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:38 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) 21:30:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x55, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b36"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:38 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 21:30:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x24, 0x1a, 0x77b69d4a368810df, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x3}]}, 0x24}}, 0x0) 21:30:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) 21:30:38 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:38 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) utime(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x8, 0x400}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x82) write$9p(r1, &(0x7f0000001400)="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", 0x10) sendfile(r1, r2, 0x0, 0x10000) 21:30:38 executing program 5: syz_mount_image$hfsplus(&(0x7f00000034c0)='hfsplus\x00', &(0x7f0000003500)='./file0\x00', 0x0, 0x0, &(0x7f0000003680), 0x8400, &(0x7f00000036c0)) 21:30:38 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0x0, &(0x7f0000003840)='./file0\x00', 0x0, 0x0) 21:30:38 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) 21:30:38 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f000000"], 0x38}}, 0x0) 21:30:39 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:39 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$vcsn(0x0, 0x80000000, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="2de28770bfdc479ae533650a553415eb7cc1ae166f424cde03bf176cda73b43f7111807f03f00f3e555e65353352ddadbbcaad88110f01edd582c6f237da1ed20d53999547e4c8d4a8c3ae69f07d7a82afcab695d65317e5518892b728e86c5773755e6d6456d00444804a88aa8509fef689a7358d0865ed159683f0c2127de5b80471d5ea31f74bcead635b17cf33bda98897a6ce08fe2b259d34b2b54bf2eb684afe47b8f724f602b8b1f3ce1242335e5d4d43a277eb8c3e053656eb64d6ce3570274730e177508a307dab43589ce2ca285e622f90b3339b8f3f782c6a4ddc64b1466492b4a2f2d9833e172d0716bfa211e67a121ca5de", 0xf8, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e", 0x6a, 0x4000081, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x0, 0x80800) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:39 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$vcsn(0x0, 0x80000000, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="febc3b777d549ffacdd9ee6633af6e737f2e6d654105f04716908ec7af8775d530c2cc83e31b3f3c7f9e351ba553af429ff9367031b7ec0aed61ea15d08f299f9241acf82356d0859eb45aec582cd03d4cdbdcd6755c166133d9ba85529c0ed8913418402ba7d907115e75", 0x6b, 0x4000081, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="e1158a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a97425a3a07e758044ab0ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:30:39 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:39 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 302.148910][T20330] loop2: detected capacity change from 0 to 512 [ 302.227933][T20330] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.257100][ T37] audit: type=1804 audit(1615843839.136:75): pid=20345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749408311/syzkaller.f15YOj/441/file0/file0" dev="sda1" ino=15116 res=1 errno=0 21:30:39 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x80, 0x8001024, 0xffffffffffffffff, 0x0) 21:30:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f000000"], 0x38}}, 0x0) 21:30:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000100)) 21:30:39 executing program 4: perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:39 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x5890, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 21:30:39 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 302.427708][ T37] audit: type=1804 audit(1615843839.136:76): pid=20345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir749408311/syzkaller.f15YOj/441/file0/file0" dev="sda1" ino=15116 res=1 errno=0 21:30:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$hfsplus(0x0, &(0x7f0000003500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747261267f4eb663702c706f72743d3078303030303030193030303030346532342c6163636573733d757365722c6e6f657874656e64"]) 21:30:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f000000"], 0x38}}, 0x0) 21:30:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x21f, 0x4) 21:30:39 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 302.578949][ T37] audit: type=1800 audit(1615843839.186:77): pid=20330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=15116 res=0 errno=0 [ 302.606125][T20378] 9pnet_virtio: no channels available for device 127.0.0.1 [ 302.620843][T20381] __nla_validate_parse: 16 callbacks suppressed 21:30:39 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 302.620855][T20381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.659945][T20387] 9pnet_virtio: no channels available for device 127.0.0.1 21:30:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x163, 0x0, 0x0) 21:30:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/rt6_stats\x00') preadv(r0, &(0x7f0000001b40)=[{&(0x7f00000006c0)=""/85, 0x55}], 0x1, 0x10000, 0x0) 21:30:39 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 302.731270][T20391] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f000000080001007533"], 0x38}}, 0x0) 21:30:39 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 302.940590][T20409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.011172][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f000000080001007533"], 0x38}}, 0x0) 21:30:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x80000001, 0x7fff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) mmap(&(0x7f0000710000/0x1000)=nil, 0x1000, 0x800001, 0x10010, r0, 0xe58000) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000180)={0x8}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x82) write$9p(r1, &(0x7f0000001400)="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", 0x10) sendfile(r1, r2, 0x0, 0x10000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 21:30:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) utime(0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x82) write$9p(r0, &(0x7f0000001400)="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", 0x10) 21:30:39 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 21:30:39 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:39 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:40 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 303.174458][T20430] loop2: detected capacity change from 0 to 512 [ 303.195652][T20431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:40 executing program 1: r0 = fanotify_init(0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 303.232114][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.284533][T20434] loop5: detected capacity change from 0 to 512 [ 303.333678][T20430] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.345763][T20434] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 21:30:40 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:40 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 303.368817][ T37] audit: type=1800 audit(1615843840.246:78): pid=20442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=15145 res=0 errno=0 21:30:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x57, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f000000080001007533"], 0x38}}, 0x0) [ 303.423854][ T37] audit: type=1804 audit(1615843840.296:79): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir946678975/syzkaller.XQGWyM/447/file0/file0" dev="loop5" ino=17 res=1 errno=0 [ 303.450462][ T37] audit: type=1804 audit(1615843840.296:80): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir946678975/syzkaller.XQGWyM/447/file0/file0" dev="loop5" ino=17 res=1 errno=0 [ 303.523540][T20460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.541483][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040), 0x4) 21:30:40 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6d, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44e203c4b1bc83d8"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_batadv\x00'}) 21:30:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c"], 0x38}}, 0x0) 21:30:40 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000080)) 21:30:41 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:41 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6d, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44e203c4b1bc83d8"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000003280), 0x4) [ 304.160703][T20489] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:41 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:41 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) 21:30:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c"], 0x38}}, 0x0) 21:30:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6d, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44e203c4b1bc83d8"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:41 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000080)) 21:30:41 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 304.424216][T20517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:41 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6d, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762914000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b363de4fb357baa17dacdcfac32957dc8bb44e203c4b1bc83d8"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) 21:30:41 executing program 1: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xcf6e) 21:30:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c"], 0x38}}, 0x0) 21:30:41 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_data=&(0x7f0000000180)="2c2f0e1a98ed61987c5bf72bbc78e970a105349c1d7601f9cd58ba85d9b2ffbb"}) 21:30:41 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:41 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, 0x0}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)) 21:30:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x101, 0x4) 21:30:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000180)) 21:30:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c00"], 0x38}}, 0x0) 21:30:41 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, 0x0}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f00000000c0)) 21:30:41 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x7ffffffe, 0x0) 21:30:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c00"], 0x38}}, 0x0) 21:30:41 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x80605414, 0x0) 21:30:41 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, 0x0}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:41 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000040)={0x0, "1d9ba73f4be16278ef5984ab55db42c397604dfb605500b28828e233d33e481d7d0bf5b6e0ada3f865e5d2282eba02eabe7ab7c5bd12d53a86873fd019cd3a9f6e194e4fef529722c921db0de9aac95be4a55ea6646a51d310958bd8c6ae378a4259e5d846cacb26341bbdc515a4da83df0036c5429f7b5a372659365454c8c5"}) 21:30:41 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)) 21:30:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c00"], 0x38}}, 0x0) 21:30:41 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000c00)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000c80)={"d1ab717c1ec43f2adf88b6e4b1c7686d"}) 21:30:42 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:42 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000200)={0x24, 0x0, 0x8, 0xa, 0xde8e}) 21:30:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004d00)={0x14, 0x8, 0x6, 0x801}, 0x14}}, 0x0) 21:30:42 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:42 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) 21:30:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:42 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0x1261) 21:30:42 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "49c8928c595df4c7488a2b5e6658ae36be1587fe", "02036fcc00d6fcee5f9665d23592abab159f90fa"}) 21:30:42 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:42 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000100)={{r3}, 0x6, &(0x7f00000000c0)=[0x4, 0x8, 0x4, 0x6, 0x7fffffff, 0x24], 0xaa5c, 0x0, [0x1, 0x9, 0x8, 0x200]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x101) ioctl$TCFLSH(r1, 0x540b, 0x1) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) 21:30:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000000c0)) 21:30:42 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 21:30:42 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 21:30:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 21:30:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:42 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x80, 0x0, &(0x7f0000000580)=[@release, @acquire_done={0x40106309, 0x1}, @enter_looper, @increfs={0x40046304, 0x2}, @clear_death, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x48, 0x0, &(0x7f0000000600)="713d20108d188c738d71684421c967412bb7c12c3dd3796a99779ddb4a4d5402b56100ea30e41db86b331d429f2c00810f81a45bbef2452de68c16d3a78b29231d08aaf68cac606c"}) 21:30:42 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="de", 0x1) 21:30:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 21:30:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:43 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0x125f) 21:30:43 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x9}}) 21:30:43 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f0000001080)='/dev/nbd#\x00', 0x0, 0x0) 21:30:43 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 21:30:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000040)={0xffffffffffffffff}) [ 306.613874][T20716] block nbd2: NBD_DISCONNECT 21:30:43 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 306.638949][T20716] block nbd2: NBD_DISCONNECT 21:30:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001540)=0xd) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100)={0x0, r3+30000000}, 0x0) 21:30:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r1, 0xeaa283f2001bdcfb, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 21:30:43 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:43 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f00000002c0)) 21:30:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:43 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x58, 0x0, &(0x7f0000000580)=[@acquire_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:30:43 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1b0000001e005f0214fffffffff807000000160000000000000001", 0x1b) 21:30:43 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:43 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000840)='A\x00\x03\x1a\xf9\x9d\xa7\x05|u\x91L\xdbe\xa5\x7f\x99\'\xc5\x16\xee\xfbX:\xf4\xf1x\xd4bbl\'b\xaa\xee\x84R\x9e\x1ar_\xaf\xb9\x94\xd5\xc0I\xcc\x1d\x8c3\xd9\x13\xb8\xc6\x8a\xbf\b\x90n\x18\x93\x1b\v\x9c\x8d\xc3\xea\xc2\xc7\xe03H!7\x1c\xc6\x80\xb6\x8ff\x1c:nm\xa7H\xed\x10\\\xab\xbbfd\xe6]\xf0\xe9L\xb2\x15fH\xe1\x16]\xe5?\xf1W\xc6T\xe4E\xc5\xfe\x04\xfa\xce\x9d$\xeeQ\xb2]\xee|\xde\xb9Y\xc4\x85.m\xcf\xcf\x17\xba\\14\xce\x82\xe9 \xbay\xdb\xb1\x04s\xce 8\xb8\xb0[\x90\xf5\xadw\xfa\xe2\xc8\xdbA\xf98)\xc7\xb8i\xd2\xed\x13\xd7\xc8\xad\xb6\x8aA\x7f\xf6\xf8\xc9\xa7\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614a21d3dcf2b3e871587f53cd809f98e00", "f8b699c929b92ee722240b5b4c44a41eb88c87cff1866be0bec480ebc5c2189e", [0x0, 0x2d]}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x8001, 0x9, 0xc, 0x0, "0c7f70a167f6cc188cb61c00e740c14c32a9ab322fb8b57bba37c4d876ef58517c2cdde4c2a04a84ecfa7964b4f2f052f4a01d6fb697e016813b74913884da38", "941acb4e4d0917915e0930ccead6e91780ed6d9677f41336de09d52644d882c5", [0xffff8001, 0x64]}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x9e, 0x7, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext={0x100000000, 0x8000}, 0x8084, 0x100000001, 0x4, 0x3, 0x4, 0x8, 0x8000}, 0x0, 0x10, r1, 0x1) [ 307.193848][T20771] loop7: detected capacity change from 0 to 1036 [ 307.421710][T20771] loop_set_status: loop7 ([n)' ­'u©¿•ÖG–Àzj`ÄŽ [ 307.421710][T20771] ‚Ÿ‘¹w9€dèi®yŠDªÖ¢=Ï+>‡‡õ<Ø ùŽ) has still dirty pages (nrpages=16) 21:30:44 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001540)=0xd) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100)={0x0, r3+30000000}, 0x0) 21:30:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x7, 0x9}) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614a21d3dcf2b3e871587f53cd809f98e00", "f8b699c929b92ee722240b5b4c44a41eb88c87cff1866be0bec480ebc5c2189e", [0x0, 0x2d]}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x9e, 0x7, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001, 0x0, 0x3, 0x4, 0x0, 0x8000}, 0x0, 0x10, 0xffffffffffffffff, 0x1) 21:30:44 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:44 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:44 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xa2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) perf_event_open(&(0x7f0000002240)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x1c}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) fdatasync(0xffffffffffffffff) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000023c0)=0x14, 0x800) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x4a3) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000800)="f2bdc0d7db971807da7a85eba33dad7a37f7f9821317f4f76246fec5c8f9efd9fc0c8ad162b1fc2fdc1aa85099c51c1ed2eb201574567c3d92743a4ab1d1c51b57ca7e720110b3dbd14a87c60d6052f5e7fa94305923974e3ca1312cc4", 0x5d}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}], 0x30, 0x8001}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000b80)}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000002400)=[@rights={{0x20, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x8800}, {&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}], 0x4, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002100)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x7}], {0x10, 0x1}}, 0x2c, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000", 0x4a, 0x400}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xf73, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d}], 0x0, &(0x7f0000013a00)=ANY=[@ANYBLOB]) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1001000, &(0x7f0000002780)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB, @ANYRESDEC=r2]) setxattr$trusted_overlay_upper(&(0x7f0000001280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000002800)={0x0, 0xfb, 0xa67, 0x0, 0x0, "6c0000ffec00", "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"}, 0xa67, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x6, 0xfb, 0x62d, 0x0, 0x0, "b145e3180bb48426b58ee26ae64909d4", "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"}, 0x62d, 0x0) 21:30:44 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 307.934474][T20798] loop5: detected capacity change from 0 to 512 [ 307.946335][T20807] __nla_validate_parse: 15 callbacks suppressed [ 307.946348][T20807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.983512][T20798] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:30:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:44 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:44 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x3a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 21:30:44 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xa2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) perf_event_open(&(0x7f0000002240)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x1c}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) fdatasync(0xffffffffffffffff) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000023c0)=0x14, 0x800) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x4a3) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000800)="f2bdc0d7db971807da7a85eba33dad7a37f7f9821317f4f76246fec5c8f9efd9fc0c8ad162b1fc2fdc1aa85099c51c1ed2eb201574567c3d92743a4ab1d1c51b57ca7e720110b3dbd14a87c60d6052f5e7fa94305923974e3ca1312cc4", 0x5d}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}], 0x30, 0x8001}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000b80)}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000002400)=[@rights={{0x20, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x8800}, {&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}], 0x4, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002100)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x7}], {0x10, 0x1}}, 0x2c, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000", 0x4a, 0x400}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xf73, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d}], 0x0, &(0x7f0000013a00)=ANY=[@ANYBLOB]) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1001000, &(0x7f0000002780)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB, @ANYRESDEC=r2]) setxattr$trusted_overlay_upper(&(0x7f0000001280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000002800)={0x0, 0xfb, 0xa67, 0x0, 0x0, "6c0000ffec00", "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"}, 0xa67, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x6, 0xfb, 0x62d, 0x0, 0x0, "b145e3180bb48426b58ee26ae64909d4", "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"}, 0x62d, 0x0) [ 308.061337][T20798] EXT4-fs (loop5): group descriptors corrupted! 21:30:45 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 308.183073][T20824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.297026][T20834] loop5: detected capacity change from 0 to 512 [ 308.339615][T20834] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 308.359353][T20834] EXT4-fs (loop5): group descriptors corrupted! 21:30:45 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001540)=0xd) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100)={0x0, r3+30000000}, 0x0) 21:30:45 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:45 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:45 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xa2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) perf_event_open(&(0x7f0000002240)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x1c}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) fdatasync(0xffffffffffffffff) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000023c0)=0x14, 0x800) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x4a3) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000800)="f2bdc0d7db971807da7a85eba33dad7a37f7f9821317f4f76246fec5c8f9efd9fc0c8ad162b1fc2fdc1aa85099c51c1ed2eb201574567c3d92743a4ab1d1c51b57ca7e720110b3dbd14a87c60d6052f5e7fa94305923974e3ca1312cc4", 0x5d}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}], 0x30, 0x8001}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000b80)}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000002400)=[@rights={{0x20, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x8800}, {&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}], 0x4, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002100)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x7}], {0x10, 0x1}}, 0x2c, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000", 0x4a, 0x400}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xf73, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d}], 0x0, &(0x7f0000013a00)=ANY=[@ANYBLOB]) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1001000, &(0x7f0000002780)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB, @ANYRESDEC=r2]) setxattr$trusted_overlay_upper(&(0x7f0000001280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000002800)={0x0, 0xfb, 0xa67, 0x0, 0x0, "6c0000ffec00", "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"}, 0xa67, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x6, 0xfb, 0x62d, 0x0, 0x0, "b145e3180bb48426b58ee26ae64909d4", "8dfa95f490b5c29ff9389f224c1d0f8d82b5401c68b18752f1f24810951641b2d28aa470a5fec7cc1cabfbdc679b6581b170cb2963e4d4421cf7cf61bf2e91106a5ccf86ced704dd5a91ce8fb6fa3bd4f0264986d9029c368058c1e293fdeab2ecadd3a1ccd738982be05e6527994f4d77691586962fb2ae58e80d061dbba03c9a595ffd4fb2788cd2a8e6147bf811fed93b0583e9ccd11df48aff0b5e0fc187392aa58728bbb313b8de8064e11cf658d4bb435e975574075faaae14529f47d687b1178c084e23c07574ca6d52155b5710231f80b96d6e3f99a05008ff65fc5a88242e8c12cf627442215a5eac9c07457af4980fb3cff8e999c94b6a95bb86457a9d71f139c054c26c88591fefa00524a080ffea5e29a99539b2beacc330b9c4c787e8adb5cf3e1dc30e877e2df587d44e9f2b204a99d914651fb183f816760ae3075916630905f52ddea2dad60a27da4650af5d05443215f78a826fd0599d12a4d9fabe4a3778ea20893b1afa01b78753cd758899b74aaad16b3f573eb2f39153b8c5cd0cbcd06274a462773e3f52bafe685084f9e482a3258cd3aedb1504cc0dcd567917600e564ff2d2fe8fb4afcd235db6db4fcda2b8f53798039f73dbd10b8c2f99697743a5b78a141f18a831aa794dd9430e2ab8b596e3d78e59d6763a86b0885e8f627002a5d77eac470fb685a4f7814b130fa4a7e5e66b3e6e3fae7bf31321c9f8858d8996c56391e41ed62fa28b4db74582f7578bc22266a64476654a23aa3878cc4e4b1c2d961f6e223498e0937572c7db8e6265063101cab017a65a7c77a503fec556060f8102caa95c5a23eebcdd3d1897f05f1328acae7446b5d5db454013c7e42c4d96accf8ddfe71fc7e5f56370d18a69dc699ad1303cb38a11f83d1a8660846755cd47a7f3a433a4011ee128b1e1ffec5a440621a6d044bd17ceee1f5cfec1dd35f41b89a816eaf5f25754307cb3968eae10d566fb79679c7af6ff82b28766cd99539dc09cefc0523a2112c5c81b269c8ec59131dbb9e5cb04d94b28f586b68b5d7df852866ad550768b34712a6080648ca5e3ddbb0996f0b0497ea907c6225d86664a4d5a659782373672b91e6c8ded3445dab6302bf55de0ba17560668426dcc562f757b019c878969a364a5e60be8eb6c3595846b7cbdbd0e1f88422a50d083bf65dd9dd2f5919bf38c2a74fce75f20517a17be51efd6f794e0f59e91da0478b833184db399e635d5c6a469bd5d1dde0c426fff46a4aea7af93ab32afef4d7864e7c7c6b81001293d1888b45f75e98707513fbd69ae16ac5b344532b7d62dcbfc1edc2bceab8a0ec62bf4638f13b968b764ece346288fceec159e68f49db618ea2ad067b301bb69ef7f983afd323738d9abdc729080130b00ee1e82997e9a41f03dd0712d73e334555e440d782adc17302bd3688b37e21dcc044cd139b7cf575ea372916ad6b94e6624cd77a97f18941e69eac13636a30e66cfdb31621145784864f25e61d66eabbafd2580bf1dd950a3e4884bf23c223711c833c715e8b1bf6a187da53bf021b53e5a3297e6d235b6effdd41c4b4de8a5bdbc84b002857e2483e35f3594809261454b257896e966c69b1fd95cc319e309e00e3f70b708794b742bb19234df85411c225b86c0115454a965b278dd5f6a7ea0e21c8679b57bf9090a1ce919c4d1056839725dcaa73640f3a9cc517284806653063fbb48bb614f1587f1cccb65f074c4508670f25e7a1fb3bb5b0c1a3d13b3a70a05f9be65880580809e80a5358132ed29a0ff8286d8de4812e4a0b5eb8bb12374ba43cf555fd033b9d4e95280293971fc81ff68c866df2cc49fecf90651b04de9d755dd77186b31de06d9828971c4202b98f757ffa00b0a7a3fab432dda48f6e3f2ac364a7a5749f56bf32142b2ad6c82f394477a7556a247d4863b2ba06b33e862f9ba43599c013d5739b3ce841e1776dbf03ef0b9c3fe3a138b2af1604c789b528dba03b5bdf6109adaf94aa24dad44b3257ca0f4e6800aaf1c0ef19c9461a56486d6909514b98603846d6ffb5d0acb57186dd9d6cd7420c86dd9f0bb66e55dd70438cf20ee740cf780ea58b9562df870fc18659a6d9185873870790c9f087082365f40d7de077b81131d1b6651cc2fbe656fa7ed8f56c03d082fbce1dc67325c57d5af51d5fd243eb34b3ff952dd17d84a5688be"}, 0x62d, 0x0) 21:30:45 executing program 2: r0 = socket$inet(0x10, 0x80002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) [ 308.844855][T20857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:45 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:45 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 308.894332][T20863] loop5: detected capacity change from 0 to 512 21:30:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/236) 21:30:45 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 308.976557][T20863] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:30:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:45 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 309.023397][T20863] EXT4-fs (loop5): group descriptors corrupted! [ 309.067173][T20884] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001540)=0xd) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100)={0x0, r3+30000000}, 0x0) 21:30:46 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80) 21:30:46 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xa2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) perf_event_open(&(0x7f0000002240)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x1c}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) fdatasync(0xffffffffffffffff) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000023c0)=0x14, 0x800) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x4a3) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000800)="f2bdc0d7db971807da7a85eba33dad7a37f7f9821317f4f76246fec5c8f9efd9fc0c8ad162b1fc2fdc1aa85099c51c1ed2eb201574567c3d92743a4ab1d1c51b57ca7e720110b3dbd14a87c60d6052f5e7fa94305923974e3ca1312cc4", 0x5d}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}], 0x30, 0x8001}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000b80)}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000002400)=[@rights={{0x20, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x8800}, {&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}], 0x4, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002100)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x7}], {0x10, 0x1}}, 0x2c, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000", 0x4a, 0x400}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xf73, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d}], 0x0, &(0x7f0000013a00)=ANY=[@ANYBLOB]) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000011c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1001000, &(0x7f0000002780)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB, @ANYRESDEC=r2]) setxattr$trusted_overlay_upper(&(0x7f0000001280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000002800)={0x0, 0xfb, 0xa67, 0x0, 0x0, "6c0000ffec00", "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"}, 0xa67, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x6, 0xfb, 0x62d, 0x0, 0x0, "b145e3180bb48426b58ee26ae64909d4", "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"}, 0x62d, 0x0) 21:30:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:46 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000001580)=[{{&(0x7f0000000500)=@in={0x2, 0x4e21, @loopback}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff50}}], 0x2, 0x0) 21:30:46 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 309.786913][T20910] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.810243][T20909] loop5: detected capacity change from 0 to 512 [ 309.825065][T20909] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:30:46 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 309.847016][T20909] EXT4-fs (loop5): group descriptors corrupted! [ 309.864824][T20916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:46 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 310.193085][T20947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.244131][T20947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.561444][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.568046][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 21:30:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:47 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bb9b40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, &(0x7f00000027c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0xfffffffffffffe4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000380)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 21:30:47 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:47 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x28, 0x21, 0x53, 0x20, 0x6993, 0xb001, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) 21:30:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000010c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001140)=0x80) 21:30:47 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:47 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:47 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) syz_btf_id_by_name$bpf_lsm(&(0x7f0000004580)='bpf_lsm_task_free\x00') 21:30:47 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 310.849154][T20967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.916963][T20967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb968", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:47 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:47 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) syz_btf_id_by_name$bpf_lsm(&(0x7f0000004580)='bpf_lsm_task_free\x00') [ 311.041090][ T9706] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 311.061085][ T3062] usb 3-1: new high-speed USB device number 4 using dummy_hcd 21:30:48 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 311.331047][ T3062] usb 3-1: Using ep0 maxpacket: 32 [ 311.401369][ T9706] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 311.416517][ T9706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.428264][ T9706] usb 6-1: config 0 descriptor?? [ 311.631075][ T3062] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=dd.6d [ 311.640683][ T3062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.650335][ T3062] usb 3-1: Product: syz [ 311.655164][ T3062] usb 3-1: Manufacturer: syz [ 311.660227][ T3062] usb 3-1: SerialNumber: syz [ 311.668381][ T3062] usb 3-1: config 0 descriptor?? [ 311.963235][ T3062] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 311.976093][ T3062] usb 3-1: USB disconnect, device number 4 [ 312.581012][ T9706] usb 6-1: ATUSB: AT86RF212 version 0 [ 312.690983][ T9708] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 312.801003][ T9706] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 312.809697][ T9706] usb 6-1: Firmware version (0.0) predates our first public release. [ 312.818991][ T9706] usb 6-1: Please update to version 0.2 or newer [ 312.930975][ T9708] usb 3-1: Using ep0 maxpacket: 32 [ 313.021008][ T9706] usb 6-1: Firmware: build [ 313.210999][ T9708] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=dd.6d [ 313.220259][ T9708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.228511][ T9706] usb 6-1: atusb_control_msg: req 0x20 val 0x3 idx 0x2, error -71 [ 313.241118][ T9708] usb 3-1: Product: syz [ 313.245490][ T9708] usb 3-1: Manufacturer: syz [ 313.250080][ T9708] usb 3-1: SerialNumber: syz [ 313.261526][ T9708] usb 3-1: config 0 descriptor?? [ 313.271156][ T9706] usb 6-1: atusb_probe: setup failed, error = -71 [ 313.331361][ T9706] atusb: probe of 6-1:0.0 failed with error -71 [ 313.340633][ T9706] usb 6-1: USB disconnect, device number 38 [ 313.543175][ T9708] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 313.562230][ T9708] usb 3-1: USB disconnect, device number 5 [ 314.010922][ T7] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 314.390938][ T7] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 314.402737][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.413755][ T7] usb 6-1: config 0 descriptor?? 21:30:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f0000001140)) 21:30:51 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:51 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb968", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:51 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0)='IPVS\x00', 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0}}, 0x0) socket(0x6, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000014280)='IPVS\x00', 0xffffffffffffffff) 21:30:51 executing program 2: ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000004580)='bpf_lsm_task_free\x00') [ 314.656211][ T7] usb 6-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 314.672578][ T7] usb 6-1: Firmware version (0.0) predates our first public release. 21:30:51 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 314.705172][ T7] usb 6-1: Please update to version 0.2 or newer [ 314.717335][ T7] usb 6-1: atusb_probe: initialization failed, error = -71 [ 314.736548][T21078] __nla_validate_parse: 2 callbacks suppressed [ 314.736563][T21078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:51 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000880)='nl802154\x00', 0xffffffffffffffff) 21:30:51 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 314.759530][ T7] atusb: probe of 6-1:0.0 failed with error -71 [ 314.785367][ T7] usb 6-1: USB disconnect, device number 39 21:30:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb968", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 314.822669][T21081] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a2a76e252922cb18f6e2e2aba000000092e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000000000000001012b2bbfeaeb647b875027ecce66fd792bbf0e5bf3f6db1c00010000000000deff000000c0060000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x8000}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6}, @TCA_TCINDEX_HASH={0x8}]}}]}, 0x4c}}, 0x0) 21:30:51 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@random="effdf2a84064", @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @local, {[@generic={0x0, 0x12, "b53d95ba79f3b7a9fab467839ba4566f"}, @generic={0x0, 0x3, "18"}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@multicast2}, {@broadcast}]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@remote}, {@private}]}]}}}}}}}, 0x0) 21:30:51 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:51 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:51 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) unshare(0x22020000) unshare(0x24020400) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0x4c, &(0x7f0000000000)={0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)}], 0x61, 0x0) 21:30:51 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007fc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x13, 0x31, 0x133, 0x0, 0x0, {}, [{0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x44}}, 0x0) [ 314.962538][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000013c0)="e6fcad3e78d405ff6c7e422294d57a374965e484a2fb28cf124f3907deaab3aa18dd0c51677151fa2ea683abdd0f94e3e09bd6db49d458261e3f6adf168dd4ebe81e96c78534aeb64a726f9014de514545fbb0db48412755a405ce68834a85a4d0a1c8b43f200558eb3d802e6a854f4a46435610023bf10b1f747a95e02594e2ed313dfd4d1e7fbba3fa6eba6ae8a7a95d9a1c286faea88f291309ab2ab39838b1d047bbf16bdb7ae5c1a2001585db", 0xaf}, {&(0x7f0000001480)="f7e3d0691cc2bb949b472ee25c041cf80b6b96ea0c29d70088670e1ffce375729b44e4fffe8550d0c177ff8728da650b059b580146b39c40d4d8694b0f6205ed8adbe5a16f27e915cc346941cd0f8c4f6df61584ec528b492468ce847217da9725a58fafe67658c0ae5100f47bf45b656e5a47751c3d9dba14fdf912ec700c295e3b1f5cfdea0ae8a18c4023a61d71cb259401e9db15ccebaebefaaf1e2290f6f22919e6c294cbd6d918ab33e8c1355b6f9434a8991aa6a583e13e0045a1c5c5c844a84751e20f4b0e9bb9695966a971b5b449f2070fc46b40e9a4", 0x2000155b}, {&(0x7f0000001580)="f0c99fcd834fee1b104f9e392a43b2809d82dda2c3d2e24bab2a2a113a3351bec1199cda978390da7dff93dd2cda", 0x2e}], 0x3}}], 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 21:30:51 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 315.034820][T21103] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:52 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004400)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x88, 0x2}]}}}], 0x18}}], 0x1, 0x0) 21:30:52 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0xfffffffffffffff3, 0x20000001, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0xb12, 0x4) sendto$inet6(r1, &(0x7f0000000040)="4cf2e44a1ebce1f0e06f9dd4f04d2f0d78979174464ece6b3d72349e81372384a8e7a6fde2bf9b7f0a5c9f7e79d4f2e9c966baf944f0dbc0", 0xffffffffffffffa7, 0x805, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x6e803, 0x0) 21:30:52 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:52 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 315.220324][T21134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x1000001bd) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 21:30:52 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@random="effdf2a84064", @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @local, {[@generic={0x0, 0x12, "b53d95ba79f3b7a9fab467839ba4566f"}, @generic={0x0, 0x3, "18"}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@multicast2}, {@broadcast}]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@remote}, {@private}]}]}}}}}}}, 0x0) 21:30:52 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 315.275716][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:52 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:52 executing program 2: unshare(0x64020000) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x9, 0x80, 0x2, 0x891, 0x122, 0xffffffffffffffff, 0x1, [], 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x40) write$binfmt_misc(r1, &(0x7f00000006c0)={'syz0', "c3884807829a15e467062635b7c421476ee89a4b02c72e1a593a3f52"}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000c04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) 21:30:52 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:52 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 315.416672][T21159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 315.485257][T21159] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 315.497442][T21168] IPVS: ftp: loaded support on port[0] = 21 [ 315.606987][T21197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 315.643179][T21197] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x203, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x66}}, {0x8}, {0x6}, {0x8}}]}, 0x54}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x4, 0x4000000000000003) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8da00000", @ANYRES16=r4, @ANYBLOB="03020000000000000000140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000660003000000000008000b000000000006001100000000000800150000000000"], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[], 0x1000001bd) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 21:30:52 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:52 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, 0x0, 0x6d70) 21:30:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x1000001bd) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 21:30:53 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@random="effdf2a84064", @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @local, {[@generic={0x0, 0x12, "b53d95ba79f3b7a9fab467839ba4566f"}, @generic={0x0, 0x3, "18"}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@multicast2}, {@broadcast}]}]}}}}}}}, 0x0) 21:30:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:53 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:53 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, 0x0, 0x6d70) 21:30:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, r3, &(0x7f0000000200)='./file0\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000540)={0x4, 0xffffffffffffffff}) dup2(r8, r7) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:30:53 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, 0x0, 0x6d70) 21:30:53 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:53 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x0, 0x7, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) r3 = open(0x0, 0x210800, 0x4) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(r2, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r1], 0x1000001bd) 21:30:53 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:53 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x1000001bd) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 21:30:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$KDSKBENT(r2, 0x4bfa, &(0x7f0000000040)={0x41, 0x0, 0x27f}) 21:30:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:30:54 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:54 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:54 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:54 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:54 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd469, 0xffffffffffffffff}) 21:30:54 executing program 2: openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a0dffc2c654"}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 21:30:54 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="8c", 0x1) 21:30:54 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f00000018c0), 0x4) 21:30:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x1000001bd) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 21:30:54 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000018c0), 0x4) 21:30:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002500)}, 0x4880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x9, 0x977}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000580)) sendmsg$nl_netfilter(r1, &(0x7f0000001840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000300000027bd7000000000000900000614003200000000000000000000bb56f2900c6c4582e0f386368065b25439547642c3f19c39f258a3c5186b1e35acdae0ddcf079d45b1df7e930dcb131ae9e740"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'bond_slave_1\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x3}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000020601086c0000000800000000000000050005000a000000050001000600000005000400000000000900020073797a32000000000c000300686173683a6970000c0007800800124023"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:30:54 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:55 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) [ 318.123822][T21336] syz-executor.3: vmalloc: allocation failure: 8589934616 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 318.169781][T21336] CPU: 1 PID: 21336 Comm: syz-executor.3 Not tainted 5.12.0-rc3-syzkaller #0 [ 318.179151][T21336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.189546][T21336] Call Trace: [ 318.193001][T21336] dump_stack+0x137/0x19d [ 318.198363][T21336] warn_alloc+0x105/0x160 [ 318.203477][T21336] ? __vmalloc_node_range+0x79/0x540 [ 318.209201][T21336] __vmalloc_node_range+0x1df/0x540 [ 318.214504][T21336] ? irqentry_exit+0x2a/0x40 [ 318.219450][T21336] ? sysvec_apic_timer_interrupt+0x43/0x80 [ 318.225313][T21336] ? ip_set_alloc+0x1b/0x20 [ 318.229847][T21336] __vmalloc_node+0x61/0x70 [ 318.234464][T21336] ? ip_set_alloc+0x1b/0x20 [ 318.239109][T21336] kvmalloc_node+0xbc/0xf0 [ 318.243542][T21336] ip_set_alloc+0x1b/0x20 [ 318.247946][T21336] hash_ip_create+0x34f/0x940 [ 318.252817][T21336] ip_set_create+0x322/0x870 [ 318.257514][T21336] ? __nla_parse+0x3c/0x50 [ 318.262059][T21336] ? ip_set_protocol+0x2f0/0x2f0 [ 318.267210][T21336] nfnetlink_rcv_msg+0x3d4/0x4a0 [ 318.272224][T21336] ? remove_hrtimer+0x58d/0x650 [ 318.277357][T21336] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 318.283436][T21336] ? aa_get_newest_label+0x74/0x250 [ 318.288834][T21336] netlink_rcv_skb+0x13e/0x240 [ 318.293961][T21336] ? nfnetlink_bind+0xb0/0xb0 [ 318.298848][T21336] nfnetlink_rcv+0x15d/0x1270 [ 318.304666][T21336] ? kvm_sched_clock_read+0x15/0x40 [ 318.310281][T21336] ? ctx_sched_in+0x2d4/0x2f0 [ 318.315153][T21336] ? _raw_spin_unlock+0x22/0x40 [ 318.320199][T21336] ? __perf_event_task_sched_in+0x4c1/0x500 [ 318.326272][T21336] ? irqentry_exit_cond_resched+0x22/0x40 [ 318.332001][T21336] ? irqentry_exit+0x2a/0x40 [ 318.336612][T21336] ? sysvec_apic_timer_interrupt+0x43/0x80 [ 318.342517][T21336] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 318.348785][T21336] ? jhash+0x2b0/0x2b0 [ 318.353264][T21336] ? rhashtable_jhash2+0x13a/0x1a0 [ 318.358711][T21336] ? __rcu_read_unlock+0x5c/0x250 [ 318.363828][T21336] ? jhash+0x2b0/0x2b0 [ 318.368372][T21336] ? netlink_deliver_tap+0x74/0x470 [ 318.373599][T21336] ? __netlink_lookup+0x22c/0x260 [ 318.378729][T21336] ? __rcu_read_unlock+0x5c/0x250 [ 318.383869][T21336] netlink_unicast+0x5fc/0x6c0 [ 318.388871][T21336] netlink_sendmsg+0x6f8/0x7c0 [ 318.393656][T21336] ? netlink_getsockopt+0x720/0x720 [ 318.399032][T21336] ____sys_sendmsg+0x360/0x4d0 [ 318.403897][T21336] ? import_iovec+0xb8/0xd0 [ 318.411543][T21336] __sys_sendmsg+0x1ed/0x270 [ 318.416328][T21336] ? iput+0x3fd/0x520 [ 318.420918][T21336] ? __se_sys_futex+0x2a8/0x390 [ 318.426136][T21336] ? __fpregs_load_activate+0x103/0x1f0 [ 318.432222][T21336] __x64_sys_sendmsg+0x42/0x50 [ 318.436999][T21336] do_syscall_64+0x39/0x80 [ 318.441754][T21336] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 318.447851][T21336] RIP: 0033:0x465f69 [ 318.451767][T21336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 318.471953][T21336] RSP: 002b:00007f793f81f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.480797][T21336] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 318.488889][T21336] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 318.497238][T21336] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 318.505316][T21336] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 21:30:55 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x0) 21:30:55 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:55 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on']) open(&(0x7f0000000380)='./bus/file0\x00', 0x0, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) mount(&(0x7f00000002c0)=@filename='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus/file0\x00') [ 318.514371][T21336] R13: 00007fffbc4f898f R14: 00007f793f81f300 R15: 0000000000022000 [ 318.542757][T21336] Mem-Info: [ 318.546056][T21336] active_anon:321 inactive_anon:233877 isolated_anon:0 [ 318.546056][T21336] active_file:5934 inactive_file:40350 isolated_file:0 [ 318.546056][T21336] unevictable:768 dirty:157 writeback:0 [ 318.546056][T21336] slab_reclaimable:10283 slab_unreclaimable:27667 [ 318.546056][T21336] mapped:60678 shmem:8138 pagetables:3071 bounce:0 [ 318.546056][T21336] free:1584977 free_pcp:895 free_cma:0 21:30:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fed000/0x1000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 318.602117][T21336] Node 0 active_anon:1180kB inactive_anon:935044kB active_file:23620kB inactive_file:161400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:242508kB dirty:628kB writeback:0kB shmem:30548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 741376kB writeback_tmp:0kB kernel_stack:5520kB pagetables:12380kB all_unreclaimable? no 21:30:55 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:55 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 318.695248][T21336] Node 1 active_anon:104kB inactive_anon:364kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:0kB pagetables:4kB all_unreclaimable? no [ 318.844801][T21336] Node 0 DMA free:15904kB min:176kB low:220kB high:264kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 21:30:55 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:55 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 21:30:55 executing program 1: poll(0x0, 0x0, 0xe5) clone(0x2000581edfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) [ 318.925868][T21336] lowmem_reserve[]: 0 2862 3821 3821 3821 [ 318.932530][T21336] Node 0 DMA32 free:2153116kB min:32808kB low:41008kB high:49208kB reserved_highatomic:0KB active_anon:112kB inactive_anon:309064kB active_file:1140kB inactive_file:119376kB unevictable:0kB writepending:264kB present:3129332kB managed:2936664kB mlocked:0kB bounce:0kB free_pcp:1864kB local_pcp:448kB free_cma:0kB [ 319.030180][T21336] lowmem_reserve[]: 0 0 959 959 959 [ 319.061872][T21336] Node 0 Normal free:123024kB min:11000kB low:13748kB high:16496kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:628400kB active_file:22480kB inactive_file:42024kB unevictable:1536kB writepending:364kB present:1048576kB managed:982572kB mlocked:0kB bounce:0kB free_pcp:1380kB local_pcp:1088kB free_cma:0kB [ 319.100545][T21367] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 319.221768][T21336] lowmem_reserve[]: 0 0 0 0 0 [ 319.233974][T21336] Node 1 Normal free:4045104kB min:46120kB low:57648kB high:69176kB reserved_highatomic:0KB active_anon:104kB inactive_anon:364kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119864kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.303368][T21336] lowmem_reserve[]: 0 0 0 0 0 [ 319.316312][T21336] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 319.347895][T21336] Node 0 DMA32: 190*4kB (UM) 71*8kB (UM) 28*16kB (UME) 17*32kB (UM) 9*64kB (UME) 15*128kB (UM) 4*256kB (UE) 5*512kB (UME) 3*1024kB (UM) 4*2048kB (UM) 523*4096kB (UM) = 2161872kB [ 319.397012][T21336] Node 0 Normal: 2314*4kB (M) 1859*8kB (M) 1263*16kB (M) 989*32kB (M) 517*64kB (M) 79*128kB (M) 13*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 123024kB [ 319.420732][T21336] Node 1 Normal: 4*4kB (UME) 4*8kB (UE) 4*16kB (UE) 6*32kB (UME) 4*64kB (UME) 0*128kB 3*256kB (UME) 2*512kB (ME) 0*1024kB 2*2048kB (UM) 986*4096kB (M) = 4045104kB [ 319.439637][T21336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.450018][T21336] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 319.487043][T21336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.509855][T21336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 319.532595][T21336] 50510 total pagecache pages [ 319.537505][T21336] 0 pages in swap cache [ 319.543625][T21336] Swap cache stats: add 0, delete 0, find 0/0 [ 319.549819][T21336] Free swap = 0kB [ 319.553969][T21336] Total swap = 0kB 21:30:56 executing program 3: poll(0x0, 0x0, 0xe5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x1}) clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) 21:30:56 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 21:30:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() getdents64(r1, &(0x7f00000003c0)=""/219, 0xdb) setitimer(0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x2710}}, 0x0) llistxattr(0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:30:56 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:56 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on']) open(&(0x7f0000000380)='./bus/file0\x00', 0x0, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) mount(&(0x7f00000002c0)=@filename='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus/file0\x00') [ 319.557723][T21336] 2097051 pages RAM [ 319.563546][T21336] 0 pages HighMem/MovableOnly [ 319.568833][T21336] 83300 pages reserved [ 319.574030][T21336] 0 pages cma reserved 21:30:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fed000/0x1000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:56 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:56 executing program 1: pipe2(&(0x7f00000000c0), 0x0) mlock(&(0x7f0000fee000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 21:30:56 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:56 executing program 5: mprotect(&(0x7f00005f2000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f00005f2000/0x4000)=nil, 0x4000) mprotect(&(0x7f00005e3000/0x14000)=nil, 0x14000, 0xe) 21:30:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='bond_slave_1\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001300)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x4000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ftruncate(r2, 0x7) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@remote, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) 21:30:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21:30:56 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) [ 320.101974][T21450] kvm: emulating exchange as write 21:30:57 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:30:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r1, 0x0, "ed6e5e", "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"}}, 0x110) 21:30:57 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on']) open(&(0x7f0000000380)='./bus/file0\x00', 0x0, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) mount(&(0x7f00000002c0)=@filename='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus/file0\x00') 21:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21:30:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 21:30:57 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:30:57 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$getown(r1, 0x9) sched_setattr(r4, &(0x7f0000000140)={0x38, 0x3, 0x10, 0xfffffffa, 0x1000, 0xffffffffffffff21, 0x5, 0x5, 0x1, 0x1}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x10000}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000180)={0xb, 0x0, 0x36ff53e6}) perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1bf, 0x4, @perf_bp={&(0x7f0000000240), 0xc}, 0xb24, 0x5, 0xffff, 0x5, 0x6f8, 0x9, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 21:30:57 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:30:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21:30:57 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:57 executing program 4: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:30:57 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on,index=on']) open(&(0x7f0000000380)='./bus/file0\x00', 0x0, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) mount(&(0x7f00000002c0)=@filename='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus/file0\x00') 21:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:57 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:57 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 21:30:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80)='nl80211\x00', 0xffffffffffffffff) 21:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21:30:57 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, 0x0, 0x0, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 21:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:57 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, 0x0, 0x0, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$getown(r1, 0x9) sched_setattr(r4, &(0x7f0000000140)={0x38, 0x0, 0x10, 0xfffffffa, 0x1000, 0xffffffffffffff21, 0x5, 0x5, 0x1, 0x1}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x10000}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000180)={0xb, 0x0, 0x36ff53e6}) perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1bf, 0x4, @perf_bp={&(0x7f0000000240), 0xc}, 0xb24, 0x5, 0xffff, 0x5, 0x6f8, 0x9, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 21:30:58 executing program 5: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000668000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000100)="8fa978d2660d0f011b66baf80cb8dc7a9985ef66bafc0cb8e59b0000ef440f20c03505000000440f22c0c4a1db10da8fe878c246008647d8060f20e035004000000f22e0f30f2a8500000000400f07", 0x4f}], 0x1, 0x33, &(0x7f0000000380), 0x0) perf_event_open(0x0, 0x0, 0xc, r0, 0xa) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 21:30:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:58 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, 0x0, 0x0, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0xa, 0x4}, 0xc) 21:30:58 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:58 executing program 2: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x9, 0xae, 0x0, 0xfff}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) 21:30:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:58 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4f6) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x22000000) 21:30:58 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:30:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$getown(r1, 0x9) sched_setattr(r4, &(0x7f0000000140)={0x38, 0x0, 0x10, 0xfffffffa, 0x1000, 0xffffffffffffff21, 0x5, 0x5, 0x1, 0x1}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x10000}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000180)={0xb, 0x0, 0x36ff53e6}) perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1bf, 0x4, @perf_bp={&(0x7f0000000240), 0xc}, 0xb24, 0x5, 0xffff, 0x5, 0x6f8, 0x9, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 21:31:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, "aab6acd8299aad0814e455de2011403500c326d8586368cb4fd6cbed31f5b307"}) 21:31:01 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:01 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000000000)={0x8}) 21:31:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$getown(r1, 0x9) sched_setattr(r4, &(0x7f0000000140)={0x38, 0x0, 0x10, 0xfffffffa, 0x1000, 0xffffffffffffff21, 0x5, 0x5, 0x1, 0x1}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x10000}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000180)={0xb, 0x0, 0x36ff53e6}) perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1bf, 0x4, @perf_bp={&(0x7f0000000240), 0xc}, 0xb24, 0x5, 0xffff, 0x5, 0x6f8, 0x9, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 21:31:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x34}]}) 21:31:01 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:31:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40104593, &(0x7f00000001c0)=[0x0, 0x80000000]) 21:31:01 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r0, 0x0, 0x0) 21:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:01 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:31:01 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 21:31:01 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) 21:31:01 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 21:31:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$getown(r1, 0x9) sched_setattr(r4, &(0x7f0000000140)={0x38, 0x0, 0x10, 0xfffffffa, 0x1000, 0xffffffffffffff21, 0x5, 0x5, 0x1, 0x1}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x10000}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000180)={0xb, 0x0, 0x36ff53e6}) perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1bf, 0x4, @perf_bp={&(0x7f0000000240), 0xc}, 0xb24, 0x5, 0xffff, 0x5, 0x6f8, 0x9, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 21:31:01 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="84", 0x1}]) 21:31:01 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x2, 0xff}, 0x20) 21:31:01 executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='user.incfs.id\x00', &(0x7f00000000c0), 0x20, 0x1) 21:31:01 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x9}, 0x0) 21:31:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000240)=@nfc, 0x80) 21:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:01 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) write$char_raw(r0, 0x0, 0xffffffffffffff61) 21:31:01 executing program 5: mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x1) 21:31:01 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20002, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 21:31:01 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x9}, 0x0) 21:31:01 executing program 2: pipe(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(r0, 0x0, 0x0) 21:31:01 executing program 4: r0 = memfd_create(&(0x7f0000000a00)='/!${/%/\xfa@&T/\x00x\x84\x93\xff\xa5\xfe|\xa4r\x87\xb3l\x03\xa6_&u$S|STT\xcdO\xc4)\x88^\x04\x00\x18\xcf\xde\xf1\xcb\xffRg\xbd&\x94?\xc4\xe8\x01\x12p\xc2\xf2\xb1\xcdbR{\xbb\xf2\xf8\xd6;\xfa\xc0\x8d\x0f\x9b\xda\xf0\x03\xc0\x98\xcb\x0e\xab;\xb6\xf4=\x19V\x85\x8d\xa1/\x1f\xc4\xaf\xea\"H\xff\x10|\xe6\t-\x7f\xe1}\x05*\n\xa1T\x91\xb9\xef\x8e5\xab%:\xe6\fBN\xb4\x00l\xf8\xc5\x8a\xd42!\x16\xc8\xf1\xb9\x17\xf8\xc7\xb6]\vL\x03\x90\xeb\x11\xdd{\xb8\xf8\x06\x9c\xb5\xf9\xe6\xdd\xee}\xe9TA\xc9\xc60\x01K\bt\xcdqg\xd3\xe5\xb1\xfeK\x17\xa8\x1f|\'\xbe\xcd\x12\xc2\xf5\xe9\xd4\x83\x9cbEK:/\b\xa8*\xaf\x8c?.X\x9f\xb2\x10\x0f\xca2zO\x1f?\xde\x8cw\x01\x14r\x9f\xf5X\x03k\xba\xec\x8a\xabb\xf7G\x955g\xd9\x8b<\x8d\xb1\"\xa2\xf7\x1f\x16-\xbc#G\xa4;\xac\xbf\x03N\x7f7>\x1af4\x9f/\xda\x8f#\xec\xee\xe8|0z\x01Q\x19\x8f\xd13({b`TC\x99&\a|{+\xa7W\t\xf2\xc3\xeb\xd6\xb3v\xd1\x16\x01\x88mE?\x93W\xcc\xcb\xa1x\x03\xe9\x9fX\xe0~\xd7\xab\x04\xb1\xb7\x11\x86\xd9\x1c\xbf\xb5\xffi\xf3\xa8\xe8\x00'/355, 0x0) r1 = dup(r0) write$FUSE_LK(r1, 0x0, 0x0) 21:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:01 executing program 5: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 21:31:01 executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 21:31:01 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x9}, 0x0) 21:31:01 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, 0x0) 21:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:02 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(r0) write$tcp_mem(r1, 0x0, 0x0) 21:31:02 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x18000, 0x0) 21:31:02 executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 21:31:02 executing program 1: r0 = memfd_create(&(0x7f0000000040)='/!${/\v/\xfa@&T/\x00\x87\"\x94\xa5~p5\xc4\x88\xff.\x97\x96-FCH@\xdbY', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RUNLINKAT(r1, 0x0, 0x0) 21:31:02 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)='ns/user\x00') r1 = dup(r0) write$FUSE_ENTRY(r1, 0x0, 0x0) 21:31:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:31:02 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) 21:31:02 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001500), 0x8, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) 21:31:02 executing program 5: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x9d) 21:31:02 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x3a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 21:31:02 executing program 0: r0 = memfd_create(&(0x7f0000000a00)='/!${/%/\xfa@&T/\x00x\x84\x93\xff\xa5\xfe|\xa4r\x87\xb3l\x03\xa6_&u$S|STT\xcdO\xc4)\x88^\x04\x00\x18\xcf\xde\xf1\xcb\xffRg\xbd&\x94?\xc4\xe8\x01\x12p\xc2\xf2\xb1\xcdbR{\xbb\xf2\xf8\xd6;\xfa\xc0\x8d\x0f\x9b\xda\xf0\x03\xc0\x98\xcb\x0e\xab;\xb6\xf4=\x19V\x85\x8d\xa1/\x1f\xc4\xaf\xea\"H\xff\x10|\xe6\t-\x7f\xe1}\x05*\n\xa1T\x91\xb9\xef\x8e5\xab%:\xe6\fBN\xb4\x00l\xf8\xc5\x8a\xd42!\x16\xc8\xf1\xb9\x17\xf8\xc7\xb6]\vL\x03\x90\xeb\x11\xdd{\xb8\xf8\x06\x9c\xb5\xf9\xe6\xdd\xee}\xe9TA\xc9\xc60\x01K\bt\xcdqg\xd3\xe5\xb1\xfeK\x17\xa8\x1f|\'\xbe\xcd\x12\xc2\xf5\xe9\xd4\x83\x9cbEK:/\b\xa8*\xaf\x8c?.X\x9f\xb2\x10\x0f\xca2zO\x1f?\xde\x8cw\x01\x14r\x9f\xf5X\x03k\xba\xec\x8a\xabb\xf7G\x955g\xd9\x8b<\x8d\xb1\"\xa2\xf7\x1f\x16-\xbc#G\xa4;\xac\xbf\x03N\x7f7>\x1af4\x9f/\xda\x8f#\xec\xee\xe8|0z\x01Q\x19\x8f\xd13({b`TC\x99&\a|{+\xa7W\t\xf2\xc3\xeb\xd6\xb3v\xd1\x16\x01\x88mE?\x93W\xcc\xcb\xa1x\x03\xe9\x9fX\xe0~\xd7\xab\x04\xb1\xb7\x11\x86\xd9\x1c\xbf\xb5\xffi\xf3\xa8\xe8\x00'/355, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x0) 21:31:02 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(r0) sendmsg$netlink(r1, 0x0, 0x0) 21:31:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:31:02 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r0, 0x0, 0x0) 21:31:02 executing program 4: r0 = memfd_create(&(0x7f0000000a00)='/!${/%/\xfa@&T/\x00x\x84\x93\xff\xa5\xfe|\xa4r\x87\xb3l\x03\xa6_&u$S|STT\xcdO\xc4)\x88^\x04\x00\x18\xcf\xde\xf1\xcb\xffRg\xbd&\x94?\xc4\xe8\x01\x12p\xc2\xf2\xb1\xcdbR{\xbb\xf2\xf8\xd6;\xfa\xc0\x8d\x0f\x9b\xda\xf0\x03\xc0\x98\xcb\x0e\xab;\xb6\xf4=\x19V\x85\x8d\xa1/\x1f\xc4\xaf\xea\"H\xff\x10|\xe6\t-\x7f\xe1}\x05*\n\xa1T\x91\xb9\xef\x8e5\xab%:\xe6\fBN\xb4\x00l\xf8\xc5\x8a\xd42!\x16\xc8\xf1\xb9\x17\xf8\xc7\xb6]\vL\x03\x90\xeb\x11\xdd{\xb8\xf8\x06\x9c\xb5\xf9\xe6\xdd\xee}\xe9TA\xc9\xc60\x01K\bt\xcdqg\xd3\xe5\xb1\xfeK\x17\xa8\x1f|\'\xbe\xcd\x12\xc2\xf5\xe9\xd4\x83\x9cbEK:/\b\xa8*\xaf\x8c?.X\x9f\xb2\x10\x0f\xca2zO\x1f?\xde\x8cw\x01\x14r\x9f\xf5X\x03k\xba\xec\x8a\xabb\xf7G\x955g\xd9\x8b<\x8d\xb1\"\xa2\xf7\x1f\x16-\xbc#G\xa4;\xac\xbf\x03N\x7f7>\x1af4\x9f/\xda\x8f#\xec\xee\xe8|0z\x01Q\x19\x8f\xd13({b`TC\x99&\a|{+\xa7W\t\xf2\xc3\xeb\xd6\xb3v\xd1\x16\x01\x88mE?\x93W\xcc\xcb\xa1x\x03\xe9\x9fX\xe0~\xd7\xab\x04\xb1\xb7\x11\x86\xd9\x1c\xbf\xb5\xffi\xf3\xa8\xe8\x00'/355, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_LSEEK(r1, 0x0, 0x0) 21:31:02 executing program 2: r0 = memfd_create(&(0x7f0000000a00)='/!${/%/\xfa@&T/\x00x\x84\x93\xff\xa5\xfe|\xa4r\x87\xb3l\x03\xa6_&u$S|STT\xcdO\xc4)\x88^\x04\x00\x18\xcf\xde\xf1\xcb\xffRg\xbd&\x94?\xc4\xe8\x01\x12p\xc2\xf2\xb1\xcdbR{\xbb\xf2\xf8\xd6;\xfa\xc0\x8d\x0f\x9b\xda\xf0\x03\xc0\x98\xcb\x0e\xab;\xb6\xf4=\x19V\x85\x8d\xa1/\x1f\xc4\xaf\xea\"H\xff\x10|\xe6\t-\x7f\xe1}\x05*\n\xa1T\x91\xb9\xef\x8e5\xab%:\xe6\fBN\xb4\x00l\xf8\xc5\x8a\xd42!\x16\xc8\xf1\xb9\x17\xf8\xc7\xb6]\vL\x03\x90\xeb\x11\xdd{\xb8\xf8\x06\x9c\xb5\xf9\xe6\xdd\xee}\xe9TA\xc9\xc60\x01K\bt\xcdqg\xd3\xe5\xb1\xfeK\x17\xa8\x1f|\'\xbe\xcd\x12\xc2\xf5\xe9\xd4\x83\x9cbEK:/\b\xa8*\xaf\x8c?.X\x9f\xb2\x10\x0f\xca2zO\x1f?\xde\x8cw\x01\x14r\x9f\xf5X\x03k\xba\xec\x8a\xabb\xf7G\x955g\xd9\x8b<\x8d\xb1\"\xa2\xf7\x1f\x16-\xbc#G\xa4;\xac\xbf\x03N\x7f7>\x1af4\x9f/\xda\x8f#\xec\xee\xe8|0z\x01Q\x19\x8f\xd13({b`TC\x99&\a|{+\xa7W\t\xf2\xc3\xeb\xd6\xb3v\xd1\x16\x01\x88mE?\x93W\xcc\xcb\xa1x\x03\xe9\x9fX\xe0~\xd7\xab\x04\xb1\xb7\x11\x86\xd9\x1c\xbf\xb5\xffi\xf3\xa8\xe8\x00'/355, 0x0) r1 = dup(r0) write$tcp_mem(r1, 0x0, 0x0) 21:31:02 executing program 0: r0 = memfd_create(&(0x7f0000000a00)='/!${/%/\xfa@&T/\x00x\x84\x93\xff\xa5\xfe|\xa4r\x87\xb3l\x03\xa6_&u$S|STT\xcdO\xc4)\x88^\x04\x00\x18\xcf\xde\xf1\xcb\xffRg\xbd&\x94?\xc4\xe8\x01\x12p\xc2\xf2\xb1\xcdbR{\xbb\xf2\xf8\xd6;\xfa\xc0\x8d\x0f\x9b\xda\xf0\x03\xc0\x98\xcb\x0e\xab;\xb6\xf4=\x19V\x85\x8d\xa1/\x1f\xc4\xaf\xea\"H\xff\x10|\xe6\t-\x7f\xe1}\x05*\n\xa1T\x91\xb9\xef\x8e5\xab%:\xe6\fBN\xb4\x00l\xf8\xc5\x8a\xd42!\x16\xc8\xf1\xb9\x17\xf8\xc7\xb6]\vL\x03\x90\xeb\x11\xdd{\xb8\xf8\x06\x9c\xb5\xf9\xe6\xdd\xee}\xe9TA\xc9\xc60\x01K\bt\xcdqg\xd3\xe5\xb1\xfeK\x17\xa8\x1f|\'\xbe\xcd\x12\xc2\xf5\xe9\xd4\x83\x9cbEK:/\b\xa8*\xaf\x8c?.X\x9f\xb2\x10\x0f\xca2zO\x1f?\xde\x8cw\x01\x14r\x9f\xf5X\x03k\xba\xec\x8a\xabb\xf7G\x955g\xd9\x8b<\x8d\xb1\"\xa2\xf7\x1f\x16-\xbc#G\xa4;\xac\xbf\x03N\x7f7>\x1af4\x9f/\xda\x8f#\xec\xee\xe8|0z\x01Q\x19\x8f\xd13({b`TC\x99&\a|{+\xa7W\t\xf2\xc3\xeb\xd6\xb3v\xd1\x16\x01\x88mE?\x93W\xcc\xcb\xa1x\x03\xe9\x9fX\xe0~\xd7\xab\x04\xb1\xb7\x11\x86\xd9\x1c\xbf\xb5\xffi\xf3\xa8\xe8\x00'/355, 0x0) r1 = dup(r0) dup(r1) 21:31:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:31:02 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x520) 21:31:02 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) 21:31:02 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$tcp_mem(r0, 0x0, 0x0) 21:31:02 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:02 executing program 0: readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/85, 0x55) 21:31:02 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002100)='/dev/null\x00', 0x8102, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) 21:31:02 executing program 1: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x1) 21:31:02 executing program 4: getrandom(&(0x7f0000000040)=""/216, 0xd8, 0x1) 21:31:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0, 0x0) 21:31:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="b9", 0x1, 0x48000, 0x0, 0x0) 21:31:02 executing program 4: r0 = memfd_create(&(0x7f0000000a00)='/!${/%/\xfa@&T/\x00x\x84\x93\xff\xa5\xfe|\xa4r\x87\xb3l\x03\xa6_&u$S|STT\xcdO\xc4)\x88^\x04\x00\x18\xcf\xde\xf1\xcb\xffRg\xbd&\x94?\xc4\xe8\x01\x12p\xc2\xf2\xb1\xcdbR{\xbb\xf2\xf8\xd6;\xfa\xc0\x8d\x0f\x9b\xda\xf0\x03\xc0\x98\xcb\x0e\xab;\xb6\xf4=\x19V\x85\x8d\xa1/\x1f\xc4\xaf\xea\"H\xff\x10|\xe6\t-\x7f\xe1}\x05*\n\xa1T\x91\xb9\xef\x8e5\xab%:\xe6\fBN\xb4\x00l\xf8\xc5\x8a\xd42!\x16\xc8\xf1\xb9\x17\xf8\xc7\xb6]\vL\x03\x90\xeb\x11\xdd{\xb8\xf8\x06\x9c\xb5\xf9\xe6\xdd\xee}\xe9TA\xc9\xc60\x01K\bt\xcdqg\xd3\xe5\xb1\xfeK\x17\xa8\x1f|\'\xbe\xcd\x12\xc2\xf5\xe9\xd4\x83\x9cbEK:/\b\xa8*\xaf\x8c?.X\x9f\xb2\x10\x0f\xca2zO\x1f?\xde\x8cw\x01\x14r\x9f\xf5X\x03k\xba\xec\x8a\xabb\xf7G\x955g\xd9\x8b<\x8d\xb1\"\xa2\xf7\x1f\x16-\xbc#G\xa4;\xac\xbf\x03N\x7f7>\x1af4\x9f/\xda\x8f#\xec\xee\xe8|0z\x01Q\x19\x8f\xd13({b`TC\x99&\a|{+\xa7W\t\xf2\xc3\xeb\xd6\xb3v\xd1\x16\x01\x88mE?\x93W\xcc\xcb\xa1x\x03\xe9\x9fX\xe0~\xd7\xab\x04\xb1\xb7\x11\x86\xd9\x1c\xbf\xb5\xffi\xf3\xa8\xe8\x00'/355, 0x0) r1 = dup(r0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) 21:31:02 executing program 2: r0 = memfd_create(&(0x7f0000000a00)='/!${/%/\xfa@&T/\x00x\x84\x93\xff\xa5\xfe|\xa4r\x87\xb3l\x03\xa6_&u$S|STT\xcdO\xc4)\x88^\x04\x00\x18\xcf\xde\xf1\xcb\xffRg\xbd&\x94?\xc4\xe8\x01\x12p\xc2\xf2\xb1\xcdbR{\xbb\xf2\xf8\xd6;\xfa\xc0\x8d\x0f\x9b\xda\xf0\x03\xc0\x98\xcb\x0e\xab;\xb6\xf4=\x19V\x85\x8d\xa1/\x1f\xc4\xaf\xea\"H\xff\x10|\xe6\t-\x7f\xe1}\x05*\n\xa1T\x91\xb9\xef\x8e5\xab%:\xe6\fBN\xb4\x00l\xf8\xc5\x8a\xd42!\x16\xc8\xf1\xb9\x17GI\x81\xbe\vL\x03\x90\xeb\x11\xdd{\xb8\xf8\x06\x9c\xb5\xf9\xe6\xdd\xee}\b\b\x00\x00\xc60\x01K\bt\xcdqg\xd3\xe5\xb1\xbd{\x16&\x1f|\'\xbe\xcd\x12\xc2\xf5\xe9\xd4\x9cbEK:/\b\xa8*\xaf\x8c?.X\x9f\xb2\x10\x0f\xca2zO\x1f?\xde\x8cw\x01\x14r\x9f\xf5X\x03k\xba\xec\x8a\xabb\xf7G\x955g\xd9\x8b<\x8d\xb1\"\xa2\xf7\x1f\x16-\xbc#G\xa4;\xac\xbf\x03N\x7f7>\x1af4\x9f/\xda\x8f#\xec\xee\xe8|0z\x01Q\x19\x8f\xd13({b`TC\x99&\a|{+\xa7W^s\x9b\x06\x8dU\'\x89\x16\x88\xdc\t\xf2\xc3\xeb\xd6\xb3v\xd1\x16\x01\x88mE?\x93W\xcc\xcb\xa1x\x03\xe9\x9fX\xe0~\xd7\xab\x04\xb1\xb7\x11\x86\xd9\x1c\xbf\xb5\xffi\xf3\xa8\xe8\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) 21:31:02 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:02 executing program 0: r0 = memfd_create(&(0x7f0000000a00)='/!${/%/\xfa@&T/\x00x\x84\x93\xff\xa5\xfe|\xa4r\x87\xb3l\x03\xa6_&u$S|STT\xcdO\xc4)\x88^\x04\x00\x18\xcf\xde\xf1\xcb\xffRg\xbd&\x94?\xc4\xe8\x01\x12p\xc2\xf2\xb1\xcdbR{\xbb\xf2\xf8\xd6;\xfa\xc0\x8d\x0f\x9b\xda\xf0\x03\xc0\x98\xcb\x0e\xab;\xb6\xf4=\x19V\x85\x8d\xa1/\x1f\xc4\xaf\xea\"H\xff\x10|\xe6\t-\x7f\xe1}\x05*\n\xa1T\x91\xb9\xef\x8e5\xab%:\xe6\fBN\xb4\x00l\xf8\xc5\x8a\xd42!\x16\xc8\xf1\xb9\x17\xf8\xc7\xb6]\vL\x03\x90\xeb\x11\xdd{\xb8\xf8\x06\x9c\xb5\xf9\xe6\xdd\xee}\xe9TA\xc9\xc60\x01K\bt\xcdqg\xd3\xe5\xb1\xfeK\x17\xa8\x1f|\'\xbe\xcd\x12\xc2\xf5\xe9\xd4\x83\x9cbEK:/\b\xa8*\xaf\x8c?.X\x9f\xb2\x10\x0f\xca2zO\x1f?\xde\x8cw\x01\x14r\x9f\xf5X\x03k\xba\xec\x8a\xabb\xf7G\x955g\xd9\x8b<\x8d\xb1\"\xa2\xf7\x1f\x16-\xbc#G\xa4;\xac\xbf\x03N\x7f7>\x1af4\x9f/\xda\x8f#\xec\xee\xe8|0z\x01Q\x19\x8f\xd13({b`TC\x99&\a|{+\xa7W\t\xf2\xc3\xeb\xd6\xb3v\xd1\x16\x01\x88mE?\x93W\xcc\xcb\xa1x\x03\xe9\x9fX\xe0~\xd7\xab\x04\xb1\xb7\x11\x86\xd9\x1c\xbf\xb5\xffi\xf3\xa8\xe8\x00'/355, 0x0) pwritev2(r0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x1) 21:31:02 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 21:31:02 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(r0) write$P9_RGETLOCK(r1, 0x0, 0x0) 21:31:02 executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='user.incfs.id\x00', 0x0, 0x0, 0x1) 21:31:02 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_PBSZGET(r0, 0x127b, 0x0) 21:31:02 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:02 executing program 1: faccessat(0xffffffffffffff9c, 0x0, 0xd4) 21:31:03 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='uid_map\x00') renameat2(r1, &(0x7f00000023c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002400)='./file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x100}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:31:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@nl, 0x80) 21:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000001380), &(0x7f00000013c0)=0x4) 21:31:03 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\xf0+*+@(^-!^*/-!*]+\x00') 21:31:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) connect$packet(r0, 0x0, 0xf8fe82ca1ac8c67c) 21:31:03 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4002, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 21:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:03 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) 21:31:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) 21:31:03 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/null\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 21:31:03 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0}, 0x48) 21:31:03 executing program 4: io_setup(0x51, &(0x7f0000000000)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, r1, 0x0}]) 21:31:03 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:31:03 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:03 executing program 2: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local}, 0x80, 0x0}, 0x8084) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000007800)={0x0, 0x0, 0x0}, 0x20008045) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="8b", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009, 0xbb8}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280), 0x0, 0x9}, 0x0) 21:31:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f000000080001007533"], 0x38}}, 0x0) 21:31:03 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:03 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:03 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 326.837985][T21911] __nla_validate_parse: 7 callbacks suppressed [ 326.838049][T21911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:31:03 executing program 0: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 326.894621][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 21:31:03 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:03 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:03 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:03 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:04 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 327.138577][T21943] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 21:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 327.217342][T21943] team0: Device ipvlan0 failed to register rx_handler 21:31:04 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) 21:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:04 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 327.433039][T21942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.461897][T21946] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.472603][T21957] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 327.495705][T21957] team0: Device ipvlan0 failed to register rx_handler 21:31:04 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:04 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:04 executing program 0: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) 21:31:04 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:04 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:04 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 327.739593][T21976] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 327.769512][T21976] team0: Device ipvlan0 failed to register rx_handler [ 327.772171][T21957] syz-executor.2 (21957) used greatest stack depth: 9352 bytes left 21:31:04 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) 21:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:04 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 328.100372][T21980] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 328.121568][T21980] team0: Device ipvlan0 failed to register rx_handler [ 328.334373][T21997] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 328.351720][T21997] team0: Device ipvlan0 failed to register rx_handler 21:31:05 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:05 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:05 executing program 0: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)=0x5) write$cgroup_int(r6, 0x0, 0x0) 21:31:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:05 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:05 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:05 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 328.518728][T22025] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 21:31:05 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) 21:31:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 328.559694][T22025] team0: Device ipvlan0 failed to register rx_handler 21:31:05 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:05 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 328.813223][T22027] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 328.826234][T22027] team0: Device ipvlan0 failed to register rx_handler [ 328.952009][T22046] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 328.977733][T22046] team0: Device ipvlan0 failed to register rx_handler 21:31:05 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:05 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:05 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:05 executing program 0: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)=0x5) write$cgroup_int(r6, 0x0, 0x0) 21:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:06 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 329.181600][T22068] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 329.211229][T22046] syz-executor.2 (22046) used greatest stack depth: 9296 bytes left [ 329.220299][T22068] team0: Device ipvlan0 failed to register rx_handler 21:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:06 executing program 1: r0 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:06 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 329.471779][T22072] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 329.516432][T22072] team0: Device ipvlan0 failed to register rx_handler 21:31:06 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:06 executing program 1: r0 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:06 executing program 0: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x81) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)=0x5) write$cgroup_int(r6, 0x0, 0x0) 21:31:06 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 329.711910][T22092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:06 executing program 1: r0 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 329.841924][T22125] team0: Device ipvlan0 failed to register rx_handler 21:31:06 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:06 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 330.086865][T22120] team0: Device ipvlan0 failed to register rx_handler 21:31:07 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:07 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 330.357544][T22128] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.385733][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:07 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000025000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b8c62bfd8466efbafc0cedf029a30300ecff37e0840f20c06635000000800f22c0660f3834c9baf80c66b8ca59798966efbafc0ced66b9d70900000f320f850400", 0x47}], 0xaaaaaaaaaaaad47, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 330.405389][T22159] team0: Device ipvlan0 failed to register rx_handler 21:31:07 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/206, 0xce}], 0x1, 0x0, 0x0) 21:31:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:07 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[]) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:07 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:07 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000), 0x0, 0x1f3, 0x0) [ 330.625480][ C0] net_ratelimit: 1756 callbacks suppressed [ 330.625494][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 330.649831][T22200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.698713][T22200] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:07 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/206, 0xce}], 0x1, 0x1f3, 0x0) [ 330.788516][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 330.816833][T22217] team0: Device ipvlan0 failed to register rx_handler 21:31:07 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:07 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:07 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 330.982606][T22220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/206, 0xce}], 0x1, 0x1f3, 0x0) 21:31:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/206, 0xce}], 0x1, 0x1f3, 0x0) 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.138194][T22248] team0: Device ipvlan0 failed to register rx_handler 21:31:08 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/206, 0xce}], 0x1, 0x1f3, 0x0) 21:31:08 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.404848][T22271] team0: Device ipvlan0 failed to register rx_handler 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/206, 0xce}], 0x1, 0x1f3, 0x0) 21:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/206, 0xce}], 0x1, 0x1f3, 0x0) 21:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r4, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) [ 331.695695][T22304] team0: Device ipvlan0 failed to register rx_handler 21:31:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:08 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 331.869682][T22313] __nla_validate_parse: 1 callbacks suppressed [ 331.869718][T22313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.940036][T22319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:08 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:08 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 332.079273][T22346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 332.122264][T22347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, 0x0, 0x6d70) 21:31:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:09 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 332.286577][T22374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.307192][T22375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.346088][T22385] validate_nla: 7 callbacks suppressed [ 332.346102][T22385] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 332.368061][T22385] team0: Device ipvlan0 failed to register rx_handler 21:31:09 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4, 0xff, 0x5, 0x3f, 0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x100, 0x0, 0x4, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:09 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, 0x0, 0x6d70) 21:31:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00270d16b7d96e7cb9689a8af0cf0e", @ANYRES32=r3, @ANYBLOB="0000f0ff000000000f00000008000100753332000c0002"], 0x38}}, 0x0) 21:31:09 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 332.507938][T22401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.540604][T22399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, 0x0, 0x6d70) 21:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:09 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 332.598691][T22410] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 332.624439][T22410] team0: Device ipvlan0 failed to register rx_handler 21:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:09 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:09 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) 21:31:09 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004006a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) 21:31:09 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 332.855048][T22454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:09 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 332.899395][T22455] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:09 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 332.953724][T22457] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 332.972805][T22457] team0: Device ipvlan0 failed to register rx_handler 21:31:09 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:10 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x23) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 333.144635][ T9706] Bluetooth: hci5: command 0x0406 tx timeout 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:10 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:10 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2eacc", 0x3}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:10 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4, 0x8, 0x1, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x3}, 0x2480, 0x7fff, 0x100, 0x5, 0x1800000000, 0xfffffffa, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:10 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 333.571166][T22562] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 333.600656][T22562] team0: Device ipvlan0 failed to register rx_handler 21:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:10 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:10 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 333.859749][T22593] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 21:31:10 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 333.913902][T22593] team0: Device ipvlan0 failed to register rx_handler 21:31:10 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:10 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:10 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:10 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:11 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:31:11 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 334.199160][T22628] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 334.214442][T22628] team0: Device ipvlan0 failed to register rx_handler 21:31:11 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:31:11 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:11 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:11 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:31:11 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:11 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:11 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068230000000000ef38bf461e59d7", 0x39}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="390000001000090468fe07002b0068fe0100ee002000000045000c070307001404001800120003001404000001000000000000000000000020", 0x39}], 0x1) 21:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:11 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff008}], 0x4, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:11 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:11 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 5: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:11 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 334.725387][T22691] bridge0: port 2(bridge_slave_1) entered disabled state 21:31:11 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, 0x0, 0x6d70) 21:31:11 executing program 5: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 334.820021][T22697] : renamed from bridge_slave_1 [ 334.832227][T22697] bridge0: port 2() entered blocking state [ 334.838617][T22697] bridge0: port 2() entered forwarding state 21:31:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:11 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:11 executing program 5: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:11 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, 0x0, 0x6d70) [ 334.899641][T22697] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 21:31:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:31:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:31:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 21:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:11 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, 0x0, 0x6d70) 21:31:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:31:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:31:12 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 21:31:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x200007) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) sendmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1c", 0x1}], 0x1, &(0x7f00000002c0)}}], 0x1, 0x0) 21:31:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:31:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:31:12 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:12 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0090400000151fdef"], 0x0) 21:31:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 21:31:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:31:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:31:12 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21:31:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:31:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 21:31:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:31:12 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) [ 335.639875][ T5] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 335.919837][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 336.051514][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.087512][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.139598][ T5] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 336.150298][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.170303][ T5] usb 2-1: config 0 descriptor?? [ 336.279425][ T5] ath10k_warn: 6 callbacks suppressed [ 336.279441][ T5] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 336.439976][ T7] usb 2-1: USB disconnect, device number 48 [ 336.453660][ T3121] usb 2-1: Failed to submit usb control message: -71 [ 336.463255][ T3121] usb 2-1: unable to send the bmi data to the device: -71 [ 336.478290][ T3121] usb 2-1: unable to get target info from device [ 336.490185][ T3121] usb 2-1: could not get target info (-71) [ 336.496185][ T3121] usb 2-1: could not probe fw (-71) 21:31:13 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0090400000151fdef"], 0x0) 21:31:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21:31:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:31:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 21:31:13 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 21:31:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21:31:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 21:31:13 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) [ 337.339780][ T7] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 337.609815][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 337.750364][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.761460][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.775295][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 337.785391][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.794998][ T7] usb 2-1: config 0 descriptor?? [ 337.851921][ T7] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 338.055129][ T9708] usb 2-1: USB disconnect, device number 49 [ 338.070218][T15819] usb 2-1: Failed to submit usb control message: -71 [ 338.077113][T15819] usb 2-1: unable to send the bmi data to the device: -71 [ 338.084690][T15819] usb 2-1: unable to get target info from device [ 338.091594][T15819] usb 2-1: could not get target info (-71) [ 338.097816][T15819] usb 2-1: could not probe fw (-71) 21:31:15 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0090400000151fdef"], 0x0) 21:31:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 21:31:15 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) 21:31:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) 21:31:15 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:31:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) 21:31:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 21:31:15 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:31:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) [ 338.629818][T22907] __nla_validate_parse: 12 callbacks suppressed [ 338.629833][T22907] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:15 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:15 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 338.731104][T22916] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.770323][T22920] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.939716][ T7] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 339.209778][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 339.330427][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.342378][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.356484][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 339.366542][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.377080][ T7] usb 2-1: config 0 descriptor?? [ 339.420769][ T7] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 339.624577][ T7] usb 2-1: USB disconnect, device number 50 [ 339.630664][T15819] usb 2-1: Failed to submit usb control message: -71 [ 339.637542][T15819] usb 2-1: could not get target info (-71) [ 339.643765][T15819] usb 2-1: could not probe fw (-71) 21:31:17 executing program 1: 21:31:17 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 21:31:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) 21:31:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) 21:31:17 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:17 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:17 executing program 1: 21:31:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) [ 340.191447][T22956] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.222822][T22958] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) 21:31:17 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 21:31:17 executing program 1: 21:31:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 21:31:17 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:17 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 340.343682][T22970] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.369068][T22972] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 21:31:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 21:31:17 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 21:31:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 21:31:17 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x40020a00}, 0x6d70) 21:31:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) [ 340.497657][T22986] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.533831][T22987] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 21:31:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 21:31:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 340.610127][T22997] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 21:31:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 21:31:17 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:31:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 21:31:17 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 21:31:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 21:31:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 21:31:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 21:31:17 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:31:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 21:31:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b0000", 0x17}], 0x1}, 0x0) 21:31:18 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x40020a00}, 0x0) 21:31:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 21:31:18 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b0000", 0x17}], 0x1}, 0x0) 21:31:18 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 21:31:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:18 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) 21:31:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 21:31:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b0000", 0x17}], 0x1}, 0x0) 21:31:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) 21:31:18 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0090400"], 0x0) 21:31:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) 21:31:18 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:31:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) 21:31:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) [ 342.019585][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd 21:31:19 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) 21:31:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) 21:31:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) 21:31:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) 21:31:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) 21:31:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 342.259569][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 342.389604][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.400649][ T7] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 342.410380][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.420572][ T7] usb 5-1: config 0 descriptor?? [ 342.463008][ T7] ath10k_warn: 2 callbacks suppressed [ 342.463024][ T7] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 342.509566][ T5] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 342.667541][ T7] usb 5-1: USB disconnect, device number 10 [ 342.673729][ T3121] usb 5-1: Failed to submit usb control message: -71 [ 342.681087][ T3121] usb 5-1: unable to send the bmi data to the device: -71 [ 342.688495][ T3121] usb 5-1: unable to get target info from device [ 342.695183][ T3121] usb 5-1: could not get target info (-71) [ 342.699830][ T5] usb 2-1: device descriptor read/64, error 18 [ 342.703470][ T3121] usb 5-1: could not probe fw (-71) [ 342.969590][ T5] usb 2-1: new high-speed USB device number 52 using dummy_hcd 21:31:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) 21:31:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a001000000002", 0x29}], 0x1}, 0x0) 21:31:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) 21:31:20 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0090400"], 0x0) 21:31:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 343.159564][ T5] usb 2-1: device descriptor read/64, error 18 [ 343.279618][ T5] usb usb2-port1: attempt power cycle [ 343.499559][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 343.739829][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 343.859860][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.870796][ T7] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 343.880783][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.889418][ T7] usb 5-1: config 0 descriptor?? [ 343.940196][ T7] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 343.989548][ T5] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 344.144368][ T9706] usb 5-1: USB disconnect, device number 11 [ 344.150560][T15819] usb 5-1: Failed to submit usb control message: -71 [ 344.158003][T15819] usb 5-1: unable to send the bmi data to the device: -71 [ 344.159759][ T5] usb 2-1: device descriptor read/8, error -61 [ 344.165762][T15819] usb 5-1: unable to get target info from device [ 344.179427][T15819] usb 5-1: could not get target info (-71) [ 344.185535][T15819] usb 5-1: could not probe fw (-71) [ 344.449507][ T5] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 344.619737][ T5] usb 2-1: device descriptor read/8, error -61 [ 344.739613][ T5] usb usb2-port1: unable to enumerate USB device 21:31:22 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) 21:31:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a001000000002", 0x29}], 0x1}, 0x0) 21:31:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) 21:31:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) 21:31:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:22 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0090400"], 0x0) 21:31:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a001000000002", 0x29}], 0x1}, 0x0) [ 345.285908][T23199] __nla_validate_parse: 10 callbacks suppressed [ 345.285921][T23199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.307610][T23202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) 21:31:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) 21:31:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a001000000002800000", 0x2c}], 0x1}, 0x0) [ 345.421809][T23215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) [ 345.462285][T23223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.549466][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 345.566671][T23232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.712891][ T5] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 345.819449][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 345.919969][ T5] usb 2-1: device descriptor read/64, error 18 [ 345.979468][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.989775][ T7] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 345.999709][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.008632][ T7] usb 5-1: config 0 descriptor?? [ 346.062007][ T7] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 346.199446][ T5] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 346.263653][ T7] usb 5-1: USB disconnect, device number 12 [ 346.269628][T10511] usb 5-1: Failed to submit usb control message: -71 [ 346.276301][T10511] usb 5-1: could not get target info (-71) [ 346.282815][T10511] usb 5-1: could not probe fw (-71) [ 346.399735][ T5] usb 2-1: device descriptor read/64, error 18 [ 346.519735][ T5] usb usb2-port1: attempt power cycle [ 347.229387][ T5] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 347.399569][ T5] usb 2-1: device descriptor read/8, error -61 [ 347.671290][ T5] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 347.849572][ T5] usb 2-1: device descriptor read/8, error -61 [ 347.979482][ T5] usb usb2-port1: unable to enumerate USB device 21:31:25 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) 21:31:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a001000000002800000", 0x2c}], 0x1}, 0x0) 21:31:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) 21:31:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) 21:31:25 executing program 4: 21:31:25 executing program 4: 21:31:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a001000000002800000", 0x2c}], 0x1}, 0x0) 21:31:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) [ 348.340711][T23271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.375041][T23272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) 21:31:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) [ 348.438272][T23286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.515934][T23292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.729326][ T9708] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 348.929334][ T9708] usb 2-1: device descriptor read/64, error 18 [ 349.199389][ T9708] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 349.389303][ T9708] usb 2-1: device descriptor read/64, error 18 [ 349.509346][ T9708] usb usb2-port1: attempt power cycle [ 350.219268][ T9708] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 350.389545][ T9708] usb 2-1: device descriptor read/8, error -61 [ 350.669258][ T9708] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 350.849413][ T9708] usb 2-1: device descriptor read/8, error -61 [ 350.969276][ T9708] usb usb2-port1: unable to enumerate USB device 21:31:28 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 21:31:28 executing program 4: 21:31:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) 21:31:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) 21:31:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) [ 351.351263][T23317] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:28 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 21:31:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 351.392063][T23318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) [ 351.497434][T23335] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.517124][T23337] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.536658][T23338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 351.769166][ T9575] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 351.999220][ T9575] usb 2-1: device descriptor read/64, error 18 [ 352.269190][ T9575] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 352.479335][ T9575] usb 2-1: device descriptor read/64, error 18 [ 352.599213][ T9575] usb usb2-port1: attempt power cycle [ 353.309269][ T9575] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 353.479432][ T9575] usb 2-1: device descriptor read/8, error -61 [ 353.749211][ T9575] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 353.919349][ T9575] usb 2-1: device descriptor read/8, error -61 [ 354.049398][ T9575] usb usb2-port1: unable to enumerate USB device 21:31:31 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 21:31:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:31 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d34000000010902"], 0x0) 21:31:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:31 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 21:31:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 354.397081][T23366] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.411782][T23368] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 354.529993][T23385] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 354.689077][ T8990] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 354.829102][ T9575] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 354.940321][ T8990] usb 6-1: Using ep0 maxpacket: 8 [ 355.019103][ T9575] usb 2-1: device descriptor read/64, error 18 [ 355.069411][ T8990] usb 6-1: config 0 has no interfaces? [ 355.076377][ T8990] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 355.087301][ T8990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.098358][ T8990] usb 6-1: config 0 descriptor?? [ 355.289080][ T9575] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 355.343004][ T7] usb 6-1: USB disconnect, device number 40 [ 355.479008][ T9575] usb 2-1: device descriptor read/64, error 18 [ 355.599095][ T9575] usb usb2-port1: attempt power cycle [ 356.309028][ T9575] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 356.479032][ T9575] usb 2-1: device descriptor read/8, error -61 [ 356.749241][ T9575] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 356.919389][ T9575] usb 2-1: device descriptor read/8, error -61 [ 357.039033][ T9575] usb usb2-port1: unable to enumerate USB device 21:31:34 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 21:31:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:34 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 21:31:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:34 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x200007) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) 21:31:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 357.858907][ T9706] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 358.069007][ T9706] usb 2-1: device descriptor read/64, error 18 [ 358.349009][ T9706] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 358.538972][ T9706] usb 2-1: device descriptor read/64, error 18 [ 358.660116][ T9706] usb usb2-port1: attempt power cycle [ 359.368902][ T9706] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 359.538870][ T9706] usb 2-1: device descriptor read/8, error -61 [ 359.808868][ T9706] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 359.978919][ T9706] usb 2-1: device descriptor read/8, error -61 [ 360.098997][ T9706] usb usb2-port1: unable to enumerate USB device 21:31:37 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d3400000001"], 0x0) 21:31:37 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x200007) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) sendmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1c", 0x1}], 0x1, &(0x7f00000002c0)=[{0x10, 0x10d, 0x10001}], 0x10}}], 0x1, 0x0) 21:31:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:37 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) 21:31:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:37 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 360.575142][T23490] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.585868][T23491] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.611713][T23493] FAULT_INJECTION: forcing a failure. [ 360.611713][T23493] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 360.627283][T23493] CPU: 1 PID: 23493 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 360.636772][T23493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.647560][T23493] Call Trace: [ 360.650954][T23493] dump_stack+0x137/0x19d [ 360.655493][T23493] should_fail+0x23c/0x250 [ 360.660108][T23493] should_fail_usercopy+0x16/0x20 [ 360.665206][T23493] _copy_from_user+0x1c/0xd0 [ 360.669807][T23493] __copy_msghdr_from_user+0x44/0x350 [ 360.675276][T23493] ? __fget_light+0x219/0x260 [ 360.680068][T23493] __sys_sendmsg+0x135/0x270 [ 360.684675][T23493] ? kstrtouint_from_user+0x104/0x130 [ 360.690132][T23493] ? __rcu_read_unlock+0x5c/0x250 [ 360.695150][T23493] ? fsnotify_perm+0x59/0x2e0 [ 360.699818][T23493] ? __fsnotify_parent+0x32f/0x430 [ 360.705201][T23493] ? get_pid_task+0x90/0xc0 [ 360.709717][T23493] ? vfs_write+0x572/0x7e0 [ 360.714234][T23493] ? __fget_light+0x219/0x260 [ 360.718904][T23493] ? fput+0x2d/0x130 [ 360.722861][T23493] ? ksys_write+0x157/0x180 [ 360.727617][T23493] __x64_sys_sendmsg+0x42/0x50 [ 360.732368][T23493] do_syscall_64+0x39/0x80 [ 360.736772][T23493] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 360.743005][T23493] RIP: 0033:0x465f69 [ 360.746909][T23493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 360.767025][T23493] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.775543][T23493] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 360.783567][T23493] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 360.791874][T23493] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 360.800086][T23493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.808306][T23493] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 360.845041][T23499] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.888788][ T9706] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 361.018773][ T5] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 361.118877][ T9706] usb 5-1: device descriptor read/64, error 18 [ 361.258794][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 361.388794][ T9706] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 361.419130][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 361.426930][ T5] usb 2-1: can't read configurations, error -61 [ 361.579144][ T5] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 361.590039][ T9706] usb 5-1: device descriptor read/64, error 18 [ 361.710284][ T9706] usb usb5-port1: attempt power cycle [ 361.831227][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 361.989196][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 361.997885][ T5] usb 2-1: can't read configurations, error -61 [ 362.004230][ T5] usb usb2-port1: attempt power cycle [ 362.428790][ T9706] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 362.600094][ T9706] usb 5-1: device descriptor read/8, error -61 [ 362.738768][ T5] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 362.838989][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 362.868771][ T9706] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 363.038789][ T9706] usb 5-1: device descriptor read/8, error -61 [ 363.039950][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 363.056035][ T5] usb 2-1: can't read configurations, error -61 [ 363.158786][ T9706] usb usb5-port1: unable to enumerate USB device [ 363.218793][ T5] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 363.329067][ T5] usb 2-1: Using ep0 maxpacket: 8 21:31:40 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d3400000001"], 0x0) 21:31:40 executing program 5 (fault-call:1 fault-nth:1): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:40 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) [ 363.508713][ T5] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 363.516496][ T5] usb 2-1: can't read configurations, error -71 [ 363.548779][ T5] usb usb2-port1: unable to enumerate USB device [ 363.609873][T23522] FAULT_INJECTION: forcing a failure. [ 363.609873][T23522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.624780][T23523] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.662585][T23525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.673234][T23522] CPU: 0 PID: 23522 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 363.682263][T23522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.692496][T23522] Call Trace: [ 363.695782][T23522] dump_stack+0x137/0x19d [ 363.700337][T23522] should_fail+0x23c/0x250 [ 363.705205][T23522] should_fail_usercopy+0x16/0x20 [ 363.710436][T23522] _copy_from_user+0x1c/0xd0 [ 363.715127][T23522] iovec_from_user+0xc4/0x2d0 [ 363.719905][T23522] ? __alloc_pages_nodemask+0x1a8/0x350 [ 363.725640][T23522] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 363.731428][T23522] ? should_fail+0xd6/0x250 [ 363.735934][T23522] __import_iovec+0x49/0x270 [ 363.740892][T23522] import_iovec+0xb8/0xd0 [ 363.745415][T23522] __sys_sendmsg+0x1ab/0x270 [ 363.750115][T23522] ? __rcu_read_unlock+0x5c/0x250 [ 363.755224][T23522] ? fsnotify_perm+0x59/0x2e0 [ 363.759927][T23522] ? __fsnotify_parent+0x32f/0x430 [ 363.765077][T23522] ? get_pid_task+0x90/0xc0 [ 363.769594][T23522] ? vfs_write+0x572/0x7e0 [ 363.774126][T23522] ? __fget_light+0x219/0x260 [ 363.778946][T23522] ? fput+0x2d/0x130 [ 363.782974][T23522] ? ksys_write+0x157/0x180 [ 363.787672][T23522] __x64_sys_sendmsg+0x42/0x50 [ 363.792509][T23522] do_syscall_64+0x39/0x80 [ 363.797049][T23522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 363.803114][T23522] RIP: 0033:0x465f69 [ 363.807018][T23522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 363.827344][T23522] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.836041][T23522] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 363.844640][T23522] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 363.853034][T23522] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 21:31:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:40 executing program 5 (fault-call:1 fault-nth:2): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 363.861177][T23522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.869188][T23522] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 21:31:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 363.957241][T23540] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.982748][T23541] FAULT_INJECTION: forcing a failure. [ 363.982748][T23541] name failslab, interval 1, probability 0, space 0, times 1 [ 364.001788][T23539] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 364.028689][ T9575] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 364.045299][T23541] CPU: 0 PID: 23541 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 364.054445][T23541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.065987][T23541] Call Trace: [ 364.069278][T23541] dump_stack+0x137/0x19d [ 364.073722][T23541] should_fail+0x23c/0x250 [ 364.078283][T23541] __should_failslab+0x81/0x90 [ 364.083328][T23541] should_failslab+0x5/0x20 [ 364.087541][T23546] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.088546][T23541] kmem_cache_alloc_node+0x56/0x310 [ 364.103657][T23541] ? __alloc_skb+0xed/0x420 [ 364.108654][T23541] __alloc_skb+0xed/0x420 [ 364.113492][T23541] netlink_sendmsg+0x4c7/0x7c0 [ 364.118374][T23541] ? netlink_getsockopt+0x720/0x720 [ 364.123838][T23541] ____sys_sendmsg+0x360/0x4d0 [ 364.128797][T23541] ? import_iovec+0xb8/0xd0 [ 364.133659][T23541] __sys_sendmsg+0x1ed/0x270 [ 364.138538][T23541] ? __fsnotify_parent+0x32f/0x430 [ 364.143904][T23541] ? get_pid_task+0x90/0xc0 [ 364.148614][T23541] ? vfs_write+0x572/0x7e0 [ 364.153230][T23541] ? __fget_light+0x219/0x260 [ 364.157923][T23541] ? fput+0x2d/0x130 [ 364.161841][T23541] ? ksys_write+0x157/0x180 [ 364.166482][T23541] __x64_sys_sendmsg+0x42/0x50 [ 364.171643][T23541] do_syscall_64+0x39/0x80 [ 364.176089][T23541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 364.182275][T23541] RIP: 0033:0x465f69 [ 364.186183][T23541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 364.206101][T23541] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.214813][T23541] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 21:31:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 364.223200][T23541] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 364.231380][T23541] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 364.240127][T23541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.248291][T23541] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 364.333949][T23551] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.408656][ T5] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 364.448655][ T9575] usb 5-1: device descriptor read/64, error 18 [ 364.658618][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 364.718637][ T9575] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 364.818683][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 364.826689][ T5] usb 2-1: can't read configurations, error -61 [ 364.908688][ T9575] usb 5-1: device descriptor read/64, error 18 [ 364.979949][ T5] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 365.028713][ T9575] usb usb5-port1: attempt power cycle [ 365.228637][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 365.388943][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 365.396940][ T5] usb 2-1: can't read configurations, error -61 [ 365.404897][ T5] usb usb2-port1: attempt power cycle [ 365.738623][ T9575] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 365.908703][ T9575] usb 5-1: device descriptor read/8, error -61 [ 366.118707][ T5] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 366.178613][ T9575] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 366.209148][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 366.349388][ T9575] usb 5-1: device descriptor read/8, error -61 [ 366.368838][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 366.376765][ T5] usb 2-1: can't read configurations, error -61 [ 366.468682][ T9575] usb usb5-port1: unable to enumerate USB device 21:31:43 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d3400000001"], 0x0) 21:31:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:43 executing program 5 (fault-call:1 fault-nth:3): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 366.528624][ T5] usb 2-1: new high-speed USB device number 82 using dummy_hcd 21:31:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) [ 366.606338][T23561] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.625144][T23565] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.645128][T23568] FAULT_INJECTION: forcing a failure. [ 366.645128][T23568] name failslab, interval 1, probability 0, space 0, times 0 [ 366.658580][ T5] usb 2-1: device descriptor read/8, error -71 [ 366.684774][T23568] CPU: 0 PID: 23568 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 366.693681][T23568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:31:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 366.704186][T23568] Call Trace: [ 366.707792][T23568] dump_stack+0x137/0x19d [ 366.712245][T23568] should_fail+0x23c/0x250 [ 366.716765][T23568] __should_failslab+0x81/0x90 [ 366.721697][T23568] should_failslab+0x5/0x20 [ 366.726427][T23568] kmem_cache_alloc_node_trace+0x5b/0x310 [ 366.733017][T23568] ? __kmalloc_node_track_caller+0x30/0x40 [ 366.738837][T23568] __kmalloc_node_track_caller+0x30/0x40 [ 366.744912][T23568] ? netlink_sendmsg+0x4c7/0x7c0 [ 366.749949][T23568] __alloc_skb+0x187/0x420 [ 366.754387][T23568] netlink_sendmsg+0x4c7/0x7c0 [ 366.759377][T23568] ? netlink_getsockopt+0x720/0x720 [ 366.764897][T23568] ____sys_sendmsg+0x360/0x4d0 [ 366.769755][T23568] ? import_iovec+0xb8/0xd0 [ 366.774480][T23568] __sys_sendmsg+0x1ed/0x270 [ 366.779376][T23568] ? __fsnotify_parent+0x32f/0x430 [ 366.784586][T23568] ? get_pid_task+0x90/0xc0 [ 366.789215][T23568] ? vfs_write+0x572/0x7e0 [ 366.793654][T23568] ? __fget_light+0x219/0x260 [ 366.798354][T23568] ? fput+0x2d/0x130 [ 366.802356][T23568] ? __fpregs_load_activate+0x103/0x1f0 [ 366.807922][T23568] __x64_sys_sendmsg+0x42/0x50 [ 366.812804][T23568] do_syscall_64+0x39/0x80 [ 366.817452][T23568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 366.823625][T23568] RIP: 0033:0x465f69 [ 366.827692][T23568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 366.847487][T23568] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 21:31:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 366.856087][T23568] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 366.864061][T23568] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 366.872161][T23568] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 366.880221][T23568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.888715][T23568] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 21:31:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:43 executing program 5 (fault-call:1 fault-nth:4): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 366.913162][ T5] usb usb2-port1: unable to enumerate USB device [ 366.931063][T23582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.946114][T23584] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:31:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 366.997117][T23591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.010065][T23592] FAULT_INJECTION: forcing a failure. [ 367.010065][T23592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.047683][T23595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.049328][T23592] CPU: 1 PID: 23592 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 367.066121][T23592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.076451][T23592] Call Trace: [ 367.079761][T23592] dump_stack+0x137/0x19d [ 367.084220][T23592] should_fail+0x23c/0x250 [ 367.089120][T23592] should_fail_usercopy+0x16/0x20 [ 367.094288][T23592] _copy_from_iter_full+0x11f/0x5f0 [ 367.099874][T23592] ? __virt_addr_valid+0x15a/0x1a0 [ 367.105002][T23592] ? __check_object_size+0x253/0x310 [ 367.111210][T23592] netlink_sendmsg+0x579/0x7c0 [ 367.116306][T23592] ? netlink_getsockopt+0x720/0x720 [ 367.122361][T23592] ____sys_sendmsg+0x360/0x4d0 [ 367.127534][T23592] ? import_iovec+0xb8/0xd0 [ 367.132239][T23592] __sys_sendmsg+0x1ed/0x270 [ 367.137120][T23592] ? __fsnotify_parent+0x32f/0x430 [ 367.142496][T23592] ? get_pid_task+0x90/0xc0 [ 367.147492][T23592] ? vfs_write+0x572/0x7e0 [ 367.151927][T23592] ? __fget_light+0x219/0x260 [ 367.156841][T23592] ? fput+0x2d/0x130 [ 367.160771][T23592] ? ksys_write+0x157/0x180 [ 367.165595][T23592] __x64_sys_sendmsg+0x42/0x50 [ 367.170542][T23592] do_syscall_64+0x39/0x80 [ 367.175425][T23592] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 367.182742][T23592] RIP: 0033:0x465f69 [ 367.186845][T23592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 367.207593][T23592] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.216212][T23592] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 367.224765][T23592] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 367.233221][T23592] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 367.242197][T23592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.250691][T23592] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 367.276777][ T9575] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 367.285034][ T5] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 367.488631][ T9575] usb 5-1: device descriptor read/64, error 18 [ 367.538543][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 367.718686][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 367.727245][ T5] usb 2-1: can't read configurations, error -61 [ 367.758564][ T9575] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 367.878547][ T5] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 367.948546][ T9575] usb 5-1: device descriptor read/64, error 18 [ 368.068681][ T9575] usb usb5-port1: attempt power cycle [ 368.118566][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 368.278544][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 368.286905][ T5] usb 2-1: can't read configurations, error -61 [ 368.294438][ T5] usb usb2-port1: attempt power cycle [ 368.778851][ T9575] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 368.948743][ T9575] usb 5-1: device descriptor read/8, error -61 [ 369.008558][ T5] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 369.098767][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 369.218523][ T9575] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 369.258500][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 369.267760][ T5] usb 2-1: can't read configurations, error -61 [ 369.388528][ T9575] usb 5-1: device descriptor read/8, error -61 [ 369.419994][ T5] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 369.508545][ T9575] usb usb5-port1: unable to enumerate USB device [ 369.518619][ T5] usb 2-1: Using ep0 maxpacket: 8 21:31:46 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:31:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:46 executing program 5 (fault-call:1 fault-nth:5): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:46 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) [ 369.630760][T23611] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 369.647293][T23613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.670113][ T5] usb 2-1: unable to read config index 0 descriptor/start: -71 21:31:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 369.679631][T23614] FAULT_INJECTION: forcing a failure. [ 369.679631][T23614] name failslab, interval 1, probability 0, space 0, times 0 [ 369.695354][ T5] usb 2-1: can't read configurations, error -71 21:31:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 369.731205][ T5] usb usb2-port1: unable to enumerate USB device [ 369.755239][T23614] CPU: 0 PID: 23614 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 369.764255][T23614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.775424][T23614] Call Trace: [ 369.778826][T23614] dump_stack+0x137/0x19d [ 369.783177][T23614] should_fail+0x23c/0x250 [ 369.787599][T23614] ? skb_clone+0x12c/0x1f0 [ 369.792411][T23614] __should_failslab+0x81/0x90 [ 369.797441][T23614] should_failslab+0x5/0x20 [ 369.802400][T23614] kmem_cache_alloc+0x46/0x320 [ 369.807237][T23614] ? rhashtable_jhash2+0x13a/0x1a0 [ 369.812589][T23614] skb_clone+0x12c/0x1f0 [ 369.817017][T23614] netlink_deliver_tap+0x2a0/0x470 [ 369.822144][T23614] ? __rcu_read_unlock+0x5c/0x250 [ 369.827263][T23614] netlink_unicast+0x5de/0x6c0 [ 369.832090][T23614] netlink_sendmsg+0x6f8/0x7c0 [ 369.836885][T23614] ? netlink_getsockopt+0x720/0x720 [ 369.842178][T23614] ____sys_sendmsg+0x360/0x4d0 [ 369.847213][T23614] ? import_iovec+0xb8/0xd0 [ 369.851726][T23614] __sys_sendmsg+0x1ed/0x270 [ 369.856481][T23614] ? __fsnotify_parent+0x32f/0x430 [ 369.861693][T23614] ? get_pid_task+0x90/0xc0 [ 369.866395][T23614] ? vfs_write+0x572/0x7e0 [ 369.871115][T23614] ? __fget_light+0x219/0x260 [ 369.876239][T23614] ? fput+0x2d/0x130 [ 369.880146][T23614] ? ksys_write+0x157/0x180 [ 369.884728][T23614] __x64_sys_sendmsg+0x42/0x50 [ 369.889576][T23614] do_syscall_64+0x39/0x80 [ 369.895136][T23614] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 369.901090][T23614] RIP: 0033:0x465f69 [ 369.905172][T23614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 369.925311][T23614] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.934451][T23614] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 369.942524][T23614] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 369.950713][T23614] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 369.958877][T23614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.966936][T23614] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 369.988628][T23614] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 369.998056][T23614] team0: Device ipvlan0 failed to register rx_handler 21:31:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:47 executing program 5 (fault-call:1 fault-nth:6): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 370.092256][T23637] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.118498][ T8990] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 370.126386][T23640] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.169242][T23651] FAULT_INJECTION: forcing a failure. [ 370.169242][T23651] name failslab, interval 1, probability 0, space 0, times 0 [ 370.182401][T23651] CPU: 1 PID: 23651 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 370.191369][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.202433][T23651] Call Trace: [ 370.205714][T23651] dump_stack+0x137/0x19d [ 370.210079][T23651] should_fail+0x23c/0x250 [ 370.214563][T23651] __should_failslab+0x81/0x90 [ 370.219341][T23651] ? rtnl_newlink+0x59/0x1310 [ 370.224067][T23651] should_failslab+0x5/0x20 [ 370.228613][T23651] kmem_cache_alloc_trace+0x49/0x340 [ 370.233929][T23651] rtnl_newlink+0x59/0x1310 [ 370.238470][T23651] ? __perf_event_task_sched_in+0x4c1/0x500 [ 370.244378][T23651] ? kvm_sched_clock_read+0x15/0x40 [ 370.249587][T23651] ? sched_clock+0xf/0x20 [ 370.254004][T23651] ? sched_clock_cpu+0x11/0x1a0 [ 370.258942][T23651] ? psi_group_change+0x1c2/0x250 [ 370.264503][T23651] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 370.270197][T23651] ? _raw_spin_unlock_irq+0x22/0x40 [ 370.275556][T23651] ? finish_task_switch+0xc0/0x2a0 [ 370.280910][T23651] ? __schedule+0x3c1/0x580 [ 370.285601][T23651] ? sched_clock+0xf/0x20 [ 370.290257][T23651] ? preempt_schedule_irq+0x43/0x80 [ 370.296208][T23651] ? irqentry_exit_cond_resched+0x30/0x40 [ 370.302035][T23651] ? irqentry_exit+0x2a/0x40 [ 370.306669][T23651] ? sysvec_apic_timer_interrupt+0x43/0x80 [ 370.312785][T23651] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 370.319132][T23651] ? aa_get_newest_label+0x74/0x250 [ 370.324795][T23651] ? apparmor_capable+0xfe/0x160 [ 370.330505][T23651] ? bpf_lsm_capable+0x5/0x10 [ 370.335303][T23651] ? security_capable+0x91/0xa0 [ 370.340688][T23651] ? ns_capable+0x86/0xb0 [ 370.345616][T23651] ? rtnl_setlink+0x280/0x280 [ 370.350440][T23651] rtnetlink_rcv_msg+0x728/0x7c0 [ 370.355890][T23651] ? ___cache_free+0x3c/0x2f0 [ 370.360602][T23651] ? skb_network_protocol+0x144/0x340 [ 370.366149][T23651] ? __kfree_skb+0xfe/0x150 [ 370.370856][T23651] ? kmem_cache_free+0x59/0x100 [ 370.376444][T23651] ? __kfree_skb+0xfe/0x150 [ 370.381225][T23651] ? consume_skb+0x4b/0x160 [ 370.386134][T23651] ? nlmon_xmit+0x47/0x50 [ 370.390723][T23651] ? xmit_one+0x173/0x2e0 [ 370.395063][T23651] ? local_bh_enable+0x1b/0x20 [ 370.399840][T23651] ? __dev_queue_xmit+0xc25/0x1580 [ 370.405061][T23651] ? __skb_clone+0x2b9/0x2d0 [ 370.409951][T23651] ? __rcu_read_unlock+0x5c/0x250 [ 370.415268][T23651] netlink_rcv_skb+0x13e/0x240 [ 370.420064][T23651] ? rtnetlink_bind+0x60/0x60 [ 370.424889][T23651] rtnetlink_rcv+0x18/0x20 [ 370.429473][T23651] netlink_unicast+0x5fc/0x6c0 [ 370.434474][T23651] netlink_sendmsg+0x6f8/0x7c0 [ 370.439310][T23651] ? netlink_getsockopt+0x720/0x720 [ 370.444601][T23651] ____sys_sendmsg+0x360/0x4d0 [ 370.449428][T23651] ? import_iovec+0xb8/0xd0 [ 370.453957][T23651] __sys_sendmsg+0x1ed/0x270 [ 370.458567][T23651] ? __fsnotify_parent+0x32f/0x430 [ 370.463726][T23651] ? get_pid_task+0x90/0xc0 [ 370.468400][T23651] ? vfs_write+0x572/0x7e0 [ 370.472885][T23651] ? __fget_light+0x219/0x260 [ 370.478032][T23651] ? fput+0x2d/0x130 [ 370.482050][T23651] ? ksys_write+0x157/0x180 [ 370.486777][T23651] __x64_sys_sendmsg+0x42/0x50 [ 370.491998][T23651] do_syscall_64+0x39/0x80 [ 370.496411][T23651] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 370.505524][T23651] RIP: 0033:0x465f69 [ 370.509501][T23651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 370.531857][T23651] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.540560][T23651] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 370.549609][T23651] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 370.557755][T23651] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 370.565936][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.574018][T23651] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 370.648404][ T8990] usb 5-1: device descriptor read/64, error 18 [ 370.748395][ T5] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 370.918416][ T8990] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 371.018416][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 371.108637][ T8990] usb 5-1: device descriptor read/64, error 18 [ 371.178420][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.189552][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.199202][ T5] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 371.209268][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.222425][ T5] usb 2-1: config 0 descriptor?? [ 371.228653][ T8990] usb usb5-port1: attempt power cycle [ 371.469908][ T9706] usb 2-1: USB disconnect, device number 87 [ 371.948434][ T8990] usb 5-1: new high-speed USB device number 27 using dummy_hcd 21:31:48 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:31:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:48 executing program 5 (fault-call:1 fault-nth:7): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 371.993053][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.999497][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.031858][T23679] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.048402][T23678] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.063916][T23680] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 372.082913][T23680] FAULT_INJECTION: forcing a failure. [ 372.082913][T23680] name failslab, interval 1, probability 0, space 0, times 0 [ 372.134699][T23680] CPU: 1 PID: 23680 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 372.143798][T23680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.154723][T23680] Call Trace: [ 372.158377][T23680] dump_stack+0x137/0x19d [ 372.162803][T23680] should_fail+0x23c/0x250 [ 372.167232][T23680] __should_failslab+0x81/0x90 [ 372.172002][T23680] ? team_add_slave+0x410/0x1550 [ 372.177116][T23680] should_failslab+0x5/0x20 [ 372.181943][T23680] __kmalloc+0x66/0x380 [ 372.186120][T23680] team_add_slave+0x410/0x1550 [ 372.190980][T23680] ? dev_set_rx_mode+0x140/0x1b0 [ 372.195944][T23680] ? __dev_change_flags+0x343/0x3f0 [ 372.201628][T23680] ? __dev_notify_flags+0x25b/0x3a0 [ 372.206963][T23680] ? dev_change_flags+0xa2/0xc0 [ 372.212193][T23680] do_setlink+0x87d/0x2280 [ 372.216677][T23680] ? __nla_validate_parse+0x2ec/0x17f0 [ 372.222233][T23680] ? __nla_validate_parse+0x10ed/0x17f0 [ 372.227919][T23680] ? __nla_parse+0x3c/0x50 [ 372.232350][T23680] ? validate_linkmsg+0x261/0x2d0 [ 372.237667][T23680] rtnl_newlink+0xe7e/0x1310 [ 372.242836][T23680] ? psi_group_change+0x1c2/0x250 [ 372.248199][T23680] ? _raw_spin_unlock_irq+0x22/0x40 [ 372.253614][T23680] ? finish_task_switch+0xc0/0x2a0 [ 372.259000][T23680] ? __schedule+0x3c1/0x580 [ 372.263692][T23680] ? _raw_spin_unlock+0x22/0x40 [ 372.268584][T23680] ? __mutex_lock+0x5ae/0x670 [ 372.273856][T23680] ? rtnl_setlink+0x280/0x280 [ 372.278713][T23680] rtnetlink_rcv_msg+0x728/0x7c0 [ 372.284292][T23680] ? ___cache_free+0x3c/0x2f0 [ 372.289050][T23680] ? skb_network_protocol+0x144/0x340 [ 372.294422][T23680] ? __kfree_skb+0xfe/0x150 [ 372.298940][T23680] ? kmem_cache_free+0x59/0x100 [ 372.303941][T23680] ? __kfree_skb+0xfe/0x150 [ 372.308580][T23680] ? consume_skb+0x4b/0x160 [ 372.313095][T23680] ? nlmon_xmit+0x47/0x50 [ 372.317784][T23680] ? xmit_one+0x173/0x2e0 [ 372.322600][T23680] ? local_bh_enable+0x1b/0x20 [ 372.327736][T23680] ? __dev_queue_xmit+0xc25/0x1580 [ 372.333232][T23680] ? __skb_clone+0x2b9/0x2d0 [ 372.338026][T23680] ? __rcu_read_unlock+0x5c/0x250 [ 372.343492][T23680] netlink_rcv_skb+0x13e/0x240 [ 372.348684][T23680] ? rtnetlink_bind+0x60/0x60 [ 372.353685][T23680] rtnetlink_rcv+0x18/0x20 [ 372.358368][T23680] netlink_unicast+0x5fc/0x6c0 [ 372.363136][T23680] netlink_sendmsg+0x6f8/0x7c0 [ 372.368081][T23680] ? netlink_getsockopt+0x720/0x720 [ 372.373414][T23680] ____sys_sendmsg+0x360/0x4d0 [ 372.378570][T23680] ? import_iovec+0xb8/0xd0 [ 372.383266][T23680] __sys_sendmsg+0x1ed/0x270 [ 372.388443][T23680] ? __fsnotify_parent+0x32f/0x430 [ 372.397472][T23680] ? get_pid_task+0x90/0xc0 [ 372.403565][T23680] ? vfs_write+0x572/0x7e0 [ 372.409280][T23680] ? __fget_light+0x219/0x260 [ 372.415055][T23680] ? fput+0x2d/0x130 [ 372.419614][T23680] ? ksys_write+0x157/0x180 [ 372.424652][T23680] __x64_sys_sendmsg+0x42/0x50 [ 372.429883][T23680] do_syscall_64+0x39/0x80 [ 372.434422][T23680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 372.440667][T23680] RIP: 0033:0x465f69 [ 372.444739][T23680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 372.464874][T23680] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.474788][T23680] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 372.483204][T23680] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 372.491995][T23680] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 372.500326][T23680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.508501][T23680] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 372.520546][ T8990] usb 5-1: device descriptor read/8, error -61 21:31:49 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 21:31:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:49 executing program 5 (fault-call:1 fault-nth:8): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 372.668346][ T19] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 372.713559][T23700] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 372.723880][T23700] FAULT_INJECTION: forcing a failure. [ 372.723880][T23700] name failslab, interval 1, probability 0, space 0, times 0 [ 372.743983][T23700] CPU: 0 PID: 23700 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 372.753127][T23700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.763334][T23700] Call Trace: [ 372.766607][T23700] dump_stack+0x137/0x19d [ 372.771031][T23700] should_fail+0x23c/0x250 [ 372.775440][T23700] __should_failslab+0x81/0x90 [ 372.780500][T23700] should_failslab+0x5/0x20 [ 372.785048][T23700] kmem_cache_alloc_node+0x56/0x310 [ 372.790345][T23700] ? __alloc_skb+0xed/0x420 [ 372.795097][T23700] __alloc_skb+0xed/0x420 [ 372.800060][T23700] rtmsg_ifinfo_build_skb+0x61/0x130 [ 372.805555][T23700] rtmsg_ifinfo+0x58/0xc0 [ 372.810076][T23700] dev_open+0x7c/0x190 [ 372.814461][T23700] team_add_slave+0x5ba/0x1550 [ 372.819434][T23700] ? __dev_change_flags+0x343/0x3f0 [ 372.824801][T23700] ? __dev_notify_flags+0x25b/0x3a0 [ 372.830273][T23700] ? dev_change_flags+0xa2/0xc0 [ 372.835129][T23700] do_setlink+0x87d/0x2280 [ 372.839557][T23700] ? __nla_validate_parse+0x2ec/0x17f0 [ 372.845351][T23700] ? __nla_validate_parse+0x10ed/0x17f0 [ 372.851710][T23700] ? __nla_parse+0x3c/0x50 [ 372.856571][T23700] ? validate_linkmsg+0x261/0x2d0 [ 372.862006][T23700] rtnl_newlink+0xe7e/0x1310 [ 372.866819][T23700] ? widen_string+0x3a/0x280 [ 372.871497][T23700] ? aa_get_newest_label+0x74/0x250 [ 372.876766][T23700] ? apparmor_capable+0xfe/0x160 [ 372.881783][T23700] ? bpf_lsm_capable+0x5/0x10 [ 372.886476][T23700] ? security_capable+0x91/0xa0 [ 372.891433][T23700] ? ns_capable+0x86/0xb0 [ 372.895844][T23700] ? rtnl_setlink+0x280/0x280 [ 372.901040][T23700] rtnetlink_rcv_msg+0x728/0x7c0 [ 372.906251][T23700] ? ___cache_free+0x3c/0x2f0 [ 372.910933][T23700] ? skb_network_protocol+0x144/0x340 [ 372.916615][T23700] ? __kfree_skb+0xfe/0x150 [ 372.921162][T23700] ? kmem_cache_free+0x59/0x100 [ 372.926217][T23700] ? __kfree_skb+0xfe/0x150 [ 372.930881][T23700] ? consume_skb+0x4b/0x160 [ 372.935482][T23700] ? nlmon_xmit+0x47/0x50 [ 372.940080][T23700] ? xmit_one+0x173/0x2e0 [ 372.944455][T23700] ? local_bh_enable+0x1b/0x20 [ 372.949367][T23700] ? __dev_queue_xmit+0xc25/0x1580 [ 372.954470][T23700] ? kcsan_setup_watchpoint+0x26e/0x470 [ 372.960007][T23700] ? __rcu_read_unlock+0x5c/0x250 [ 372.965227][T23700] netlink_rcv_skb+0x13e/0x240 [ 372.970055][T23700] ? rtnetlink_bind+0x60/0x60 [ 372.974746][T23700] rtnetlink_rcv+0x18/0x20 [ 372.979365][T23700] netlink_unicast+0x5fc/0x6c0 [ 372.984211][T23700] netlink_sendmsg+0x6f8/0x7c0 [ 372.989153][T23700] ? netlink_getsockopt+0x720/0x720 [ 372.994550][T23700] ____sys_sendmsg+0x360/0x4d0 [ 372.999318][T23700] ? import_iovec+0xb8/0xd0 [ 373.003958][T23700] __sys_sendmsg+0x1ed/0x270 [ 373.008942][T23700] ? __fsnotify_parent+0x32f/0x430 [ 373.014172][T23700] ? get_pid_task+0x90/0xc0 [ 373.018817][T23700] ? vfs_write+0x572/0x7e0 [ 373.023239][T23700] ? __fget_light+0x219/0x260 [ 373.028047][T23700] ? fput+0x2d/0x130 [ 373.032075][T23700] ? ksys_write+0x157/0x180 [ 373.036640][T23700] __x64_sys_sendmsg+0x42/0x50 [ 373.041762][T23700] do_syscall_64+0x39/0x80 [ 373.046315][T23700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 373.052371][T23700] RIP: 0033:0x465f69 [ 373.056282][T23700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 373.076569][T23700] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.085582][T23700] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 373.094351][T23700] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 373.102401][T23700] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 373.112511][T23700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.121920][T23700] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 373.146707][T23700] team0: Device ipvlan0 failed to register rx_handler 21:31:50 executing program 5 (fault-call:1 fault-nth:9): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 373.196378][T23703] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.218312][T23705] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 21:31:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 373.278385][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 373.287009][T23717] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 373.321023][T23717] FAULT_INJECTION: forcing a failure. [ 373.321023][T23717] name failslab, interval 1, probability 0, space 0, times 0 [ 373.349728][T23717] CPU: 0 PID: 23717 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 373.358970][T23717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.369385][T23717] Call Trace: [ 373.372760][T23717] dump_stack+0x137/0x19d [ 373.377387][T23717] should_fail+0x23c/0x250 [ 373.381824][T23717] __should_failslab+0x81/0x90 [ 373.386665][T23717] should_failslab+0x5/0x20 [ 373.391179][T23717] kmem_cache_alloc_node_trace+0x5b/0x310 [ 373.396994][T23717] ? __kmalloc_node_track_caller+0x30/0x40 [ 373.402998][T23717] __kmalloc_node_track_caller+0x30/0x40 [ 373.408641][T23717] ? rtmsg_ifinfo_build_skb+0x61/0x130 [ 373.414323][T23717] __alloc_skb+0x187/0x420 [ 373.418863][T23717] rtmsg_ifinfo_build_skb+0x61/0x130 [ 373.424235][T23717] rtmsg_ifinfo+0x58/0xc0 [ 373.428679][T23717] dev_open+0x7c/0x190 [ 373.432754][T23717] team_add_slave+0x5ba/0x1550 [ 373.437637][T23717] ? __dev_change_flags+0x343/0x3f0 [ 373.443090][T23717] ? __dev_notify_flags+0x25b/0x3a0 [ 373.448563][T23717] ? dev_change_flags+0xa2/0xc0 [ 373.453673][T23717] do_setlink+0x87d/0x2280 [ 373.458506][T23717] ? __nla_validate_parse+0x2ec/0x17f0 [ 373.464322][T23717] ? __nla_validate_parse+0x10ed/0x17f0 [ 373.470017][T23717] ? __nla_parse+0x3c/0x50 [ 373.475136][T23717] ? validate_linkmsg+0x261/0x2d0 [ 373.480807][T23717] rtnl_newlink+0xe7e/0x1310 [ 373.486029][T23717] ? widen_string+0x3a/0x280 [ 373.490611][T23717] ? aa_get_newest_label+0x74/0x250 [ 373.496347][T23717] ? apparmor_capable+0xfe/0x160 [ 373.501754][T23717] ? bpf_lsm_capable+0x5/0x10 [ 373.507036][T23717] ? security_capable+0x91/0xa0 [ 373.512096][T23717] ? ns_capable+0x86/0xb0 [ 373.516417][T23717] ? rtnl_setlink+0x280/0x280 [ 373.521088][T23717] rtnetlink_rcv_msg+0x728/0x7c0 [ 373.526013][T23717] ? ___cache_free+0x3c/0x2f0 [ 373.530739][T23717] ? skb_network_protocol+0x144/0x340 [ 373.536098][T23717] ? __kfree_skb+0xfe/0x150 [ 373.541111][T23717] ? kmem_cache_free+0x59/0x100 [ 373.546087][T23717] ? __kfree_skb+0xfe/0x150 [ 373.550896][T23717] ? consume_skb+0x4b/0x160 [ 373.555496][T23717] ? nlmon_xmit+0x47/0x50 [ 373.560170][T23717] ? xmit_one+0x173/0x2e0 [ 373.564750][T23717] ? local_bh_enable+0x1b/0x20 [ 373.569739][T23717] ? __dev_queue_xmit+0xc25/0x1580 [ 373.575143][T23717] ? __skb_clone+0x2b9/0x2d0 [ 373.580071][T23717] ? __rcu_read_unlock+0x5c/0x250 [ 373.585789][T23717] netlink_rcv_skb+0x13e/0x240 [ 373.590680][T23717] ? rtnetlink_bind+0x60/0x60 [ 373.595444][T23717] rtnetlink_rcv+0x18/0x20 [ 373.600067][T23717] netlink_unicast+0x5fc/0x6c0 [ 373.605673][T23717] netlink_sendmsg+0x6f8/0x7c0 [ 373.611114][T23717] ? netlink_getsockopt+0x720/0x720 [ 373.616548][T23717] ____sys_sendmsg+0x360/0x4d0 [ 373.622773][T23717] ? import_iovec+0xb8/0xd0 [ 373.627611][T23717] __sys_sendmsg+0x1ed/0x270 [ 373.632567][T23717] ? __fsnotify_parent+0x32f/0x430 [ 373.638345][T23717] ? get_pid_task+0x90/0xc0 [ 373.643636][T23717] ? vfs_write+0x572/0x7e0 [ 373.648489][T23717] ? __fget_light+0x219/0x260 [ 373.653433][T23717] ? fput+0x2d/0x130 [ 373.657963][T23717] ? ksys_write+0x157/0x180 [ 373.662507][T23717] __x64_sys_sendmsg+0x42/0x50 [ 373.667515][T23717] do_syscall_64+0x39/0x80 [ 373.672105][T23717] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 373.678247][T23717] RIP: 0033:0x465f69 [ 373.682227][T23717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 373.702271][T23717] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.711404][T23717] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 373.720295][T23717] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 373.728290][T23717] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 373.736788][T23717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.745352][T23717] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 373.757591][T23717] team0: Device ipvlan0 failed to register rx_handler [ 373.788501][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.798812][T23721] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.800459][ T19] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.821194][ T8990] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 373.829426][ T19] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 373.841074][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.851702][ T19] usb 2-1: config 0 descriptor?? [ 374.058311][ T8990] usb 5-1: device descriptor read/8, error -61 [ 374.109928][ T19] usb 2-1: USB disconnect, device number 88 [ 374.188333][ T8990] usb usb5-port1: unable to enumerate USB device 21:31:51 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:31:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:51 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:51 executing program 5 (fault-call:1 fault-nth:10): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 374.669809][T23743] FAULT_INJECTION: forcing a failure. [ 374.669809][T23743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.687489][T23745] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 374.697441][T23743] CPU: 0 PID: 23743 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 374.706851][T23743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.716004][T23745] FAULT_INJECTION: forcing a failure. [ 374.716004][T23745] name failslab, interval 1, probability 0, space 0, times 0 [ 374.717031][T23743] Call Trace: [ 374.717041][T23743] dump_stack+0x137/0x19d [ 374.737628][T23743] should_fail+0x23c/0x250 [ 374.742052][T23743] should_fail_usercopy+0x16/0x20 [ 374.747150][T23743] _copy_from_user+0x1c/0xd0 [ 374.751901][T23743] __copy_msghdr_from_user+0x44/0x350 [ 374.757384][T23743] ? __fget_light+0x219/0x260 [ 374.762382][T23743] __sys_sendmsg+0x135/0x270 [ 374.767051][T23743] ? kstrtouint_from_user+0x104/0x130 [ 374.772589][T23743] ? __rcu_read_unlock+0x5c/0x250 [ 374.777701][T23743] ? fsnotify_perm+0x59/0x2e0 [ 374.782387][T23743] ? __fsnotify_parent+0x32f/0x430 [ 374.787507][T23743] ? get_pid_task+0x90/0xc0 [ 374.792025][T23743] ? vfs_write+0x572/0x7e0 [ 374.796439][T23743] ? __fget_light+0x219/0x260 [ 374.801117][T23743] ? fput+0x2d/0x130 [ 374.805057][T23743] ? ksys_write+0x157/0x180 [ 374.809828][T23743] __x64_sys_sendmsg+0x42/0x50 [ 374.815253][T23743] do_syscall_64+0x39/0x80 [ 374.819690][T23743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 374.825596][T23743] RIP: 0033:0x465f69 [ 374.829481][T23743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 374.849774][T23743] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.858598][T23743] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 374.866754][T23743] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 374.875429][T23743] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 374.883490][T23743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.891597][T23743] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 374.899678][T23745] CPU: 1 PID: 23745 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 374.908802][T23745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.919243][T23745] Call Trace: [ 374.922529][T23745] dump_stack+0x137/0x19d [ 374.926957][T23745] should_fail+0x23c/0x250 [ 374.931376][T23745] ? netlink_trim+0x112/0x140 [ 374.936149][T23745] __should_failslab+0x81/0x90 [ 374.941308][T23745] should_failslab+0x5/0x20 [ 374.945885][T23745] kmem_cache_alloc_node_trace+0x5b/0x310 [ 374.951603][T23745] ? __kmalloc_node_track_caller+0x30/0x40 [ 374.957819][T23745] ? netlink_trim+0x112/0x140 [ 374.962579][T23745] __kmalloc_node_track_caller+0x30/0x40 [ 374.968313][T23745] pskb_expand_head+0xc9/0x920 [ 374.973255][T23745] ? skb_trim+0x8c/0xb0 [ 374.978032][T23745] ? rtnl_fill_ifinfo+0x23ca/0x2440 [ 374.983394][T23745] netlink_trim+0x112/0x140 [ 374.987886][T23745] netlink_broadcast_filtered+0x47/0xb80 [ 374.993505][T23745] ? rtmsg_ifinfo_build_skb+0xa8/0x130 [ 374.998956][T23745] nlmsg_notify+0xcc/0x180 [ 375.003464][T23745] rtmsg_ifinfo+0xa4/0xc0 [ 375.008098][T23745] dev_open+0x7c/0x190 [ 375.012527][T23745] team_add_slave+0x5ba/0x1550 [ 375.017374][T23745] ? __dev_change_flags+0x343/0x3f0 [ 375.022614][T23745] ? __dev_notify_flags+0x25b/0x3a0 [ 375.027840][T23745] ? dev_change_flags+0xa2/0xc0 [ 375.032800][T23745] do_setlink+0x87d/0x2280 [ 375.037292][T23745] ? __nla_validate_parse+0x2ec/0x17f0 [ 375.043703][T23745] ? __nla_validate_parse+0x10ed/0x17f0 [ 375.049482][T23745] ? __nla_parse+0x3c/0x50 [ 375.054388][T23745] ? validate_linkmsg+0x261/0x2d0 [ 375.059904][T23745] rtnl_newlink+0xe7e/0x1310 [ 375.064660][T23745] ? widen_string+0x3a/0x280 [ 375.069339][T23745] ? aa_get_newest_label+0x74/0x250 [ 375.074553][T23745] ? apparmor_capable+0xfe/0x160 [ 375.079695][T23745] ? bpf_lsm_capable+0x5/0x10 [ 375.084371][T23745] ? security_capable+0x91/0xa0 [ 375.089427][T23745] ? ns_capable+0x86/0xb0 [ 375.093951][T23745] ? rtnl_setlink+0x280/0x280 [ 375.098638][T23745] rtnetlink_rcv_msg+0x728/0x7c0 [ 375.103666][T23745] ? ___cache_free+0x3c/0x2f0 [ 375.108596][T23745] ? skb_network_protocol+0x144/0x340 [ 375.114389][T23745] ? __kfree_skb+0xfe/0x150 [ 375.119174][T23745] ? kmem_cache_free+0x59/0x100 [ 375.124421][T23745] ? __kfree_skb+0xfe/0x150 [ 375.129489][T23745] ? consume_skb+0x4b/0x160 [ 375.134037][T23745] ? nlmon_xmit+0x47/0x50 [ 375.138645][T23745] ? xmit_one+0x173/0x2e0 [ 375.143066][T23745] ? local_bh_enable+0x1b/0x20 [ 375.148164][T23745] ? __dev_queue_xmit+0xc25/0x1580 [ 375.153422][T23745] ? __skb_clone+0x2b9/0x2d0 [ 375.158109][T23745] ? __rcu_read_unlock+0x5c/0x250 [ 375.163140][T23745] netlink_rcv_skb+0x13e/0x240 [ 375.167892][T23745] ? rtnetlink_bind+0x60/0x60 [ 375.172753][T23745] rtnetlink_rcv+0x18/0x20 [ 375.177262][T23745] netlink_unicast+0x5fc/0x6c0 [ 375.182194][T23745] netlink_sendmsg+0x6f8/0x7c0 [ 375.186996][T23745] ? netlink_getsockopt+0x720/0x720 [ 375.192280][T23745] ____sys_sendmsg+0x360/0x4d0 [ 375.197393][T23745] ? import_iovec+0xb8/0xd0 [ 375.201886][T23745] __sys_sendmsg+0x1ed/0x270 [ 375.206526][T23745] ? __fsnotify_parent+0x32f/0x430 [ 375.211627][T23745] ? get_pid_task+0x90/0xc0 [ 375.216564][T23745] ? vfs_write+0x572/0x7e0 [ 375.221593][T23745] ? __fget_light+0x219/0x260 [ 375.226896][T23745] ? fput+0x2d/0x130 [ 375.230814][T23745] ? ksys_write+0x157/0x180 [ 375.235571][T23745] __x64_sys_sendmsg+0x42/0x50 [ 375.240531][T23745] do_syscall_64+0x39/0x80 [ 375.245075][T23745] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 375.251410][T23745] RIP: 0033:0x465f69 [ 375.255521][T23745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 375.275484][T23745] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.284065][T23745] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 375.292115][T23745] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 375.300292][T23745] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 [ 375.308411][T23745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.316600][T23745] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 375.345662][T23745] team0: Device ipvlan0 failed to register rx_handler [ 375.408273][ T9575] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 375.668216][ T9575] usb 2-1: Using ep0 maxpacket: 8 21:31:52 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 21:31:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:52 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:52 executing program 5 (fault-call:1 fault-nth:11): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 375.774829][T23773] FAULT_INJECTION: forcing a failure. [ 375.774829][T23773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.775008][T23772] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 375.796588][ T9575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.805053][T23773] CPU: 1 PID: 23773 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 375.815898][T23773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.826162][T23773] Call Trace: [ 375.829435][T23773] dump_stack+0x137/0x19d [ 375.834028][T23773] should_fail+0x23c/0x250 [ 375.838752][T23773] should_fail_usercopy+0x16/0x20 [ 375.843761][T23773] _copy_from_user+0x1c/0xd0 [ 375.848446][T23773] iovec_from_user+0xc4/0x2d0 [ 375.853121][T23773] ? __alloc_pages_nodemask+0x1a8/0x350 [ 375.858763][T23773] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 375.864426][T23773] ? should_fail+0xd6/0x250 [ 375.868914][T23773] __import_iovec+0x49/0x270 [ 375.873490][T23773] import_iovec+0xb8/0xd0 [ 375.877855][T23773] __sys_sendmsg+0x1ab/0x270 [ 375.882571][T23773] ? __rcu_read_unlock+0x5c/0x250 [ 375.887845][T23773] ? fsnotify_perm+0x59/0x2e0 [ 375.892632][T23773] ? __fsnotify_parent+0x32f/0x430 [ 375.897934][T23773] ? get_pid_task+0x90/0xc0 [ 375.902590][T23773] ? vfs_write+0x572/0x7e0 [ 375.907348][T23773] ? __fget_light+0x219/0x260 [ 375.912030][T23773] ? fput+0x2d/0x130 [ 375.916081][T23773] ? ksys_write+0x157/0x180 [ 375.920744][T23773] __x64_sys_sendmsg+0x42/0x50 [ 375.925832][T23773] do_syscall_64+0x39/0x80 [ 375.930594][T23773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 375.936490][T23773] RIP: 0033:0x465f69 [ 375.940650][T23773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 375.960533][T23773] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.969150][T23773] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 375.977467][T23773] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 375.985602][T23773] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 375.993713][T23773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.001847][T23773] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 376.016934][ T9575] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.030088][T23772] FAULT_INJECTION: forcing a failure. [ 376.030088][T23772] name failslab, interval 1, probability 0, space 0, times 0 [ 376.044215][ T9575] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 376.045604][T23772] CPU: 1 PID: 23772 Comm: syz-executor.5 Not tainted 5.12.0-rc3-syzkaller #0 [ 376.062296][T23772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.072467][T23772] Call Trace: [ 376.075768][T23772] dump_stack+0x137/0x19d [ 376.080116][T23772] should_fail+0x23c/0x250 [ 376.082462][ T9575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.084533][T23772] __should_failslab+0x81/0x90 [ 376.097633][T23772] ? netdevice_event+0x290/0x670 [ 376.103187][T23772] should_failslab+0x5/0x20 [ 376.108312][T23772] kmem_cache_alloc_trace+0x49/0x340 [ 376.113837][T23772] ? netlink_broadcast_filtered+0xb61/0xb80 [ 376.120053][T23772] netdevice_event+0x290/0x670 [ 376.124861][ T9575] usb 2-1: config 0 descriptor?? [ 376.125097][T23772] ? _raw_spin_lock_irqsave+0x25/0x90 [ 376.135607][T23772] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 376.141560][T23772] ? netdev_upper_walk+0xf0/0xf0 [ 376.146520][T23772] ? add_default_gids+0xa0/0xa0 [ 376.151408][T23772] ? is_ndev_for_default_gid_filter+0x130/0x130 [ 376.157717][T23772] ? enum_all_gids_of_dev_cb+0x350/0x350 [ 376.163359][T23772] ? del_netdev_ips+0x30/0x30 [ 376.168043][T23772] ? del_netdev_default_ips_join+0x2b0/0x2b0 [ 376.174137][T23772] ? cfg802154_netdev_notifier_call+0x9c/0x400 [ 376.180414][T23772] raw_notifier_call_chain+0x53/0xb0 [ 376.185724][T23772] dev_open+0x123/0x190 [ 376.189882][T23772] team_add_slave+0x5ba/0x1550 [ 376.194734][T23772] ? __dev_change_flags+0x343/0x3f0 [ 376.199947][T23772] ? __dev_notify_flags+0x25b/0x3a0 [ 376.205211][T23772] ? dev_change_flags+0xa2/0xc0 [ 376.210074][T23772] do_setlink+0x87d/0x2280 [ 376.214495][T23772] ? __nla_validate_parse+0x2ec/0x17f0 [ 376.219969][T23772] ? __nla_validate_parse+0x10ed/0x17f0 [ 376.225546][T23772] ? __nla_parse+0x3c/0x50 21:31:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 376.229966][T23772] ? validate_linkmsg+0x261/0x2d0 [ 376.235037][T23772] rtnl_newlink+0xe7e/0x1310 [ 376.239670][T23772] ? __perf_event_task_sched_in+0x4c1/0x500 [ 376.245770][T23772] ? kvm_sched_clock_read+0x15/0x40 [ 376.250978][T23772] ? sched_clock+0xf/0x20 [ 376.255823][T23772] ? sched_clock_cpu+0x11/0x1a0 [ 376.260857][T23772] ? psi_group_change+0x1c2/0x250 [ 376.266595][T23772] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 376.273748][T23772] ? _raw_spin_unlock_irq+0x22/0x40 [ 376.279687][T23772] ? widen_string+0x3a/0x280 [ 376.284274][T23772] ? aa_get_newest_label+0x74/0x250 [ 376.289610][T23772] ? apparmor_capable+0xfe/0x160 [ 376.295003][T23772] ? bpf_lsm_capable+0x5/0x10 [ 376.299956][T23772] ? security_capable+0x91/0xa0 [ 376.304938][T23772] ? ns_capable+0x86/0xb0 [ 376.309309][T23772] ? rtnl_setlink+0x280/0x280 [ 376.314179][T23772] rtnetlink_rcv_msg+0x728/0x7c0 [ 376.319125][T23772] ? ___cache_free+0x3c/0x2f0 [ 376.323795][T23772] ? skb_network_protocol+0x144/0x340 [ 376.329533][T23772] ? __kfree_skb+0xfe/0x150 [ 376.334324][T23772] ? kmem_cache_free+0x59/0x100 [ 376.339253][T23772] ? __kfree_skb+0xfe/0x150 [ 376.343747][T23772] ? consume_skb+0x4b/0x160 [ 376.348600][T23772] ? nlmon_xmit+0x47/0x50 [ 376.353082][T23772] ? xmit_one+0x173/0x2e0 [ 376.357426][T23772] ? local_bh_enable+0x1b/0x20 [ 376.362440][T23772] ? __dev_queue_xmit+0xc25/0x1580 [ 376.368003][T23772] ? __skb_clone+0x2b9/0x2d0 [ 376.373398][T23772] ? __rcu_read_unlock+0x5c/0x250 [ 376.378504][T23772] netlink_rcv_skb+0x13e/0x240 [ 376.383759][T23772] ? rtnetlink_bind+0x60/0x60 [ 376.388433][T23772] rtnetlink_rcv+0x18/0x20 [ 376.392938][T23772] netlink_unicast+0x5fc/0x6c0 [ 376.398012][T23772] netlink_sendmsg+0x6f8/0x7c0 [ 376.402784][T23772] ? netlink_getsockopt+0x720/0x720 [ 376.408656][T23772] ____sys_sendmsg+0x360/0x4d0 [ 376.413856][T23772] ? import_iovec+0xb8/0xd0 [ 376.418569][T23772] __sys_sendmsg+0x1ed/0x270 [ 376.423593][T23772] ? __fsnotify_parent+0x32f/0x430 [ 376.428826][T23772] ? get_pid_task+0x90/0xc0 [ 376.433521][T23772] ? vfs_write+0x572/0x7e0 [ 376.438110][T23772] ? __fget_light+0x219/0x260 [ 376.442816][T23772] ? fput+0x2d/0x130 [ 376.447061][T23772] ? ksys_write+0x157/0x180 [ 376.452093][T23772] __x64_sys_sendmsg+0x42/0x50 [ 376.457286][T23772] do_syscall_64+0x39/0x80 [ 376.462380][T23772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 376.469737][T23772] RIP: 0033:0x465f69 [ 376.473819][T23772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 376.494724][T23772] RSP: 002b:00007fc1d7d83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.503517][T23772] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 376.511637][T23772] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 376.520140][T23772] RBP: 00007fc1d7d831d0 R08: 0000000000000000 R09: 0000000000000000 21:31:53 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 376.528324][T23772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.536482][T23772] R13: 00007ffef10a716f R14: 00007fc1d7d83300 R15: 0000000000022000 [ 376.549776][T23772] team0: Device ipvlan0 failed to register rx_handler [ 376.625940][T23801] FAULT_INJECTION: forcing a failure. [ 376.625940][T23801] name failslab, interval 1, probability 0, space 0, times 0 [ 376.660017][T23801] CPU: 1 PID: 23801 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 376.669094][T23801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.679151][T23801] Call Trace: [ 376.682440][T23801] dump_stack+0x137/0x19d [ 376.686804][T23801] should_fail+0x23c/0x250 [ 376.691285][T23801] __should_failslab+0x81/0x90 [ 376.696328][T23801] should_failslab+0x5/0x20 [ 376.700832][T23801] kmem_cache_alloc_node+0x56/0x310 [ 376.706097][T23801] ? __alloc_skb+0xed/0x420 [ 376.710650][T23801] __alloc_skb+0xed/0x420 [ 376.715048][T23801] netlink_sendmsg+0x4c7/0x7c0 [ 376.720079][T23801] ? netlink_getsockopt+0x720/0x720 [ 376.725325][T23801] ____sys_sendmsg+0x360/0x4d0 [ 376.730189][T23801] ? import_iovec+0xb8/0xd0 [ 376.734901][T23801] __sys_sendmsg+0x1ed/0x270 [ 376.739730][T23801] ? __fsnotify_parent+0x32f/0x430 [ 376.745029][T23801] ? get_pid_task+0x90/0xc0 [ 376.749572][T23801] ? vfs_write+0x572/0x7e0 [ 376.754001][T23801] ? __fget_light+0x219/0x260 [ 376.758809][T23801] ? fput+0x2d/0x130 [ 376.762742][T23801] ? ksys_write+0x157/0x180 [ 376.767511][T23801] __x64_sys_sendmsg+0x42/0x50 [ 376.772439][T23801] do_syscall_64+0x39/0x80 [ 376.776998][T23801] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 376.783156][T23801] RIP: 0033:0x465f69 [ 376.787233][T23801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 376.787507][ T3062] usb 2-1: USB disconnect, device number 89 [ 376.807197][T23801] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.821730][T23801] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 376.829716][T23801] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 376.837933][T23801] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 376.846070][T23801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.854168][T23801] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 376.874336][ T5] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 377.088175][ T5] usb 5-1: device descriptor read/64, error 18 21:31:54 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a009040000"], 0x0) 21:31:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:54 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 377.360609][T23824] FAULT_INJECTION: forcing a failure. [ 377.360609][T23824] name failslab, interval 1, probability 0, space 0, times 0 [ 377.378150][ T5] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 377.385942][T23827] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 377.388134][T23824] CPU: 1 PID: 23824 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 377.401278][T23827] team0: Device ipvlan0 failed to register rx_handler [ 377.403455][T23824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.403467][T23824] Call Trace: [ 377.403477][T23824] dump_stack+0x137/0x19d [ 377.428257][T23824] should_fail+0x23c/0x250 [ 377.432861][T23824] __should_failslab+0x81/0x90 [ 377.438271][T23824] should_failslab+0x5/0x20 [ 377.442895][T23824] kmem_cache_alloc_node_trace+0x5b/0x310 [ 377.448621][T23824] ? __kmalloc_node_track_caller+0x30/0x40 [ 377.454567][T23824] __kmalloc_node_track_caller+0x30/0x40 [ 377.460200][T23824] ? netlink_sendmsg+0x4c7/0x7c0 [ 377.465225][T23824] __alloc_skb+0x187/0x420 [ 377.469656][T23824] netlink_sendmsg+0x4c7/0x7c0 [ 377.474936][T23824] ? netlink_getsockopt+0x720/0x720 [ 377.480587][T23824] ____sys_sendmsg+0x360/0x4d0 [ 377.485514][T23824] ? import_iovec+0xb8/0xd0 [ 377.490241][T23824] __sys_sendmsg+0x1ed/0x270 [ 377.494823][T23824] ? __fsnotify_parent+0x32f/0x430 [ 377.500029][T23824] ? get_pid_task+0x90/0xc0 [ 377.504527][T23824] ? vfs_write+0x572/0x7e0 [ 377.509137][T23824] ? __fget_light+0x219/0x260 [ 377.513906][T23824] ? fput+0x2d/0x130 [ 377.517803][T23824] ? ksys_write+0x157/0x180 [ 377.522330][T23824] __x64_sys_sendmsg+0x42/0x50 [ 377.527836][T23824] do_syscall_64+0x39/0x80 [ 377.532270][T23824] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 377.538448][T23824] RIP: 0033:0x465f69 [ 377.542570][T23824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 377.562735][T23824] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.571133][T23824] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 377.579091][T23824] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 377.587092][T23824] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 377.595047][T23824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.603043][T23824] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 377.769339][ T3062] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 377.788523][ T5] usb 5-1: device descriptor read/64, error 18 [ 377.918177][ T5] usb usb5-port1: attempt power cycle [ 378.038111][ T3062] usb 2-1: Using ep0 maxpacket: 8 [ 378.188395][ T3062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.200121][ T3062] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 378.210646][ T3062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.222495][ T3062] usb 2-1: config 0 descriptor?? [ 378.272127][ T3062] ath10k_warn: 2 callbacks suppressed [ 378.272143][ T3062] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 378.470631][ T7] usb 2-1: USB disconnect, device number 90 [ 378.488185][ T3121] usb 2-1: Failed to submit usb control message: -71 [ 378.495268][ T3121] usb 2-1: unable to send the bmi data to the device: -71 [ 378.502485][ T3121] usb 2-1: unable to get target info from device [ 378.509242][ T3121] usb 2-1: could not get target info (-71) [ 378.515117][ T3121] usb 2-1: could not probe fw (-71) [ 378.648150][ T5] usb 5-1: new high-speed USB device number 31 using dummy_hcd 21:31:55 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d3400"], 0x0) 21:31:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:55 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 378.808078][ T5] usb 5-1: device descriptor read/8, error -71 [ 378.831113][T23864] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 378.849156][T23864] team0: Device ipvlan0 failed to register rx_handler [ 378.861235][T23866] FAULT_INJECTION: forcing a failure. [ 378.861235][T23866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.902881][T23866] CPU: 0 PID: 23866 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 378.911882][T23866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.922048][T23866] Call Trace: [ 378.925325][T23866] dump_stack+0x137/0x19d [ 378.929917][T23866] should_fail+0x23c/0x250 [ 378.934439][T23866] should_fail_usercopy+0x16/0x20 [ 378.939474][T23866] _copy_from_iter_full+0x11f/0x5f0 [ 378.945022][T23866] ? __virt_addr_valid+0x15a/0x1a0 [ 378.950185][T23866] ? __check_object_size+0x253/0x310 [ 378.955481][T23866] netlink_sendmsg+0x579/0x7c0 [ 378.960263][T23866] ? netlink_getsockopt+0x720/0x720 [ 378.965454][T23866] ____sys_sendmsg+0x360/0x4d0 [ 378.970541][T23866] ? import_iovec+0xb8/0xd0 [ 378.975117][T23866] __sys_sendmsg+0x1ed/0x270 [ 378.979749][T23866] ? __fsnotify_parent+0x32f/0x430 [ 378.985138][T23866] ? get_pid_task+0x90/0xc0 [ 378.989626][T23866] ? vfs_write+0x572/0x7e0 [ 378.994077][T23866] ? __fget_light+0x219/0x260 [ 378.998748][T23866] ? fput+0x2d/0x130 [ 379.002637][T23866] ? ksys_write+0x157/0x180 [ 379.007212][T23866] __x64_sys_sendmsg+0x42/0x50 [ 379.012025][T23866] do_syscall_64+0x39/0x80 [ 379.016515][T23866] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 379.022693][T23866] RIP: 0033:0x465f69 [ 379.026779][T23866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 21:31:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 379.047431][T23866] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.055928][T23866] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 379.064171][T23866] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 379.072784][T23866] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 379.081248][T23866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.089291][T23866] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 21:31:56 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:31:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 379.223370][T23886] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 21:31:56 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:56 executing program 0 (fault-call:1 fault-nth:5): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 379.264830][T23886] team0: Device ipvlan0 failed to register rx_handler [ 379.334186][T23901] FAULT_INJECTION: forcing a failure. [ 379.334186][T23901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.367337][T23902] FAULT_INJECTION: forcing a failure. [ 379.367337][T23902] name failslab, interval 1, probability 0, space 0, times 0 [ 379.391739][T23901] CPU: 1 PID: 23901 Comm: syz-executor.2 Not tainted 5.12.0-rc3-syzkaller #0 [ 379.400817][T23901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.410910][T23901] Call Trace: [ 379.414226][T23901] dump_stack+0x137/0x19d [ 379.418630][T23901] should_fail+0x23c/0x250 [ 379.423193][T23901] should_fail_usercopy+0x16/0x20 [ 379.428284][T23901] _copy_from_user+0x1c/0xd0 [ 379.432967][T23901] __copy_msghdr_from_user+0x44/0x350 [ 379.439059][T23901] ? __fget_light+0x219/0x260 [ 379.443938][T23901] __sys_sendmsg+0x135/0x270 [ 379.448605][T23901] ? kstrtouint_from_user+0x104/0x130 [ 379.453985][T23901] ? __rcu_read_unlock+0x5c/0x250 [ 379.459090][T23901] ? fsnotify_perm+0x59/0x2e0 [ 379.463763][T23901] ? __fsnotify_parent+0x32f/0x430 [ 379.468866][T23901] ? get_pid_task+0x90/0xc0 [ 379.473445][T23901] ? vfs_write+0x572/0x7e0 [ 379.477968][T23901] ? __fget_light+0x219/0x260 [ 379.482644][T23901] ? fput+0x2d/0x130 [ 379.486524][T23901] ? ksys_write+0x157/0x180 [ 379.491249][T23901] __x64_sys_sendmsg+0x42/0x50 [ 379.496010][T23901] do_syscall_64+0x39/0x80 [ 379.500576][T23901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 379.506837][T23901] RIP: 0033:0x465f69 [ 379.510721][T23901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 379.531039][T23901] RSP: 002b:00007f70a39c5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.540028][T23901] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 379.548083][T23901] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 379.556131][T23901] RBP: 00007f70a39c51d0 R08: 0000000000000000 R09: 0000000000000000 [ 379.564538][T23901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.572534][T23901] R13: 00007ffec577ac6f R14: 00007f70a39c5300 R15: 0000000000022000 [ 379.580504][T23902] CPU: 0 PID: 23902 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 379.589509][T23902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.600330][T23902] Call Trace: [ 379.603707][T23902] dump_stack+0x137/0x19d [ 379.608154][T23902] should_fail+0x23c/0x250 [ 379.612913][T23902] __should_failslab+0x81/0x90 [ 379.618240][T23902] ? rtnl_newlink+0x59/0x1310 [ 379.623321][T23902] should_failslab+0x5/0x20 [ 379.628775][T23902] kmem_cache_alloc_trace+0x49/0x340 [ 379.634303][T23902] rtnl_newlink+0x59/0x1310 [ 379.639046][T23902] ? __cgroup_account_cputime+0x1f0/0x210 [ 379.644962][T23902] ? __perf_event_task_sched_in+0x4c1/0x500 [ 379.650972][T23902] ? kvm_sched_clock_read+0x15/0x40 [ 379.656293][T23902] ? sched_clock+0xf/0x20 [ 379.660622][T23902] ? sched_clock_cpu+0x11/0x1a0 [ 379.665642][T23902] ? psi_group_change+0x1c2/0x250 [ 379.670769][T23902] ? _raw_spin_unlock_irq+0x22/0x40 [ 379.676933][T23902] ? finish_task_switch+0xc0/0x2a0 [ 379.682522][T23902] ? __schedule+0x3c1/0x580 [ 379.687239][T23902] ? _raw_spin_unlock+0x22/0x40 [ 379.692128][T23902] ? __mutex_lock+0x5ae/0x670 [ 379.696898][T23902] ? rtnl_setlink+0x280/0x280 [ 379.701579][T23902] rtnetlink_rcv_msg+0x728/0x7c0 [ 379.706634][T23902] ? ima_match_policy+0xb2a/0xb60 [ 379.711986][T23902] ? __down_write_common+0x45/0x870 [ 379.717289][T23902] ? ima_get_action+0x5c/0x70 [ 379.721977][T23902] ? up_write+0x25/0xc0 [ 379.726166][T23902] ? process_measurement+0xf40/0x10f0 [ 379.734043][T23902] ? __list_del_entry_valid+0x54/0xc0 [ 379.739806][T23902] ? __inc_numa_state+0x10/0x50 [ 379.744711][T23902] ? rhashtable_jhash2+0x13a/0x1a0 [ 379.750156][T23902] ? __rcu_read_unlock+0x5c/0x250 [ 379.755248][T23902] ? jhash+0x2b0/0x2b0 [ 379.759337][T23902] netlink_rcv_skb+0x13e/0x240 [ 379.764448][T23902] ? rtnetlink_bind+0x60/0x60 [ 379.769366][T23902] rtnetlink_rcv+0x18/0x20 [ 379.773873][T23902] netlink_unicast+0x5fc/0x6c0 [ 379.778639][T23902] netlink_sendmsg+0x6f8/0x7c0 [ 379.783610][T23902] ? netlink_getsockopt+0x720/0x720 [ 379.789522][T23902] ____sys_sendmsg+0x360/0x4d0 [ 379.794867][T23902] ? import_iovec+0xb8/0xd0 [ 379.799733][T23902] __sys_sendmsg+0x1ed/0x270 [ 379.804421][T23902] ? __fsnotify_parent+0x32f/0x430 [ 379.809547][T23902] ? get_pid_task+0x90/0xc0 [ 379.814732][T23902] ? vfs_write+0x572/0x7e0 [ 379.819161][T23902] ? __fget_light+0x219/0x260 [ 379.824162][T23902] ? fput+0x2d/0x130 [ 379.828154][T23902] ? ksys_write+0x157/0x180 [ 379.832935][T23902] __x64_sys_sendmsg+0x42/0x50 [ 379.837895][T23902] do_syscall_64+0x39/0x80 [ 379.842509][T23902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 379.848501][T23902] RIP: 0033:0x465f69 [ 379.852456][T23902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 379.872416][T23902] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.880954][T23902] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 379.889129][T23902] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 379.897100][T23902] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 379.905082][T23902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.913146][T23902] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 380.008058][ T5] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 380.016480][ T7] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 380.128082][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 380.168525][ T5] usb 5-1: no configurations [ 380.174079][ T5] usb 5-1: can't read configurations, error -22 [ 380.181612][ T5] usb usb5-port1: unable to enumerate USB device [ 380.268139][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 380.398245][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.408942][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.419393][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 380.429513][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.441772][ T7] usb 2-1: config 0 descriptor?? [ 380.699369][ T7] usb 2-1: USB disconnect, device number 91 21:31:58 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d3400"], 0x0) 21:31:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:31:58 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:58 executing program 0 (fault-call:1 fault-nth:6): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:58 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) [ 381.867397][T23933] FAULT_INJECTION: forcing a failure. [ 381.867397][T23933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.885658][T23936] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 381.902184][T23936] team0: Device ipvlan0 failed to register rx_handler [ 381.913174][T23933] CPU: 1 PID: 23933 Comm: syz-executor.2 Not tainted 5.12.0-rc3-syzkaller #0 [ 381.922177][T23933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.932448][T23933] Call Trace: [ 381.935748][T23933] dump_stack+0x137/0x19d [ 381.940347][T23933] should_fail+0x23c/0x250 [ 381.944895][T23933] should_fail_usercopy+0x16/0x20 [ 381.949931][T23933] _copy_from_user+0x1c/0xd0 [ 381.954537][T23933] iovec_from_user+0xc4/0x2d0 [ 381.959731][T23933] ? __alloc_pages_nodemask+0x1a8/0x350 [ 381.965432][T23933] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 381.971077][T23933] ? should_fail+0xd6/0x250 [ 381.975679][T23933] __import_iovec+0x49/0x270 [ 381.980400][T23933] import_iovec+0xb8/0xd0 [ 381.984716][T23933] __sys_sendmsg+0x1ab/0x270 [ 381.989295][T23933] ? __rcu_read_unlock+0x5c/0x250 [ 381.994340][T23933] ? fsnotify_perm+0x59/0x2e0 [ 381.999002][T23933] ? __fsnotify_parent+0x32f/0x430 [ 382.004291][T23933] ? get_pid_task+0x90/0xc0 [ 382.008796][T23933] ? vfs_write+0x572/0x7e0 [ 382.013430][T23933] ? __fget_light+0x219/0x260 [ 382.018278][T23933] ? fput+0x2d/0x130 [ 382.022378][T23933] ? ksys_write+0x157/0x180 [ 382.026929][T23933] __x64_sys_sendmsg+0x42/0x50 [ 382.031954][T23933] do_syscall_64+0x39/0x80 [ 382.036622][T23933] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 382.042536][T23933] RIP: 0033:0x465f69 [ 382.046556][T23933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 382.066742][T23933] RSP: 002b:00007f70a39c5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.075267][T23933] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 382.083512][T23933] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 382.091476][T23933] RBP: 00007f70a39c51d0 R08: 0000000000000000 R09: 0000000000000000 [ 382.099627][T23933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.107768][T23933] R13: 00007ffec577ac6f R14: 00007f70a39c5300 R15: 0000000000022000 21:31:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:31:59 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:31:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 382.177282][T23937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 382.207848][T23937] FAULT_INJECTION: forcing a failure. [ 382.207848][T23937] name failslab, interval 1, probability 0, space 0, times 0 [ 382.237478][T23951] FAULT_INJECTION: forcing a failure. [ 382.237478][T23951] name failslab, interval 1, probability 0, space 0, times 0 [ 382.260617][T23937] CPU: 1 PID: 23937 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 382.268001][ T5] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 382.269698][T23937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.269711][T23937] Call Trace: [ 382.290663][T23937] dump_stack+0x137/0x19d [ 382.295006][T23937] should_fail+0x23c/0x250 [ 382.299702][T23937] __should_failslab+0x81/0x90 [ 382.304590][T23937] should_failslab+0x5/0x20 [ 382.309472][T23937] kmem_cache_alloc_node_trace+0x5b/0x310 [ 382.315215][T23937] ? __kmalloc_node+0x30/0x40 [ 382.319991][T23937] __kmalloc_node+0x30/0x40 [ 382.324585][T23937] kvmalloc_node+0x81/0xf0 [ 382.329056][T23937] alloc_netdev_mqs+0x86/0x750 [ 382.333865][T23937] ? tsan.module_ctor+0x10/0x10 [ 382.338835][T23937] rtnl_create_link+0x1c1/0x510 [ 382.343706][T23937] rtnl_newlink+0xc84/0x1310 [ 382.348310][T23937] ? psi_group_change+0x1c2/0x250 [ 382.353375][T23937] ? _raw_spin_unlock_irq+0x22/0x40 [ 382.358593][T23937] ? finish_task_switch+0xc0/0x2a0 [ 382.364022][T23937] ? __schedule+0x3c1/0x580 [ 382.368531][T23937] ? _raw_spin_unlock+0x22/0x40 [ 382.373660][T23937] ? __mutex_lock+0x5ae/0x670 [ 382.378473][T23937] ? rtnl_setlink+0x280/0x280 [ 382.383520][T23937] rtnetlink_rcv_msg+0x728/0x7c0 [ 382.388759][T23937] ? ima_match_policy+0xb2a/0xb60 [ 382.394099][T23937] ? __down_write_common+0x45/0x870 [ 382.399410][T23937] ? ima_get_action+0x5c/0x70 [ 382.405994][T23937] ? up_write+0x25/0xc0 [ 382.410346][T23937] ? process_measurement+0xf40/0x10f0 [ 382.416000][T23937] ? __list_del_entry_valid+0x54/0xc0 [ 382.421585][T23937] ? __inc_numa_state+0x10/0x50 [ 382.426555][T23937] ? rhashtable_jhash2+0x13a/0x1a0 [ 382.431869][T23937] ? __rcu_read_unlock+0x5c/0x250 [ 382.437345][T23937] ? jhash+0x2b0/0x2b0 [ 382.441433][T23937] netlink_rcv_skb+0x13e/0x240 [ 382.446394][T23937] ? rtnetlink_bind+0x60/0x60 [ 382.451094][T23937] rtnetlink_rcv+0x18/0x20 [ 382.455625][T23937] netlink_unicast+0x5fc/0x6c0 [ 382.460772][T23937] netlink_sendmsg+0x6f8/0x7c0 [ 382.465679][T23937] ? netlink_getsockopt+0x720/0x720 [ 382.470877][T23937] ____sys_sendmsg+0x360/0x4d0 [ 382.475925][T23937] ? import_iovec+0xb8/0xd0 [ 382.480855][T23937] __sys_sendmsg+0x1ed/0x270 [ 382.485491][T23937] ? __fsnotify_parent+0x32f/0x430 [ 382.490731][T23937] ? get_pid_task+0x90/0xc0 [ 382.495358][T23937] ? vfs_write+0x572/0x7e0 [ 382.499778][T23937] ? __fget_light+0x219/0x260 [ 382.504531][T23937] ? fput+0x2d/0x130 [ 382.507910][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 382.508423][T23937] ? ksys_write+0x157/0x180 [ 382.517953][T23937] __x64_sys_sendmsg+0x42/0x50 [ 382.522765][T23937] do_syscall_64+0x39/0x80 [ 382.527194][T23937] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 382.533372][T23937] RIP: 0033:0x465f69 [ 382.537270][T23937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 382.556878][T23937] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.565524][T23937] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 382.573583][T23937] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 382.581547][T23937] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 382.589734][T23937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.598351][T23937] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 382.606792][T23951] CPU: 0 PID: 23951 Comm: syz-executor.2 Not tainted 5.12.0-rc3-syzkaller #0 [ 382.615765][T23951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.626026][T23951] Call Trace: [ 382.629313][T23951] dump_stack+0x137/0x19d [ 382.633687][T23951] should_fail+0x23c/0x250 21:31:59 executing program 0 (fault-call:1 fault-nth:7): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 382.635665][T23959] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 382.638131][T23951] __should_failslab+0x81/0x90 [ 382.638153][T23951] should_failslab+0x5/0x20 [ 382.647446][T23959] team0: Device ipvlan0 failed to register rx_handler [ 382.651494][T23951] kmem_cache_alloc_node+0x56/0x310 [ 382.668405][T23951] ? __alloc_skb+0xed/0x420 [ 382.672987][T23951] __alloc_skb+0xed/0x420 [ 382.677433][T23951] netlink_sendmsg+0x4c7/0x7c0 [ 382.682221][T23951] ? netlink_getsockopt+0x720/0x720 [ 382.687419][T23951] ____sys_sendmsg+0x360/0x4d0 [ 382.692404][T23951] ? import_iovec+0xb8/0xd0 [ 382.696911][T23951] __sys_sendmsg+0x1ed/0x270 [ 382.701600][T23951] ? __fsnotify_parent+0x32f/0x430 [ 382.706810][T23951] ? get_pid_task+0x90/0xc0 [ 382.711838][T23951] ? vfs_write+0x572/0x7e0 [ 382.716244][T23951] ? __fget_light+0x219/0x260 [ 382.721085][T23951] ? fput+0x2d/0x130 [ 382.725049][T23951] ? ksys_write+0x157/0x180 [ 382.729539][T23951] __x64_sys_sendmsg+0x42/0x50 [ 382.734392][T23951] do_syscall_64+0x39/0x80 [ 382.738908][T23951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 382.744820][T23951] RIP: 0033:0x465f69 [ 382.748720][T23951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 382.768902][T23951] RSP: 002b:00007f70a39c5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.777630][T23951] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 21:31:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 382.785605][T23951] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 382.793809][T23951] RBP: 00007f70a39c51d0 R08: 0000000000000000 R09: 0000000000000000 [ 382.802139][T23951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.810300][T23951] R13: 00007ffec577ac6f R14: 00007f70a39c5300 R15: 0000000000022000 21:31:59 executing program 2 (fault-call:1 fault-nth:3): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 382.838102][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.860624][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.886248][ T5] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 382.901908][T23963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 382.920398][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.933045][T23963] FAULT_INJECTION: forcing a failure. [ 382.933045][T23963] name failslab, interval 1, probability 0, space 0, times 0 [ 382.939132][T23968] FAULT_INJECTION: forcing a failure. [ 382.939132][T23968] name failslab, interval 1, probability 0, space 0, times 0 [ 382.965034][ T5] usb 2-1: config 0 descriptor?? [ 382.967077][T23968] CPU: 1 PID: 23968 Comm: syz-executor.2 Not tainted 5.12.0-rc3-syzkaller #0 [ 382.979014][T23968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.989249][T23968] Call Trace: [ 382.992809][T23968] dump_stack+0x137/0x19d [ 382.997412][T23968] should_fail+0x23c/0x250 [ 383.001841][T23968] __should_failslab+0x81/0x90 [ 383.006693][T23968] should_failslab+0x5/0x20 [ 383.011448][T23968] kmem_cache_alloc_node_trace+0x5b/0x310 [ 383.017271][T23968] ? __kmalloc_node_track_caller+0x30/0x40 [ 383.023080][T23968] __kmalloc_node_track_caller+0x30/0x40 [ 383.029574][T23968] ? netlink_sendmsg+0x4c7/0x7c0 [ 383.034631][T23968] __alloc_skb+0x187/0x420 [ 383.039145][T23968] netlink_sendmsg+0x4c7/0x7c0 [ 383.044359][T23968] ? netlink_getsockopt+0x720/0x720 [ 383.049825][T23968] ____sys_sendmsg+0x360/0x4d0 [ 383.054591][T23968] ? import_iovec+0xb8/0xd0 [ 383.059280][T23968] __sys_sendmsg+0x1ed/0x270 [ 383.063875][T23968] ? __fsnotify_parent+0x32f/0x430 [ 383.068993][T23968] ? get_pid_task+0x90/0xc0 [ 383.073517][T23968] ? vfs_write+0x572/0x7e0 [ 383.077995][T23968] ? __fget_light+0x219/0x260 [ 383.082671][T23968] ? fput+0x2d/0x130 [ 383.086578][T23968] ? ksys_write+0x157/0x180 [ 383.091100][T23968] __x64_sys_sendmsg+0x42/0x50 [ 383.095976][T23968] do_syscall_64+0x39/0x80 [ 383.100397][T23968] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 383.106588][T23968] RIP: 0033:0x465f69 [ 383.110589][T23968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 383.130932][T23968] RSP: 002b:00007f70a39c5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.139786][T23968] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 383.147844][T23968] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 383.155987][T23968] RBP: 00007f70a39c51d0 R08: 0000000000000000 R09: 0000000000000000 [ 383.164169][T23968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.172640][T23968] R13: 00007ffec577ac6f R14: 00007f70a39c5300 R15: 0000000000022000 [ 383.181913][T23963] CPU: 0 PID: 23963 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 383.183918][ T19] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 383.191157][T23963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.191171][T23963] Call Trace: [ 383.191179][T23963] dump_stack+0x137/0x19d [ 383.191205][T23963] should_fail+0x23c/0x250 [ 383.223447][T23963] __should_failslab+0x81/0x90 [ 383.228576][T23963] ? dev_addr_init+0xa4/0x1f0 [ 383.233272][T23963] should_failslab+0x5/0x20 [ 383.237962][T23963] kmem_cache_alloc_trace+0x49/0x340 [ 383.243677][T23963] ? pcpu_alloc+0x103d/0x1090 [ 383.248349][T23963] dev_addr_init+0xa4/0x1f0 [ 383.252849][T23963] alloc_netdev_mqs+0xf8/0x750 [ 383.257783][T23963] ? tsan.module_ctor+0x10/0x10 [ 383.262729][T23963] rtnl_create_link+0x1c1/0x510 [ 383.267587][T23963] rtnl_newlink+0xc84/0x1310 [ 383.272732][T23963] ? _raw_spin_unlock_irq+0x2c/0x40 [ 383.277959][T23963] ? _raw_spin_unlock_irq+0x22/0x40 [ 383.283197][T23963] ? finish_task_switch+0xc0/0x2a0 [ 383.288319][T23963] ? __schedule+0x3c1/0x580 [ 383.292830][T23963] ? _raw_spin_unlock+0x22/0x40 [ 383.298076][T23963] ? __mutex_lock+0x5ae/0x670 [ 383.302846][T23963] ? rtnl_setlink+0x280/0x280 [ 383.307544][T23963] rtnetlink_rcv_msg+0x728/0x7c0 [ 383.312576][T23963] ? ima_match_policy+0xb2a/0xb60 [ 383.317823][T23963] ? __down_write_common+0x45/0x870 [ 383.323122][T23963] ? ima_get_action+0x5c/0x70 [ 383.328042][T23963] ? up_write+0x25/0xc0 [ 383.332451][T23963] ? process_measurement+0xf40/0x10f0 [ 383.338099][T23963] ? __list_del_entry_valid+0x54/0xc0 [ 383.343925][T23963] ? __inc_numa_state+0x10/0x50 [ 383.348907][T23963] ? rhashtable_jhash2+0x13a/0x1a0 [ 383.354075][T23963] ? __rcu_read_unlock+0x5c/0x250 [ 383.359271][T23963] ? jhash+0x2b0/0x2b0 [ 383.363526][T23963] netlink_rcv_skb+0x13e/0x240 [ 383.368398][T23963] ? rtnetlink_bind+0x60/0x60 [ 383.373104][T23963] rtnetlink_rcv+0x18/0x20 [ 383.377661][T23963] netlink_unicast+0x5fc/0x6c0 [ 383.382884][T23963] netlink_sendmsg+0x6f8/0x7c0 [ 383.387662][T23963] ? netlink_getsockopt+0x720/0x720 [ 383.392958][T23963] ____sys_sendmsg+0x360/0x4d0 [ 383.397730][T23963] ? import_iovec+0xb8/0xd0 [ 383.403330][T23963] __sys_sendmsg+0x1ed/0x270 [ 383.408284][T23963] ? __fsnotify_parent+0x32f/0x430 [ 383.413562][T23963] ? get_pid_task+0x90/0xc0 [ 383.418760][T23963] ? vfs_write+0x572/0x7e0 [ 383.423670][T23963] ? __fget_light+0x219/0x260 [ 383.428497][T23963] ? fput+0x2d/0x130 [ 383.432592][T23963] ? ksys_write+0x157/0x180 [ 383.437388][T23963] __x64_sys_sendmsg+0x42/0x50 [ 383.442240][T23963] do_syscall_64+0x39/0x80 [ 383.446717][T23963] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 383.452950][T23963] RIP: 0033:0x465f69 [ 383.456941][T23963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 383.479713][T23963] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.488361][T23963] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 383.497325][T23963] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 383.505657][T23963] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 383.514232][T23963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.522289][T23963] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 383.535664][ T5] usb 2-1: USB disconnect, device number 92 [ 383.747966][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 383.788198][ T19] usb 5-1: no configurations [ 383.792983][ T19] usb 5-1: can't read configurations, error -22 [ 383.947918][ T19] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 384.197981][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 384.258196][ T19] usb 5-1: no configurations [ 384.263217][ T19] usb 5-1: can't read configurations, error -22 [ 384.270271][ T19] usb usb5-port1: attempt power cycle 21:32:01 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d3400"], 0x0) 21:32:01 executing program 3 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:01 executing program 2 (fault-call:1 fault-nth:4): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:01 executing program 0 (fault-call:1 fault-nth:8): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:01 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) [ 384.895878][T23995] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 384.907112][T23994] FAULT_INJECTION: forcing a failure. [ 384.907112][T23994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.915976][T23995] team0: Device ipvlan0 failed to register rx_handler [ 384.943666][T23996] FAULT_INJECTION: forcing a failure. [ 384.943666][T23996] name failslab, interval 1, probability 0, space 0, times 0 [ 384.944455][T23994] CPU: 1 PID: 23994 Comm: syz-executor.2 Not tainted 5.12.0-rc3-syzkaller #0 [ 384.965683][T23994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.975867][T23994] Call Trace: [ 384.979157][T23994] dump_stack+0x137/0x19d [ 384.983582][T23994] should_fail+0x23c/0x250 [ 384.988179][T23994] should_fail_usercopy+0x16/0x20 [ 384.993215][T23994] _copy_from_iter_full+0x11f/0x5f0 [ 384.998419][T23994] ? __virt_addr_valid+0x15a/0x1a0 [ 385.003551][T23994] ? __check_object_size+0x253/0x310 [ 385.008861][T23994] netlink_sendmsg+0x579/0x7c0 [ 385.013760][T23994] ? netlink_getsockopt+0x720/0x720 [ 385.019203][T23994] ____sys_sendmsg+0x360/0x4d0 [ 385.024013][T23994] ? import_iovec+0xb8/0xd0 [ 385.028606][T23994] __sys_sendmsg+0x1ed/0x270 [ 385.033796][T23994] ? __fsnotify_parent+0x32f/0x430 [ 385.039018][T23994] ? get_pid_task+0x90/0xc0 21:32:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 385.043546][T23994] ? vfs_write+0x572/0x7e0 [ 385.048558][T23994] ? __fget_light+0x219/0x260 [ 385.053571][T23994] ? fput+0x2d/0x130 [ 385.057470][T23994] ? ksys_write+0x157/0x180 [ 385.062257][T23994] __x64_sys_sendmsg+0x42/0x50 [ 385.067125][T23994] do_syscall_64+0x39/0x80 [ 385.068424][T23998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 385.071829][T23994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 385.071861][T23994] RIP: 0033:0x465f69 [ 385.071876][T23994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 385.071893][T23994] RSP: 002b:00007f70a39c5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.071910][T23994] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 385.097462][T23998] FAULT_INJECTION: forcing a failure. [ 385.097462][T23998] name failslab, interval 1, probability 0, space 0, times 0 [ 385.112065][T23994] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 385.112130][T23994] RBP: 00007f70a39c51d0 R08: 0000000000000000 R09: 0000000000000000 [ 385.112142][T23994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.112153][T23994] R13: 00007ffec577ac6f R14: 00007f70a39c5300 R15: 0000000000022000 [ 385.147926][ T19] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 385.161820][T23998] CPU: 0 PID: 23998 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 385.192098][T23998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.202778][T23998] Call Trace: [ 385.206157][T23998] dump_stack+0x137/0x19d [ 385.211565][T23998] should_fail+0x23c/0x250 [ 385.216112][T23998] __should_failslab+0x81/0x90 [ 385.220891][T23998] should_failslab+0x5/0x20 [ 385.225407][T23998] kmem_cache_alloc_node_trace+0x5b/0x310 [ 385.231140][T23998] ? __kmalloc_node+0x30/0x40 [ 385.235810][T23998] __kmalloc_node+0x30/0x40 [ 385.240403][T23998] kvmalloc_node+0x81/0xf0 [ 385.244987][T23998] alloc_netdev_mqs+0x42c/0x750 [ 385.250061][T23998] ? tsan.module_ctor+0x10/0x10 [ 385.255029][T23998] rtnl_create_link+0x1c1/0x510 [ 385.260664][T23998] rtnl_newlink+0xc84/0x1310 [ 385.265274][T23998] ? psi_group_change+0x1c2/0x250 [ 385.270469][T23998] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 385.276369][T23998] ? _raw_spin_unlock_irq+0x22/0x40 [ 385.281848][T23998] ? finish_task_switch+0xc0/0x2a0 [ 385.287191][T23998] ? __schedule+0x3c1/0x580 [ 385.292075][T23998] ? mutex_spin_on_owner+0x15c/0x180 [ 385.299897][T23998] ? _raw_spin_unlock+0x22/0x40 [ 385.305635][T23998] ? __mutex_lock+0x5ae/0x670 [ 385.311102][T23998] ? rtnl_setlink+0x280/0x280 [ 385.316866][T23998] rtnetlink_rcv_msg+0x728/0x7c0 [ 385.322805][T23998] ? ima_match_policy+0xb2a/0xb60 [ 385.329133][T23998] ? __down_write_common+0x45/0x870 [ 385.335297][T23998] ? ima_get_action+0x5c/0x70 [ 385.340470][T23998] ? up_write+0x25/0xc0 [ 385.344729][T23998] ? process_measurement+0xf40/0x10f0 [ 385.350882][T23998] ? __perf_event_task_sched_in+0x4c1/0x500 [ 385.356957][T23998] ? update_load_avg+0x1ad/0x2d0 [ 385.362297][T23998] ? rb_insert_color+0x2dc/0x310 [ 385.367325][T23998] ? rhashtable_jhash2+0x13a/0x1a0 [ 385.372710][T23998] ? __rcu_read_unlock+0x5c/0x250 [ 385.377832][T23998] ? jhash+0x2b0/0x2b0 [ 385.382078][T23998] netlink_rcv_skb+0x13e/0x240 [ 385.388371][T23998] ? rtnetlink_bind+0x60/0x60 [ 385.393654][T23998] rtnetlink_rcv+0x18/0x20 [ 385.398381][T23998] netlink_unicast+0x5fc/0x6c0 [ 385.403575][T23998] netlink_sendmsg+0x6f8/0x7c0 [ 385.408951][T23998] ? netlink_getsockopt+0x720/0x720 [ 385.414279][T23998] ____sys_sendmsg+0x360/0x4d0 [ 385.419047][T23998] ? import_iovec+0xb8/0xd0 [ 385.423553][T23998] __sys_sendmsg+0x1ed/0x270 [ 385.428146][T23998] ? __fsnotify_parent+0x32f/0x430 [ 385.433372][T23998] ? get_pid_task+0x90/0xc0 [ 385.437889][T23998] ? vfs_write+0x572/0x7e0 [ 385.442441][T23998] ? __fget_light+0x219/0x260 [ 385.447167][T23998] ? fput+0x2d/0x130 [ 385.451108][T23998] ? ksys_write+0x157/0x180 [ 385.455859][T23998] __x64_sys_sendmsg+0x42/0x50 [ 385.461177][T23998] do_syscall_64+0x39/0x80 [ 385.465691][T23998] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 385.471853][T23998] RIP: 0033:0x465f69 [ 385.475932][T23998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 385.499190][T23998] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.507802][T23998] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 385.516664][T23998] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 385.525098][T23998] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 385.533495][T23998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:32:02 executing program 2 (fault-call:1 fault-nth:5): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 385.541646][T23998] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 385.549954][T23996] CPU: 1 PID: 23996 Comm: syz-executor.3 Not tainted 5.12.0-rc3-syzkaller #0 [ 385.558040][ T3062] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 385.559054][T23996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.559066][T23996] Call Trace: [ 385.559075][T23996] dump_stack+0x137/0x19d [ 385.585789][T23996] should_fail+0x23c/0x250 [ 385.590480][T23996] __should_failslab+0x81/0x90 [ 385.595367][T23996] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 385.601493][T23996] should_failslab+0x5/0x20 [ 385.606096][T23996] __kmalloc+0x66/0x380 [ 385.610346][T23996] ? path_openat+0x191f/0x21b0 [ 385.615111][T23996] ? __rcu_read_unlock+0x5c/0x250 [ 385.620398][T23996] tomoyo_realpath_from_path+0x98/0x3b0 [ 385.626172][T23996] tomoyo_path_number_perm+0xc1/0x2d0 [ 385.631594][T23996] ? __rcu_read_unlock+0x5c/0x250 [ 385.636728][T23996] tomoyo_file_ioctl+0x1c/0x20 [ 385.641584][T23996] security_file_ioctl+0x45/0x90 [ 385.646534][T23996] __se_sys_ioctl+0x48/0x140 [ 385.651485][T23996] __x64_sys_ioctl+0x3f/0x50 [ 385.656254][T23996] do_syscall_64+0x39/0x80 [ 385.660730][T23996] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 385.666668][T23996] RIP: 0033:0x465f69 [ 385.670611][T23996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 385.690923][T23996] RSP: 002b:00007f793f81f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.699414][T23996] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 385.707376][T23996] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 385.715919][T23996] RBP: 00007f793f81f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 385.724078][T23996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.732614][T23996] R13: 00007fffbc4f898f R14: 00007f793f81f300 R15: 0000000000022000 21:32:02 executing program 0 (fault-call:1 fault-nth:9): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 385.746104][T23996] ERROR: Out of memory at tomoyo_realpath_from_path. 21:32:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 385.789399][T24016] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 385.794171][T24017] FAULT_INJECTION: forcing a failure. [ 385.794171][T24017] name failslab, interval 1, probability 0, space 0, times 0 [ 385.797945][ T3062] usb 2-1: Using ep0 maxpacket: 8 [ 385.811347][ T19] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 385.830252][T24017] CPU: 1 PID: 24017 Comm: syz-executor.2 Not tainted 5.12.0-rc3-syzkaller #0 [ 385.839462][T24017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.841011][T24016] team0: Device ipvlan0 failed to register rx_handler [ 385.849792][T24017] Call Trace: [ 385.849805][T24017] dump_stack+0x137/0x19d [ 385.849831][T24017] should_fail+0x23c/0x250 [ 385.868843][T24017] ? skb_clone+0x12c/0x1f0 [ 385.873692][T24017] __should_failslab+0x81/0x90 [ 385.878603][T24017] should_failslab+0x5/0x20 [ 385.883245][T24017] kmem_cache_alloc+0x46/0x320 [ 385.888141][T24017] ? rhashtable_jhash2+0x13a/0x1a0 [ 385.893447][T24017] skb_clone+0x12c/0x1f0 [ 385.897813][T24017] netlink_deliver_tap+0x2a0/0x470 [ 385.902935][T24017] ? __rcu_read_unlock+0x5c/0x250 [ 385.908067][T24017] netlink_unicast+0x5de/0x6c0 [ 385.913105][T24017] netlink_sendmsg+0x6f8/0x7c0 [ 385.918178][T24017] ? netlink_getsockopt+0x720/0x720 [ 385.923792][T24017] ____sys_sendmsg+0x360/0x4d0 [ 385.929074][T24017] ? import_iovec+0xb8/0xd0 [ 385.933791][T24017] __sys_sendmsg+0x1ed/0x270 [ 385.938594][T24017] ? __fsnotify_parent+0x32f/0x430 [ 385.943799][T24017] ? get_pid_task+0x90/0xc0 [ 385.948465][T24017] ? vfs_write+0x572/0x7e0 [ 385.952989][T24017] ? __fget_light+0x219/0x260 [ 385.957659][T24017] ? fput+0x2d/0x130 [ 385.957816][ T3062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.961543][T24017] ? ksys_write+0x157/0x180 [ 385.973680][ T3062] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 385.976257][T24017] __x64_sys_sendmsg+0x42/0x50 [ 385.990135][T24017] do_syscall_64+0x39/0x80 [ 385.990667][ T3062] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 385.994785][T24017] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 386.004603][ T3062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.009681][T24017] RIP: 0033:0x465f69 [ 386.009697][T24017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 386.009713][T24017] RSP: 002b:00007f70a39c5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.009731][T24017] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 386.009742][T24017] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 386.009754][T24017] RBP: 00007f70a39c51d0 R08: 0000000000000000 R09: 0000000000000000 [ 386.009765][T24017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.023554][ T3062] usb 2-1: config 0 descriptor?? [ 386.042230][T24017] R13: 00007ffec577ac6f R14: 00007f70a39c5300 R15: 0000000000022000 [ 386.107890][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 386.140929][T24019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.155492][T24019] FAULT_INJECTION: forcing a failure. [ 386.155492][T24019] name failslab, interval 1, probability 0, space 0, times 0 [ 386.169067][ T19] usb 5-1: no configurations [ 386.176425][ T19] usb 5-1: can't read configurations, error -22 [ 386.194204][ T19] usb usb5-port1: unable to enumerate USB device [ 386.208228][T24019] CPU: 0 PID: 24019 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 386.217209][T24019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.227521][T24019] Call Trace: [ 386.230925][T24019] dump_stack+0x137/0x19d [ 386.235314][T24019] should_fail+0x23c/0x250 [ 386.240055][T24019] __should_failslab+0x81/0x90 [ 386.245084][T24019] should_failslab+0x5/0x20 [ 386.249890][T24019] kmem_cache_alloc_node_trace+0x5b/0x310 [ 386.255614][T24019] ? __kmalloc_node+0x30/0x40 [ 386.260322][T24019] __kmalloc_node+0x30/0x40 [ 386.265026][T24019] kvmalloc_node+0x81/0xf0 [ 386.270318][T24019] alloc_netdev_mqs+0x575/0x750 [ 386.275520][T24019] ? tsan.module_ctor+0x10/0x10 [ 386.280378][T24019] rtnl_create_link+0x1c1/0x510 [ 386.285325][T24019] rtnl_newlink+0xc84/0x1310 21:32:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x2, 0x0) [ 386.291011][T24019] ? psi_group_change+0x1c2/0x250 [ 386.296450][T24019] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 386.303132][T24019] ? _raw_spin_unlock_irq+0x22/0x40 [ 386.308574][T24019] ? finish_task_switch+0xc0/0x2a0 [ 386.314150][T24019] ? __schedule+0x3c1/0x580 [ 386.318771][T24019] ? _raw_spin_unlock+0x22/0x40 [ 386.324488][T24019] ? __mutex_lock+0x5ae/0x670 [ 386.329519][T24019] ? rtnl_setlink+0x280/0x280 [ 386.334390][T24019] rtnetlink_rcv_msg+0x728/0x7c0 [ 386.339419][T24019] ? ima_match_policy+0xb2a/0xb60 [ 386.344710][T24019] ? __down_write_common+0x45/0x870 [ 386.349909][T24019] ? ima_get_action+0x5c/0x70 [ 386.355616][T24019] ? up_write+0x25/0xc0 [ 386.360441][T24019] ? process_measurement+0xf40/0x10f0 [ 386.366776][T24019] ? __list_del_entry_valid+0x54/0xc0 [ 386.372678][T24019] ? __inc_numa_state+0x10/0x50 [ 386.377801][T24019] ? rhashtable_jhash2+0x13a/0x1a0 [ 386.383003][T24019] ? __rcu_read_unlock+0x5c/0x250 [ 386.388311][T24019] ? jhash+0x2b0/0x2b0 [ 386.392402][T24019] netlink_rcv_skb+0x13e/0x240 [ 386.398776][T24019] ? rtnetlink_bind+0x60/0x60 [ 386.404952][T24019] rtnetlink_rcv+0x18/0x20 [ 386.409839][T24019] netlink_unicast+0x5fc/0x6c0 [ 386.415292][T24019] netlink_sendmsg+0x6f8/0x7c0 [ 386.420257][T24019] ? netlink_getsockopt+0x720/0x720 [ 386.425738][T24019] ____sys_sendmsg+0x360/0x4d0 [ 386.430499][T24019] ? import_iovec+0xb8/0xd0 [ 386.435314][T24019] __sys_sendmsg+0x1ed/0x270 [ 386.439921][T24019] ? __fsnotify_parent+0x32f/0x430 [ 386.445549][T24019] ? get_pid_task+0x90/0xc0 [ 386.450414][T24019] ? vfs_write+0x572/0x7e0 [ 386.455265][T24019] ? __fget_light+0x219/0x260 [ 386.460363][T24019] ? fput+0x2d/0x130 [ 386.464430][T24019] ? ksys_write+0x157/0x180 [ 386.468966][T24019] __x64_sys_sendmsg+0x42/0x50 [ 386.474009][T24019] do_syscall_64+0x39/0x80 [ 386.478543][T24019] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 386.484567][T24019] RIP: 0033:0x465f69 [ 386.488614][T24019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 386.509691][T24019] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.518215][T24019] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 386.526476][T24019] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 386.534670][T24019] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 21:32:03 executing program 0 (fault-call:1 fault-nth:10): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 386.543023][T24019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.551100][T24019] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 386.570130][T24017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.582678][ T9706] usb 2-1: USB disconnect, device number 93 [ 386.612177][T24016] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 386.634820][T24016] team0: Device ipvlan0 failed to register rx_handler [ 386.691500][T24054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.706884][T24054] FAULT_INJECTION: forcing a failure. [ 386.706884][T24054] name failslab, interval 1, probability 0, space 0, times 0 [ 386.730234][T24054] CPU: 0 PID: 24054 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 386.739045][T24054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.749416][T24054] Call Trace: [ 386.752774][T24054] dump_stack+0x137/0x19d [ 386.757115][T24054] should_fail+0x23c/0x250 [ 386.761801][T24054] __should_failslab+0x81/0x90 [ 386.767350][T24054] should_failslab+0x5/0x20 [ 386.771934][T24054] kmem_cache_alloc_node_trace+0x5b/0x310 [ 386.777880][T24054] ? __kmalloc_node+0x30/0x40 [ 386.782664][T24054] __kmalloc_node+0x30/0x40 [ 386.787634][T24054] kvmalloc_node+0x81/0xf0 [ 386.793247][T24054] alloc_netdev_mqs+0x86/0x750 [ 386.798095][T24054] ? tsan.module_ctor+0x10/0x10 [ 386.803064][T24054] ? snprintf+0x6f/0x90 [ 386.808077][T24054] rtnl_create_link+0x1c1/0x510 [ 386.813167][T24054] veth_newlink+0x197/0x6e0 [ 386.817946][T24054] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 386.824637][T24054] ? __kmalloc_node+0x30/0x40 [ 386.829608][T24054] ? strcpy+0x3b/0x60 [ 386.833721][T24054] ? alloc_netdev_mqs+0x72d/0x750 [ 386.838836][T24054] ? veth_validate+0x110/0x110 [ 386.843664][T24054] rtnl_newlink+0xdba/0x1310 [ 386.848314][T24054] ? psi_group_change+0x1c2/0x250 [ 386.853372][T24054] ? _raw_spin_unlock_irq+0x22/0x40 [ 386.858573][T24054] ? finish_task_switch+0xc0/0x2a0 [ 386.863812][T24054] ? __schedule+0x3c1/0x580 [ 386.868518][T24054] ? _raw_spin_unlock+0x22/0x40 [ 386.873358][T24054] ? __mutex_lock+0x5ae/0x670 [ 386.878384][T24054] ? rtnl_setlink+0x280/0x280 [ 386.883238][T24054] rtnetlink_rcv_msg+0x728/0x7c0 [ 386.888373][T24054] ? ima_match_policy+0xb2a/0xb60 [ 386.893387][T24054] ? __down_write_common+0x45/0x870 [ 386.898669][T24054] ? ima_get_action+0x5c/0x70 [ 386.903680][T24054] ? up_write+0x25/0xc0 [ 386.907824][T24054] ? process_measurement+0xf40/0x10f0 [ 386.913263][T24054] ? __list_del_entry_valid+0x54/0xc0 [ 386.918719][T24054] ? __inc_numa_state+0x10/0x50 [ 386.923596][T24054] ? rhashtable_jhash2+0x13a/0x1a0 [ 386.929081][T24054] ? __rcu_read_unlock+0x5c/0x250 [ 386.934323][T24054] ? jhash+0x2b0/0x2b0 [ 386.938406][T24054] netlink_rcv_skb+0x13e/0x240 [ 386.943348][T24054] ? rtnetlink_bind+0x60/0x60 [ 386.948203][T24054] rtnetlink_rcv+0x18/0x20 [ 386.952639][T24054] netlink_unicast+0x5fc/0x6c0 [ 386.957559][T24054] netlink_sendmsg+0x6f8/0x7c0 [ 386.962318][T24054] ? netlink_getsockopt+0x720/0x720 [ 386.967658][T24054] ____sys_sendmsg+0x360/0x4d0 [ 386.972679][T24054] ? import_iovec+0xb8/0xd0 [ 386.977610][T24054] __sys_sendmsg+0x1ed/0x270 [ 386.982702][T24054] ? __fsnotify_parent+0x32f/0x430 [ 386.988633][T24054] ? get_pid_task+0x90/0xc0 [ 386.993324][T24054] ? vfs_write+0x572/0x7e0 [ 386.997856][T24054] ? __fget_light+0x219/0x260 [ 387.002659][T24054] ? fput+0x2d/0x130 [ 387.006811][T24054] ? ksys_write+0x157/0x180 [ 387.011702][T24054] __x64_sys_sendmsg+0x42/0x50 [ 387.016696][T24054] do_syscall_64+0x39/0x80 [ 387.021372][T24054] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 387.027658][T24054] RIP: 0033:0x465f69 [ 387.031681][T24054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 387.051555][T24054] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.060727][T24054] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 387.068784][T24054] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 387.077052][T24054] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 387.085064][T24054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.093028][T24054] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 21:32:04 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b0001"], 0x0) 21:32:04 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a00904"], 0x0) 21:32:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x10, 0x0) 21:32:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:04 executing program 0 (fault-call:1 fault-nth:11): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 387.940847][T24069] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 387.952363][T24069] team0: Device ipvlan0 failed to register rx_handler 21:32:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4c00, 0x0) 21:32:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 388.018482][T24071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 388.037637][T24071] FAULT_INJECTION: forcing a failure. [ 388.037637][T24071] name failslab, interval 1, probability 0, space 0, times 0 [ 388.090170][T24071] CPU: 0 PID: 24071 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 388.099299][T24071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.110551][T24071] Call Trace: [ 388.113958][T24071] dump_stack+0x137/0x19d [ 388.118318][T24071] should_fail+0x23c/0x250 [ 388.123013][T24071] __should_failslab+0x81/0x90 [ 388.127850][T24071] ? dev_addr_init+0xa4/0x1f0 [ 388.132893][T24071] should_failslab+0x5/0x20 [ 388.137642][T24071] kmem_cache_alloc_trace+0x49/0x340 [ 388.143020][T24071] ? pcpu_alloc+0x103d/0x1090 [ 388.148032][T24071] dev_addr_init+0xa4/0x1f0 [ 388.153748][T24071] alloc_netdev_mqs+0xf8/0x750 [ 388.158772][T24071] ? tsan.module_ctor+0x10/0x10 [ 388.164883][T24071] rtnl_create_link+0x1c1/0x510 [ 388.169935][T24071] veth_newlink+0x197/0x6e0 [ 388.174682][T24071] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 388.183167][T24071] ? __kmalloc_node+0x30/0x40 [ 388.188421][T24071] ? strcpy+0x3b/0x60 [ 388.192430][T24071] ? alloc_netdev_mqs+0x72d/0x750 [ 388.197708][T24071] ? veth_validate+0x110/0x110 [ 388.202577][T24071] rtnl_newlink+0xdba/0x1310 [ 388.207478][T24071] ? psi_group_change+0x1c2/0x250 [ 388.212717][T24071] ? _raw_spin_unlock_irq+0x22/0x40 [ 388.217963][T24071] ? finish_task_switch+0xc0/0x2a0 [ 388.225691][T24071] ? __schedule+0x3c1/0x580 [ 388.230461][T24071] ? _raw_spin_unlock+0x22/0x40 [ 388.235712][T24071] ? __mutex_lock+0x5ae/0x670 [ 388.240805][T24071] ? rtnl_setlink+0x280/0x280 [ 388.245563][T24071] rtnetlink_rcv_msg+0x728/0x7c0 [ 388.250736][T24071] ? ima_match_policy+0xb2a/0xb60 [ 388.256108][T24071] ? __down_write_common+0x45/0x870 [ 388.261508][T24071] ? ima_get_action+0x5c/0x70 [ 388.267062][T24071] ? up_write+0x25/0xc0 [ 388.271516][T24071] ? process_measurement+0xf40/0x10f0 [ 388.276977][T24071] ? __list_del_entry_valid+0x54/0xc0 [ 388.282796][T24071] ? __inc_numa_state+0x10/0x50 [ 388.288025][T24071] ? rhashtable_jhash2+0x13a/0x1a0 [ 388.293616][T24071] ? __rcu_read_unlock+0x5c/0x250 [ 388.298758][T24071] ? jhash+0x2b0/0x2b0 [ 388.302951][T24071] netlink_rcv_skb+0x13e/0x240 [ 388.307805][T24071] ? rtnetlink_bind+0x60/0x60 [ 388.312672][T24071] rtnetlink_rcv+0x18/0x20 [ 388.318160][T24071] netlink_unicast+0x5fc/0x6c0 [ 388.323294][T24071] netlink_sendmsg+0x6f8/0x7c0 [ 388.328115][T24071] ? netlink_getsockopt+0x720/0x720 [ 388.333488][T24071] ____sys_sendmsg+0x360/0x4d0 [ 388.338284][T24071] ? import_iovec+0xb8/0xd0 [ 388.342965][T24071] __sys_sendmsg+0x1ed/0x270 [ 388.347619][T24071] ? __fsnotify_parent+0x32f/0x430 [ 388.352742][T24071] ? get_pid_task+0x90/0xc0 [ 388.357239][T24071] ? vfs_write+0x572/0x7e0 [ 388.361733][T24071] ? __fget_light+0x219/0x260 [ 388.366453][T24071] ? fput+0x2d/0x130 [ 388.370335][T24071] ? ksys_write+0x157/0x180 [ 388.376965][T24071] __x64_sys_sendmsg+0x42/0x50 [ 388.382168][T24071] do_syscall_64+0x39/0x80 [ 388.386880][T24071] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 388.393131][T24071] RIP: 0033:0x465f69 [ 388.397023][T24071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 388.417180][T24071] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.425597][T24071] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 388.433567][T24071] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 388.441624][T24071] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.449682][T24071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.457746][T24071] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 21:32:05 executing program 0 (fault-call:1 fault-nth:12): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4c01, 0x0) [ 388.499684][T24074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.537728][T24099] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 388.551876][T24099] team0: Device ipvlan0 failed to register rx_handler [ 388.560133][ T19] usb 2-1: new high-speed USB device number 94 using dummy_hcd 21:32:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 388.623376][T24110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 388.643369][T24110] FAULT_INJECTION: forcing a failure. [ 388.643369][T24110] name failslab, interval 1, probability 0, space 0, times 0 [ 388.690825][T24110] CPU: 0 PID: 24110 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 388.699678][T24110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.709963][T24110] Call Trace: [ 388.713551][T24110] dump_stack+0x137/0x19d [ 388.718320][T24110] should_fail+0x23c/0x250 [ 388.722917][T24110] __should_failslab+0x81/0x90 [ 388.727780][T24110] should_failslab+0x5/0x20 [ 388.732372][T24110] kmem_cache_alloc_node_trace+0x5b/0x310 [ 388.738481][T24110] ? __kmalloc_node+0x30/0x40 [ 388.743348][T24110] __kmalloc_node+0x30/0x40 [ 388.748095][T24110] kvmalloc_node+0x81/0xf0 [ 388.752850][T24110] alloc_netdev_mqs+0x42c/0x750 [ 388.757820][T24110] ? tsan.module_ctor+0x10/0x10 [ 388.762768][T24110] rtnl_create_link+0x1c1/0x510 [ 388.767906][T24110] veth_newlink+0x197/0x6e0 [ 388.773075][T24110] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 388.779654][T24110] ? __kmalloc_node+0x30/0x40 [ 388.784953][T24110] ? strcpy+0x3b/0x60 [ 388.789067][T24110] ? alloc_netdev_mqs+0x72d/0x750 [ 388.794551][T24110] ? veth_validate+0x110/0x110 [ 388.800289][T24110] rtnl_newlink+0xdba/0x1310 [ 388.805054][T24110] ? psi_group_change+0x1c2/0x250 [ 388.810420][T24110] ? _raw_spin_unlock_irq+0x22/0x40 [ 388.817619][T24110] ? finish_task_switch+0xc0/0x2a0 [ 388.822847][T24110] ? __schedule+0x3c1/0x580 [ 388.828235][T24110] ? _raw_spin_unlock+0x22/0x40 [ 388.833560][T24110] ? __mutex_lock+0x5ae/0x670 [ 388.838846][T24110] ? rtnl_setlink+0x280/0x280 [ 388.843826][T24110] rtnetlink_rcv_msg+0x728/0x7c0 [ 388.848793][T24110] ? ima_match_policy+0xb2a/0xb60 [ 388.854121][T24110] ? __down_write_common+0x45/0x870 [ 388.859356][T24110] ? ima_get_action+0x5c/0x70 [ 388.864219][T24110] ? up_write+0x25/0xc0 [ 388.868465][T24110] ? process_measurement+0xf40/0x10f0 [ 388.874127][T24110] ? __list_del_entry_valid+0x54/0xc0 [ 388.880348][T24110] ? __inc_numa_state+0x10/0x50 [ 388.885410][T24110] ? rhashtable_jhash2+0x13a/0x1a0 [ 388.890863][T24110] ? __rcu_read_unlock+0x5c/0x250 [ 388.896196][T24110] ? jhash+0x2b0/0x2b0 [ 388.900796][T24110] netlink_rcv_skb+0x13e/0x240 [ 388.906052][T24110] ? rtnetlink_bind+0x60/0x60 [ 388.910934][T24110] rtnetlink_rcv+0x18/0x20 [ 388.915493][T24110] netlink_unicast+0x5fc/0x6c0 [ 388.920514][T24110] netlink_sendmsg+0x6f8/0x7c0 [ 388.926499][T24110] ? netlink_getsockopt+0x720/0x720 [ 388.932364][T24110] ____sys_sendmsg+0x360/0x4d0 [ 388.937777][T24110] ? import_iovec+0xb8/0xd0 [ 388.942725][T24110] __sys_sendmsg+0x1ed/0x270 [ 388.948470][T24110] ? __fsnotify_parent+0x32f/0x430 [ 388.954139][T24110] ? get_pid_task+0x90/0xc0 [ 388.958638][T24110] ? vfs_write+0x572/0x7e0 [ 388.963252][T24110] ? __fget_light+0x219/0x260 [ 388.968218][T24110] ? fput+0x2d/0x130 [ 388.972466][T24110] ? ksys_write+0x157/0x180 [ 388.977371][T24110] __x64_sys_sendmsg+0x42/0x50 [ 388.982391][T24110] do_syscall_64+0x39/0x80 [ 388.986969][T24110] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 388.993310][T24110] RIP: 0033:0x465f69 [ 388.998109][T24110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 389.019659][T24110] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.028517][T24110] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 21:32:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x5401, 0x0) [ 389.036989][T24110] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 389.045806][T24110] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 389.054661][T24110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.063088][T24110] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 389.091661][T24124] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 21:32:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 389.137060][T24124] team0: Device ipvlan0 failed to register rx_handler [ 389.147695][ T3062] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 389.210658][T24137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 389.237656][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 389.377880][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.394031][ T19] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 389.397668][ T3062] usb 5-1: Using ep0 maxpacket: 8 [ 389.403834][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.427574][ T19] usb 2-1: config 0 descriptor?? [ 389.469935][ T19] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 389.527719][ T3062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.538481][ T3062] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.549650][ T3062] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 389.561100][ T3062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.571379][ T3062] usb 5-1: config 0 descriptor?? [ 389.671167][ T19] usb 2-1: USB disconnect, device number 94 [ 389.681765][T10511] usb 2-1: Failed to submit usb control message: -71 [ 389.689378][T10511] usb 2-1: unable to send the bmi data to the device: -71 [ 389.697323][T10511] usb 2-1: unable to get target info from device [ 389.709005][T10511] usb 2-1: could not get target info (-71) [ 389.715318][T10511] usb 2-1: could not probe fw (-71) [ 389.809201][ T5] usb 5-1: USB disconnect, device number 37 21:32:07 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b0001"], 0x0) 21:32:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x541b, 0x0) 21:32:07 executing program 0 (fault-call:1 fault-nth:13): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:07 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) [ 390.351705][T24182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:32:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x541c, 0x0) [ 390.394093][T24184] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 390.416322][T24184] team0: Device ipvlan0 failed to register rx_handler 21:32:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x5421, 0x0) [ 390.512978][T24183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.537976][T24183] FAULT_INJECTION: forcing a failure. [ 390.537976][T24183] name failslab, interval 1, probability 0, space 0, times 0 [ 390.572500][T24183] CPU: 0 PID: 24183 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 390.581295][T24183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.591553][T24183] Call Trace: [ 390.595473][T24183] dump_stack+0x137/0x19d [ 390.599820][T24183] should_fail+0x23c/0x250 [ 390.604605][T24183] __should_failslab+0x81/0x90 [ 390.609553][T24183] should_failslab+0x5/0x20 [ 390.614517][T24183] kmem_cache_alloc_node_trace+0x5b/0x310 [ 390.620340][T24183] ? __kmalloc_node+0x30/0x40 [ 390.625203][T24183] __kmalloc_node+0x30/0x40 [ 390.629733][T24183] kvmalloc_node+0x81/0xf0 [ 390.634376][T24183] alloc_netdev_mqs+0x575/0x750 [ 390.639476][T24183] ? tsan.module_ctor+0x10/0x10 [ 390.644629][T24183] rtnl_create_link+0x1c1/0x510 [ 390.649615][T24183] veth_newlink+0x197/0x6e0 [ 390.654425][T24183] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 390.660505][T24183] ? __kmalloc_node+0x30/0x40 [ 390.665242][T24183] ? strcpy+0x3b/0x60 21:32:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 390.669238][T24183] ? alloc_netdev_mqs+0x72d/0x750 [ 390.674371][T24183] ? veth_validate+0x110/0x110 [ 390.679317][T24183] rtnl_newlink+0xdba/0x1310 [ 390.684050][T24183] ? psi_group_change+0x1c2/0x250 [ 390.689213][T24183] ? _raw_spin_unlock_irq+0x22/0x40 [ 390.694821][T24183] ? finish_task_switch+0xc0/0x2a0 [ 390.700076][T24183] ? __schedule+0x3c1/0x580 [ 390.704914][T24183] ? _raw_spin_unlock+0x22/0x40 [ 390.710240][T24183] ? __mutex_lock+0x5ae/0x670 [ 390.714965][T24183] ? rtnl_setlink+0x280/0x280 [ 390.719748][T24183] rtnetlink_rcv_msg+0x728/0x7c0 [ 390.724835][T24183] ? ima_match_policy+0xb2a/0xb60 [ 390.729941][T24183] ? __down_write_common+0x45/0x870 [ 390.735243][T24183] ? ima_get_action+0x5c/0x70 [ 390.740152][T24183] ? up_write+0x25/0xc0 [ 390.744414][T24183] ? process_measurement+0xf40/0x10f0 [ 390.749937][T24183] ? __list_del_entry_valid+0x54/0xc0 [ 390.755475][T24183] ? __inc_numa_state+0x10/0x50 [ 390.760319][T24183] ? rhashtable_jhash2+0x13a/0x1a0 [ 390.765839][T24183] ? __rcu_read_unlock+0x5c/0x250 [ 390.771504][T24183] ? jhash+0x2b0/0x2b0 [ 390.775585][T24183] netlink_rcv_skb+0x13e/0x240 [ 390.780768][T24183] ? rtnetlink_bind+0x60/0x60 [ 390.785540][T24183] rtnetlink_rcv+0x18/0x20 [ 390.789967][T24183] netlink_unicast+0x5fc/0x6c0 [ 390.794952][T24183] netlink_sendmsg+0x6f8/0x7c0 [ 390.800076][T24183] ? netlink_getsockopt+0x720/0x720 [ 390.805316][T24183] ____sys_sendmsg+0x360/0x4d0 [ 390.810170][T24183] ? import_iovec+0xb8/0xd0 [ 390.814690][T24183] __sys_sendmsg+0x1ed/0x270 [ 390.819288][T24183] ? __fsnotify_parent+0x32f/0x430 [ 390.824648][T24183] ? get_pid_task+0x90/0xc0 [ 390.829165][T24183] ? vfs_write+0x572/0x7e0 [ 390.833958][T24183] ? __fget_light+0x219/0x260 [ 390.838636][T24183] ? fput+0x2d/0x130 [ 390.843003][T24183] ? ksys_write+0x157/0x180 [ 390.847533][T24183] __x64_sys_sendmsg+0x42/0x50 [ 390.852515][T24183] do_syscall_64+0x39/0x80 [ 390.857149][T24183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 390.863169][T24183] RIP: 0033:0x465f69 [ 390.867275][T24183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 390.888001][T24183] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.896865][T24183] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 390.905402][T24183] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 390.914672][T24183] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 390.922833][T24183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.930888][T24183] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 21:32:07 executing program 0 (fault-call:1 fault-nth:14): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 390.967217][T24220] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 390.976911][T24220] team0: Device ipvlan0 failed to register rx_handler [ 391.017628][ T19] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 391.025615][ T8990] usb 5-1: new high-speed USB device number 38 using dummy_hcd 21:32:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x5423, 0x0) [ 391.064298][T24226] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 391.119470][T24230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.142452][T24230] FAULT_INJECTION: forcing a failure. [ 391.142452][T24230] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 391.157683][T24230] CPU: 1 PID: 24230 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 391.166438][T24230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.176763][T24230] Call Trace: [ 391.180052][T24230] dump_stack+0x137/0x19d [ 391.184389][T24230] should_fail+0x23c/0x250 [ 391.188805][T24230] __alloc_pages_nodemask+0xea/0x350 [ 391.194170][T24230] kmem_getpages+0x1a/0xd0 [ 391.198988][T24230] cache_grow_begin+0x4c/0x1a0 [ 391.203985][T24230] cache_alloc_refill+0x316/0x3c0 [ 391.209241][T24230] ? should_fail+0xd6/0x250 [ 391.213734][T24230] kmem_cache_alloc_node_trace+0x235/0x310 [ 391.219651][T24230] ? __kmalloc_node+0x30/0x40 [ 391.224362][T24230] __kmalloc_node+0x30/0x40 [ 391.229035][T24230] kvmalloc_node+0x81/0xf0 [ 391.233543][T24230] alloc_netdev_mqs+0x575/0x750 [ 391.239161][T24230] ? tsan.module_ctor+0x10/0x10 [ 391.244380][T24230] rtnl_create_link+0x1c1/0x510 [ 391.249779][T24230] veth_newlink+0x197/0x6e0 [ 391.254462][T24230] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 391.260579][T24230] ? __kmalloc_node+0x30/0x40 [ 391.265505][T24230] ? strcpy+0x3b/0x60 [ 391.270209][T24230] ? alloc_netdev_mqs+0x72d/0x750 [ 391.275431][T24230] ? veth_validate+0x110/0x110 [ 391.280212][T24230] rtnl_newlink+0xdba/0x1310 [ 391.284924][T24230] ? psi_group_change+0x1c2/0x250 [ 391.290522][T24230] ? _raw_spin_unlock_irq+0x22/0x40 [ 391.295796][T24230] ? finish_task_switch+0xc0/0x2a0 [ 391.301088][T24230] ? __schedule+0x3c1/0x580 [ 391.305695][T24230] ? _raw_spin_unlock+0x22/0x40 [ 391.310766][T24230] ? __mutex_lock+0x5ae/0x670 [ 391.315457][T24230] ? rtnl_setlink+0x280/0x280 [ 391.320427][T24230] rtnetlink_rcv_msg+0x728/0x7c0 [ 391.325504][T24230] ? ima_match_policy+0xb2a/0xb60 [ 391.330909][T24230] ? __down_write_common+0x45/0x870 [ 391.336288][T24230] ? ima_get_action+0x5c/0x70 [ 391.341128][T24230] ? up_write+0x25/0xc0 [ 391.345437][T24230] ? process_measurement+0xf40/0x10f0 [ 391.350986][T24230] ? __list_del_entry_valid+0x54/0xc0 [ 391.356920][T24230] ? __inc_numa_state+0x10/0x50 [ 391.362223][T24230] ? rhashtable_jhash2+0x13a/0x1a0 [ 391.368381][T24230] ? __rcu_read_unlock+0x5c/0x250 [ 391.374513][T24230] ? jhash+0x2b0/0x2b0 [ 391.379889][T24230] netlink_rcv_skb+0x13e/0x240 [ 391.384750][T24230] ? rtnetlink_bind+0x60/0x60 [ 391.389704][T24230] rtnetlink_rcv+0x18/0x20 [ 391.394560][T24230] netlink_unicast+0x5fc/0x6c0 [ 391.400504][T24230] netlink_sendmsg+0x6f8/0x7c0 [ 391.405271][T24230] ? netlink_getsockopt+0x720/0x720 [ 391.412274][T24230] ____sys_sendmsg+0x360/0x4d0 [ 391.418245][T24230] ? import_iovec+0xb8/0xd0 [ 391.423200][T24230] __sys_sendmsg+0x1ed/0x270 [ 391.427894][T24230] ? __fsnotify_parent+0x32f/0x430 [ 391.433018][T24230] ? get_pid_task+0x90/0xc0 [ 391.437618][T24230] ? vfs_write+0x572/0x7e0 [ 391.442213][T24230] ? __fget_light+0x219/0x260 [ 391.447076][T24230] ? fput+0x2d/0x130 [ 391.451163][T24230] ? ksys_write+0x157/0x180 [ 391.455661][T24230] __x64_sys_sendmsg+0x42/0x50 [ 391.460479][T24230] do_syscall_64+0x39/0x80 [ 391.464901][T24230] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 391.470789][T24230] RIP: 0033:0x465f69 [ 391.474885][T24230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 391.494614][T24230] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.503122][T24230] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 391.511269][T24230] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 391.519514][T24230] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 391.527575][T24230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.535792][T24230] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 391.707618][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 391.712834][ T8990] usb 5-1: Using ep0 maxpacket: 8 [ 391.847637][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.858457][ T8990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.868859][ T8990] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.879182][ T19] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.890503][ T8990] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 391.902104][ T19] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 391.911717][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.920754][ T8990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.932126][ T19] usb 2-1: config 0 descriptor?? [ 391.941244][ T8990] usb 5-1: config 0 descriptor?? [ 392.171215][ T9706] usb 2-1: USB disconnect, device number 95 [ 392.189203][ T7] usb 5-1: USB disconnect, device number 38 21:32:09 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b0001"], 0x0) 21:32:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x5450, 0x0) 21:32:09 executing program 0 (fault-call:1 fault-nth:15): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:09 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:32:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x5451, 0x0) [ 392.754570][T24283] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 392.782337][T24283] team0: Device ipvlan0 failed to register rx_handler 21:32:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x5452, 0x0) 21:32:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 392.869786][T24286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.916686][T24286] FAULT_INJECTION: forcing a failure. [ 392.916686][T24286] name failslab, interval 1, probability 0, space 0, times 0 [ 392.950944][T24286] CPU: 0 PID: 24286 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 392.960022][T24286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.970121][T24286] Call Trace: [ 392.973487][T24286] dump_stack+0x137/0x19d [ 392.977897][T24286] should_fail+0x23c/0x250 [ 392.982410][T24286] __should_failslab+0x81/0x90 [ 392.987196][T24286] ? register_netdevice+0x380/0x1080 [ 392.992489][T24286] should_failslab+0x5/0x20 [ 392.997203][T24286] kmem_cache_alloc_trace+0x49/0x340 [ 393.003124][T24286] register_netdevice+0x380/0x1080 [ 393.008514][T24286] ? veth_newlink+0x229/0x6e0 [ 393.015337][T24286] veth_newlink+0x475/0x6e0 [ 393.020088][T24286] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 393.026904][T24286] ? __kmalloc_node+0x30/0x40 [ 393.031773][T24286] ? strcpy+0x3b/0x60 [ 393.036376][T24286] ? alloc_netdev_mqs+0x72d/0x750 [ 393.042066][T24286] ? veth_validate+0x110/0x110 [ 393.046840][T24286] rtnl_newlink+0xdba/0x1310 [ 393.053144][T24286] ? psi_group_change+0x1c2/0x250 [ 393.061560][T24286] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 393.067506][T24286] ? _raw_spin_unlock_irq+0x22/0x40 [ 393.073097][T24286] ? finish_task_switch+0xc0/0x2a0 [ 393.078760][T24286] ? __schedule+0x3c1/0x580 [ 393.084428][T24286] ? _raw_spin_unlock+0x22/0x40 [ 393.089550][T24286] ? __mutex_lock+0x5ae/0x670 [ 393.094347][T24286] ? rtnl_setlink+0x280/0x280 [ 393.099472][T24286] rtnetlink_rcv_msg+0x728/0x7c0 [ 393.104923][T24286] ? ima_match_policy+0xb2a/0xb60 [ 393.111960][T24286] ? __down_write_common+0x45/0x870 [ 393.118342][T24286] ? ima_get_action+0x5c/0x70 [ 393.123667][T24286] ? up_write+0x25/0xc0 [ 393.128187][T24286] ? process_measurement+0xf40/0x10f0 [ 393.133924][T24286] ? __list_del_entry_valid+0x54/0xc0 [ 393.140382][T24286] ? __inc_numa_state+0x10/0x50 [ 393.147605][T24286] ? rhashtable_jhash2+0x13a/0x1a0 [ 393.153068][T24286] ? __rcu_read_unlock+0x5c/0x250 [ 393.159107][T24286] ? jhash+0x2b0/0x2b0 [ 393.163434][T24286] netlink_rcv_skb+0x13e/0x240 [ 393.168271][T24286] ? rtnetlink_bind+0x60/0x60 [ 393.172933][T24286] rtnetlink_rcv+0x18/0x20 [ 393.177436][T24286] netlink_unicast+0x5fc/0x6c0 [ 393.182995][T24286] netlink_sendmsg+0x6f8/0x7c0 [ 393.187973][T24286] ? netlink_getsockopt+0x720/0x720 [ 393.193606][T24286] ____sys_sendmsg+0x360/0x4d0 [ 393.199788][T24286] ? import_iovec+0xb8/0xd0 [ 393.205122][T24286] __sys_sendmsg+0x1ed/0x270 [ 393.211319][T24286] ? __fsnotify_parent+0x32f/0x430 [ 393.216897][T24286] ? get_pid_task+0x90/0xc0 [ 393.221661][T24286] ? vfs_write+0x572/0x7e0 [ 393.226529][T24286] ? __fget_light+0x219/0x260 [ 393.232336][T24286] ? fput+0x2d/0x130 [ 393.236796][T24286] ? ksys_write+0x157/0x180 [ 393.242592][T24286] __x64_sys_sendmsg+0x42/0x50 [ 393.247805][T24286] do_syscall_64+0x39/0x80 [ 393.253377][T24286] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 393.259443][T24286] RIP: 0033:0x465f69 [ 393.263703][T24286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 393.284513][T24286] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.294507][T24286] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 393.302943][T24286] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 393.311181][T24286] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 393.319312][T24286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.327687][T24286] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 393.351438][T24287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:32:10 executing program 0 (fault-call:1 fault-nth:16): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 393.373708][T24316] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 393.387667][T24316] team0: Device ipvlan0 failed to register rx_handler [ 393.407628][ T3062] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 393.415624][ T7] usb 2-1: new high-speed USB device number 96 using dummy_hcd 21:32:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x5460, 0x0) 21:32:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 393.448162][T24331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 393.483586][T24331] FAULT_INJECTION: forcing a failure. [ 393.483586][T24331] name failslab, interval 1, probability 0, space 0, times 0 [ 393.524090][T24331] CPU: 1 PID: 24331 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 393.533234][T24331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.543818][T24331] Call Trace: [ 393.547094][T24331] dump_stack+0x137/0x19d [ 393.551568][T24331] should_fail+0x23c/0x250 [ 393.556427][T24331] __should_failslab+0x81/0x90 [ 393.561252][T24331] ? veth_dev_init+0xad/0x1f0 [ 393.566126][T24331] should_failslab+0x5/0x20 [ 393.570646][T24331] __kmalloc+0x66/0x380 [ 393.575052][T24331] ? find_next_bit+0xa7/0xf0 [ 393.579651][T24331] ? cpumask_next+0xc/0x30 [ 393.584240][T24331] veth_dev_init+0xad/0x1f0 [ 393.588911][T24331] register_netdevice+0x41b/0x1080 [ 393.594249][T24331] ? veth_newlink+0x229/0x6e0 [ 393.599232][T24331] veth_newlink+0x475/0x6e0 [ 393.603795][T24331] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 393.610017][T24331] ? __kmalloc_node+0x30/0x40 [ 393.614727][T24331] ? strcpy+0x3b/0x60 [ 393.619350][T24331] ? alloc_netdev_mqs+0x72d/0x750 [ 393.624591][T24331] ? veth_validate+0x110/0x110 [ 393.629741][T24331] rtnl_newlink+0xdba/0x1310 [ 393.634566][T24331] ? psi_group_change+0x1c2/0x250 [ 393.639683][T24331] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 393.645137][T24331] ? _raw_spin_unlock_irq+0x22/0x40 [ 393.650402][T24331] ? finish_task_switch+0xc0/0x2a0 [ 393.655603][T24331] ? __schedule+0x3c1/0x580 [ 393.660342][T24331] ? _raw_spin_unlock+0x22/0x40 [ 393.665424][T24331] ? __mutex_lock+0x5ae/0x670 [ 393.670097][T24331] ? rtnl_setlink+0x280/0x280 [ 393.674770][T24331] rtnetlink_rcv_msg+0x728/0x7c0 [ 393.679909][T24331] ? ima_match_policy+0xb2a/0xb60 [ 393.685044][T24331] ? __down_write_common+0x45/0x870 [ 393.690549][T24331] ? ima_get_action+0x5c/0x70 [ 393.695507][T24331] ? up_write+0x25/0xc0 [ 393.699666][T24331] ? process_measurement+0xf40/0x10f0 [ 393.705223][T24331] ? __list_del_entry_valid+0x54/0xc0 [ 393.711211][T24331] ? __inc_numa_state+0x10/0x50 [ 393.716154][T24331] ? rhashtable_jhash2+0x13a/0x1a0 [ 393.721268][T24331] ? __rcu_read_unlock+0x5c/0x250 [ 393.726659][T24331] ? jhash+0x2b0/0x2b0 [ 393.731026][T24331] netlink_rcv_skb+0x13e/0x240 [ 393.735775][T24331] ? rtnetlink_bind+0x60/0x60 [ 393.740456][T24331] rtnetlink_rcv+0x18/0x20 [ 393.745035][T24331] netlink_unicast+0x5fc/0x6c0 [ 393.749816][T24331] netlink_sendmsg+0x6f8/0x7c0 [ 393.754573][T24331] ? netlink_getsockopt+0x720/0x720 [ 393.759813][T24331] ____sys_sendmsg+0x360/0x4d0 [ 393.764789][T24331] ? import_iovec+0xb8/0xd0 [ 393.769576][T24331] __sys_sendmsg+0x1ed/0x270 [ 393.774164][T24331] ? __fsnotify_parent+0x32f/0x430 [ 393.779533][T24331] ? get_pid_task+0x90/0xc0 [ 393.784041][T24331] ? vfs_write+0x572/0x7e0 [ 393.788752][T24331] ? __fget_light+0x219/0x260 [ 393.793514][T24331] ? fput+0x2d/0x130 [ 393.797653][T24331] ? ksys_write+0x157/0x180 [ 393.802257][T24331] __x64_sys_sendmsg+0x42/0x50 [ 393.807173][T24331] do_syscall_64+0x39/0x80 [ 393.811754][T24331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 393.818216][T24331] RIP: 0033:0x465f69 [ 393.822634][T24331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 393.842830][T24331] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.851868][T24331] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 393.860664][T24331] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 393.869331][T24331] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 393.877898][T24331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.886278][T24331] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 393.940962][T24340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.019187][ T3062] usb 5-1: Using ep0 maxpacket: 8 [ 394.027841][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 394.137523][ T3062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.148585][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.159674][ T3062] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.170293][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.180436][ T3062] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 394.190551][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 394.200326][ T3062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.209297][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.218781][ T3062] usb 5-1: config 0 descriptor?? [ 394.224918][ T7] usb 2-1: config 0 descriptor?? [ 394.460249][ T7] usb 5-1: USB disconnect, device number 39 [ 394.470101][ T19] usb 2-1: USB disconnect, device number 96 21:32:11 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:32:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xe, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:11 executing program 0 (fault-call:1 fault-nth:17): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x6364, 0x0) 21:32:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:11 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) [ 395.023131][T24375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 395.044201][T24375] FAULT_INJECTION: forcing a failure. [ 395.044201][T24375] name failslab, interval 1, probability 0, space 0, times 0 [ 395.057941][T24375] CPU: 1 PID: 24375 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 395.066755][T24375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.076908][T24375] Call Trace: [ 395.080193][T24375] dump_stack+0x137/0x19d [ 395.084539][T24375] should_fail+0x23c/0x250 [ 395.089053][T24375] __should_failslab+0x81/0x90 [ 395.093998][T24375] ? kvasprintf_const+0xec/0x100 [ 395.099016][T24375] should_failslab+0x5/0x20 [ 395.103844][T24375] __kmalloc_track_caller+0x64/0x380 [ 395.109236][T24375] kstrdup_const+0x51/0x90 [ 395.113821][T24375] kvasprintf_const+0xec/0x100 [ 395.118594][T24375] kobject_set_name_vargs+0x43/0xe0 [ 395.123966][T24375] dev_set_name+0x6c/0x90 [ 395.128339][T24375] netdev_register_kobject+0x7a/0x230 [ 395.133831][T24375] register_netdevice+0xbcb/0x1080 [ 395.138943][T24375] veth_newlink+0x475/0x6e0 [ 395.143516][T24375] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 395.149694][T24375] ? __kmalloc_node+0x30/0x40 [ 395.154494][T24375] ? strcpy+0x3b/0x60 [ 395.158479][T24375] ? alloc_netdev_mqs+0x72d/0x750 [ 395.163699][T24375] ? veth_validate+0x110/0x110 [ 395.168473][T24375] rtnl_newlink+0xdba/0x1310 [ 395.173095][T24375] ? kvm_sched_clock_read+0x15/0x40 [ 395.178441][T24375] ? sched_clock+0xf/0x20 [ 395.182962][T24375] ? sched_clock_cpu+0x11/0x1a0 [ 395.187891][T24375] ? psi_group_change+0x1c2/0x250 [ 395.193015][T24375] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 395.198460][T24375] ? _raw_spin_unlock_irq+0x22/0x40 [ 395.204086][T24375] ? finish_task_switch+0xc0/0x2a0 [ 395.209196][T24375] ? __list_del_entry_valid+0x54/0xc0 [ 395.214649][T24375] ? widen_string+0x3a/0x280 [ 395.219276][T24375] ? aa_get_newest_label+0x74/0x250 [ 395.224542][T24375] ? apparmor_capable+0xfe/0x160 [ 395.229504][T24375] ? bpf_lsm_capable+0x5/0x10 [ 395.234267][T24375] ? security_capable+0x91/0xa0 [ 395.239156][T24375] ? ns_capable+0x86/0xb0 [ 395.243705][T24375] ? rtnl_setlink+0x280/0x280 [ 395.248468][T24375] rtnetlink_rcv_msg+0x728/0x7c0 [ 395.253749][T24375] ? ima_match_policy+0xb2a/0xb60 [ 395.258766][T24375] ? __down_write_common+0x45/0x870 [ 395.264051][T24375] ? ima_get_action+0x5c/0x70 [ 395.268715][T24375] ? up_write+0x25/0xc0 [ 395.272861][T24375] ? process_measurement+0xf40/0x10f0 [ 395.278528][T24375] ? __list_del_entry_valid+0x54/0xc0 [ 395.283888][T24375] ? __inc_numa_state+0x10/0x50 [ 395.288844][T24375] ? rhashtable_jhash2+0x13a/0x1a0 [ 395.294035][T24375] ? __rcu_read_unlock+0x5c/0x250 [ 395.299168][T24375] ? jhash+0x2b0/0x2b0 [ 395.303273][T24375] netlink_rcv_skb+0x13e/0x240 [ 395.308025][T24375] ? rtnetlink_bind+0x60/0x60 [ 395.312689][T24375] rtnetlink_rcv+0x18/0x20 [ 395.317092][T24375] netlink_unicast+0x5fc/0x6c0 [ 395.322048][T24375] netlink_sendmsg+0x6f8/0x7c0 [ 395.326872][T24375] ? netlink_getsockopt+0x720/0x720 [ 395.332143][T24375] ____sys_sendmsg+0x360/0x4d0 [ 395.337148][T24375] ? import_iovec+0xb8/0xd0 [ 395.341640][T24375] __sys_sendmsg+0x1ed/0x270 [ 395.347100][T24375] ? __fsnotify_parent+0x32f/0x430 [ 395.352323][T24375] ? get_pid_task+0x90/0xc0 [ 395.356915][T24375] ? vfs_write+0x572/0x7e0 [ 395.361321][T24375] ? kcsan_setup_watchpoint+0x26e/0x470 [ 395.367060][T24375] ? fput+0x2d/0x130 [ 395.370940][T24375] ? ksys_write+0x157/0x180 [ 395.375504][T24375] __x64_sys_sendmsg+0x42/0x50 [ 395.380317][T24375] do_syscall_64+0x39/0x80 [ 395.384818][T24375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 395.390800][T24375] RIP: 0033:0x465f69 [ 395.394881][T24375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 395.414814][T24375] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.423292][T24375] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 395.431407][T24375] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 395.439455][T24375] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 395.447567][T24375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.455666][T24375] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 21:32:12 executing program 0 (fault-call:1 fault-nth:18): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 395.473368][T24378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:32:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x8913, 0x0) [ 395.525780][T24376] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 395.537229][T24376] team0: Device ipvlan0 failed to register rx_handler 21:32:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 395.598838][T24394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 395.616598][T24394] FAULT_INJECTION: forcing a failure. [ 395.616598][T24394] name failslab, interval 1, probability 0, space 0, times 0 [ 395.679452][T24394] CPU: 1 PID: 24394 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 395.688716][T24394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.699127][T24394] Call Trace: [ 395.702413][T24394] dump_stack+0x137/0x19d [ 395.706751][T24394] should_fail+0x23c/0x250 [ 395.711181][T24394] __should_failslab+0x81/0x90 [ 395.715949][T24394] ? device_add+0x9a/0xe50 [ 395.720391][T24394] should_failslab+0x5/0x20 [ 395.724927][T24394] kmem_cache_alloc_trace+0x49/0x340 [ 395.730368][T24394] device_add+0x9a/0xe50 [ 395.734628][T24394] ? dev_set_name+0x6c/0x90 [ 395.739256][T24394] netdev_register_kobject+0xfd/0x230 [ 395.744778][T24394] register_netdevice+0xbcb/0x1080 [ 395.750339][T24394] veth_newlink+0x475/0x6e0 [ 395.754859][T24394] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 395.760845][T24394] ? __kmalloc_node+0x30/0x40 [ 395.765530][T24394] ? strcpy+0x3b/0x60 [ 395.769594][T24394] ? alloc_netdev_mqs+0x72d/0x750 [ 395.775325][T24394] ? veth_validate+0x110/0x110 [ 395.780139][T24394] rtnl_newlink+0xdba/0x1310 [ 395.785015][T24394] ? psi_group_change+0x1c2/0x250 [ 395.790146][T24394] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 395.795928][T24394] ? _raw_spin_unlock_irq+0x22/0x40 [ 395.797420][ T9575] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 395.801883][T24394] ? finish_task_switch+0xc0/0x2a0 [ 395.815001][T24394] ? __schedule+0x3c1/0x580 [ 395.819508][T24394] ? mutex_spin_on_owner+0x15c/0x180 [ 395.825083][T24394] ? _raw_spin_unlock+0x22/0x40 [ 395.830152][T24394] ? __mutex_lock+0x5ae/0x670 [ 395.835016][T24394] ? rtnl_setlink+0x280/0x280 [ 395.839810][T24394] rtnetlink_rcv_msg+0x728/0x7c0 [ 395.845039][T24394] ? ima_match_policy+0xb2a/0xb60 [ 395.850084][T24394] ? __down_write_common+0x45/0x870 [ 395.855355][T24394] ? ima_get_action+0x5c/0x70 [ 395.860661][T24394] ? up_write+0x25/0xc0 [ 395.865014][T24394] ? process_measurement+0xf40/0x10f0 [ 395.870499][T24394] ? __list_del_entry_valid+0x54/0xc0 [ 395.875916][T24394] ? __inc_numa_state+0x10/0x50 [ 395.880925][T24394] ? rhashtable_jhash2+0x13a/0x1a0 [ 395.886289][T24394] ? __rcu_read_unlock+0x5c/0x250 [ 395.891336][T24394] ? jhash+0x2b0/0x2b0 [ 395.895609][T24394] netlink_rcv_skb+0x13e/0x240 [ 395.900739][T24394] ? rtnetlink_bind+0x60/0x60 [ 395.905519][T24394] rtnetlink_rcv+0x18/0x20 [ 395.909943][T24394] netlink_unicast+0x5fc/0x6c0 [ 395.914764][T24394] netlink_sendmsg+0x6f8/0x7c0 [ 395.919542][T24394] ? netlink_getsockopt+0x720/0x720 [ 395.924740][T24394] ____sys_sendmsg+0x360/0x4d0 [ 395.929520][T24394] ? import_iovec+0xb8/0xd0 [ 395.934372][T24394] __sys_sendmsg+0x1ed/0x270 [ 395.939180][T24394] ? __fsnotify_parent+0x32f/0x430 [ 395.944952][T24394] ? get_pid_task+0x90/0xc0 [ 395.949747][T24394] ? vfs_write+0x572/0x7e0 [ 395.954317][T24394] ? __fget_light+0x219/0x260 [ 395.959329][T24394] ? fput+0x2d/0x130 [ 395.963209][T24394] ? ksys_write+0x157/0x180 [ 395.968017][T24394] __x64_sys_sendmsg+0x42/0x50 [ 395.972820][T24394] do_syscall_64+0x39/0x80 [ 395.977493][T24394] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 395.983636][T24394] RIP: 0033:0x465f69 [ 395.987527][T24394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 396.007429][T24394] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.016099][T24394] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 21:32:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x8914, 0x0) [ 396.024151][T24394] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 396.032334][T24394] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 396.040416][T24394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.048654][T24394] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 396.064245][T24409] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 396.073577][ T9575] usb 2-1: Using ep0 maxpacket: 8 21:32:12 executing program 0 (fault-call:1 fault-nth:19): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 396.089847][T24409] team0: Device ipvlan0 failed to register rx_handler [ 396.127492][ T19] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 396.147829][T24410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.197903][ T9575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.217838][ T9575] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.234871][ T9575] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 396.244683][ T9575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.261055][ T9575] usb 2-1: config 0 descriptor?? [ 396.275669][T24430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 396.287499][T24430] FAULT_INJECTION: forcing a failure. [ 396.287499][T24430] name failslab, interval 1, probability 0, space 0, times 0 [ 396.303855][T24430] CPU: 1 PID: 24430 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 396.312774][T24430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.323088][T24430] Call Trace: [ 396.326468][T24430] dump_stack+0x137/0x19d [ 396.330821][T24430] should_fail+0x23c/0x250 [ 396.335357][T24430] __should_failslab+0x81/0x90 [ 396.340140][T24430] ? __kernfs_new_node+0x44/0x360 [ 396.345493][T24430] should_failslab+0x5/0x20 [ 396.350191][T24430] __kmalloc_track_caller+0x64/0x380 [ 396.356057][T24430] ? __cgroup_account_cputime+0x1f0/0x210 [ 396.362448][T24430] kstrdup_const+0x51/0x90 [ 396.366986][T24430] __kernfs_new_node+0x44/0x360 [ 396.372020][T24430] ? find_next_bit+0xe1/0xf0 [ 396.376739][T24430] ? net_ns_get_ownership+0xaa/0xc0 [ 396.382002][T24430] ? net_namespace+0x20/0x20 [ 396.386771][T24430] kernfs_create_dir_ns+0x5e/0x140 [ 396.392134][T24430] sysfs_create_dir_ns+0x94/0x190 [ 396.397212][T24430] kobject_add_internal+0x456/0x840 [ 396.402800][T24430] ? __list_del_entry_valid+0x54/0xc0 [ 396.408774][T24430] kobject_add+0xbe/0x130 [ 396.413195][T24430] ? get_device_parent+0x1f8/0x310 [ 396.418397][T24430] device_add+0x338/0xe50 [ 396.422988][T24430] ? dev_set_name+0x6c/0x90 [ 396.427843][T24430] netdev_register_kobject+0xfd/0x230 [ 396.433656][T24430] register_netdevice+0xbcb/0x1080 [ 396.439022][T24430] veth_newlink+0x475/0x6e0 [ 396.443527][T24430] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 396.449925][T24430] ? __kmalloc_node+0x30/0x40 [ 396.454839][T24430] ? strcpy+0x3b/0x60 [ 396.459086][T24430] ? alloc_netdev_mqs+0x72d/0x750 [ 396.464104][T24430] ? veth_validate+0x110/0x110 [ 396.468857][T24430] rtnl_newlink+0xdba/0x1310 [ 396.473476][T24430] ? psi_group_change+0x1c2/0x250 [ 396.478502][T24430] ? _raw_spin_unlock_irq+0x22/0x40 [ 396.483691][T24430] ? finish_task_switch+0xc0/0x2a0 [ 396.489179][T24430] ? __schedule+0x3c1/0x580 [ 396.494111][T24430] ? _raw_spin_unlock+0x22/0x40 [ 396.499628][T24430] ? __mutex_lock+0x5ae/0x670 [ 396.505054][T24430] ? rtnl_setlink+0x280/0x280 [ 396.509824][T24430] rtnetlink_rcv_msg+0x728/0x7c0 [ 396.510636][ T9575] usb 2-1: USB disconnect, device number 97 [ 396.514781][T24430] ? ima_match_policy+0xb2a/0xb60 [ 396.514811][T24430] ? __down_write_common+0x45/0x870 [ 396.531241][T24430] ? ima_get_action+0x5c/0x70 [ 396.536137][T24430] ? up_write+0x25/0xc0 [ 396.540399][T24430] ? process_measurement+0xf40/0x10f0 [ 396.545810][T24430] ? __list_del_entry_valid+0x54/0xc0 [ 396.551464][T24430] ? __inc_numa_state+0x10/0x50 [ 396.556655][T24430] ? rhashtable_jhash2+0x13a/0x1a0 [ 396.562048][T24430] ? __rcu_read_unlock+0x5c/0x250 [ 396.567215][T24430] ? jhash+0x2b0/0x2b0 [ 396.571325][T24430] netlink_rcv_skb+0x13e/0x240 [ 396.576802][T24430] ? rtnetlink_bind+0x60/0x60 [ 396.581652][T24430] rtnetlink_rcv+0x18/0x20 [ 396.586279][T24430] netlink_unicast+0x5fc/0x6c0 [ 396.591307][T24430] netlink_sendmsg+0x6f8/0x7c0 [ 396.596238][T24430] ? netlink_getsockopt+0x720/0x720 [ 396.601905][T24430] ____sys_sendmsg+0x360/0x4d0 [ 396.606829][T24430] ? import_iovec+0xb8/0xd0 [ 396.611646][T24430] __sys_sendmsg+0x1ed/0x270 [ 396.616447][T24430] ? __fsnotify_parent+0x32f/0x430 [ 396.621718][T24430] ? get_pid_task+0x90/0xc0 [ 396.626321][T24430] ? vfs_write+0x572/0x7e0 [ 396.630825][T24430] ? __fget_light+0x219/0x260 [ 396.635700][T24430] ? fput+0x2d/0x130 [ 396.639800][T24430] ? ksys_write+0x157/0x180 [ 396.644786][T24430] __x64_sys_sendmsg+0x42/0x50 [ 396.649664][T24430] do_syscall_64+0x39/0x80 [ 396.654319][T24430] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 396.661234][T24430] RIP: 0033:0x465f69 [ 396.665508][T24430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 396.685506][T24430] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.694258][T24430] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 396.703199][T24430] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 396.711251][T24430] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 396.719512][T24430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.728052][T24430] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 396.742173][T24430] kobject_add_internal failed for veth14 (error: -12 parent: net) [ 396.787377][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 396.927433][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.937923][ T19] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.947199][ T19] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 396.956472][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.968300][ T19] usb 5-1: config 0 descriptor?? [ 397.208635][ T3062] usb 5-1: USB disconnect, device number 40 21:32:14 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:32:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x8933, 0x0) 21:32:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:14 executing program 0 (fault-call:1 fault-nth:20): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:14 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a009"], 0x0) [ 397.729931][T24461] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 397.743989][T24461] team0: Device ipvlan0 failed to register rx_handler 21:32:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 397.789200][T24466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.809077][T24466] FAULT_INJECTION: forcing a failure. [ 397.809077][T24466] name failslab, interval 1, probability 0, space 0, times 0 [ 397.855970][T24466] CPU: 0 PID: 24466 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 397.865060][T24466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.875120][T24466] Call Trace: [ 397.878422][T24466] dump_stack+0x137/0x19d [ 397.882973][T24466] should_fail+0x23c/0x250 [ 397.887395][T24466] ? __kernfs_new_node+0x73/0x360 [ 397.892467][T24466] __should_failslab+0x81/0x90 [ 397.897284][T24466] should_failslab+0x5/0x20 [ 397.901842][T24466] kmem_cache_alloc+0x46/0x320 [ 397.906800][T24466] __kernfs_new_node+0x73/0x360 [ 397.912036][T24466] ? find_next_bit+0xe1/0xf0 [ 397.916827][T24466] ? net_ns_get_ownership+0xaa/0xc0 [ 397.922449][T24466] ? net_namespace+0x20/0x20 [ 397.927057][T24466] kernfs_create_dir_ns+0x5e/0x140 [ 397.932640][T24466] sysfs_create_dir_ns+0x94/0x190 [ 397.937789][T24466] kobject_add_internal+0x456/0x840 [ 397.943198][T24466] kobject_add+0xbe/0x130 [ 397.947587][T24466] ? get_device_parent+0x1f8/0x310 [ 397.952773][T24466] device_add+0x338/0xe50 [ 397.957104][T24466] ? dev_set_name+0x6c/0x90 [ 397.961994][T24466] netdev_register_kobject+0xfd/0x230 [ 397.968089][T24466] register_netdevice+0xbcb/0x1080 [ 397.973283][T24466] veth_newlink+0x475/0x6e0 [ 397.977902][T24466] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 397.984208][T24466] ? __kmalloc_node+0x30/0x40 [ 397.989151][T24466] ? strcpy+0x3b/0x60 [ 397.993239][T24466] ? alloc_netdev_mqs+0x72d/0x750 [ 397.998459][T24466] ? veth_validate+0x110/0x110 [ 398.003593][T24466] rtnl_newlink+0xdba/0x1310 [ 398.008302][T24466] ? psi_group_change+0x1c2/0x250 [ 398.013578][T24466] ? _raw_spin_unlock_irq+0x22/0x40 [ 398.018874][T24466] ? finish_task_switch+0xc0/0x2a0 [ 398.024877][T24466] ? __schedule+0x3c1/0x580 [ 398.029471][T24466] ? _raw_spin_unlock+0x22/0x40 [ 398.034670][T24466] ? __mutex_lock+0x5ae/0x670 [ 398.039346][T24466] ? rtnl_setlink+0x280/0x280 [ 398.044216][T24466] rtnetlink_rcv_msg+0x728/0x7c0 [ 398.049280][T24466] ? ima_match_policy+0xb2a/0xb60 [ 398.054297][T24466] ? __down_write_common+0x45/0x870 [ 398.059524][T24466] ? ima_get_action+0x5c/0x70 [ 398.064201][T24466] ? up_write+0x25/0xc0 [ 398.068631][T24466] ? process_measurement+0xf40/0x10f0 [ 398.074341][T24466] ? __list_del_entry_valid+0x54/0xc0 [ 398.079759][T24466] ? __inc_numa_state+0x10/0x50 [ 398.084718][T24466] ? rhashtable_jhash2+0x13a/0x1a0 [ 398.089815][T24466] ? __rcu_read_unlock+0x5c/0x250 [ 398.094833][T24466] ? jhash+0x2b0/0x2b0 [ 398.098914][T24466] netlink_rcv_skb+0x13e/0x240 [ 398.103774][T24466] ? rtnetlink_bind+0x60/0x60 [ 398.108589][T24466] rtnetlink_rcv+0x18/0x20 [ 398.113967][T24466] netlink_unicast+0x5fc/0x6c0 [ 398.119765][T24466] netlink_sendmsg+0x6f8/0x7c0 [ 398.124819][T24466] ? netlink_getsockopt+0x720/0x720 [ 398.130315][T24466] ____sys_sendmsg+0x360/0x4d0 [ 398.135615][T24466] ? import_iovec+0xb8/0xd0 [ 398.140946][T24466] __sys_sendmsg+0x1ed/0x270 [ 398.145901][T24466] ? __fsnotify_parent+0x32f/0x430 [ 398.151253][T24466] ? get_pid_task+0x90/0xc0 [ 398.155888][T24466] ? vfs_write+0x572/0x7e0 [ 398.160302][T24466] ? __fget_light+0x219/0x260 [ 398.165321][T24466] ? fput+0x2d/0x130 [ 398.169229][T24466] ? ksys_write+0x157/0x180 [ 398.173986][T24466] __x64_sys_sendmsg+0x42/0x50 [ 398.178831][T24466] do_syscall_64+0x39/0x80 [ 398.183463][T24466] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 398.189627][T24466] RIP: 0033:0x465f69 [ 398.193954][T24466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 398.214106][T24466] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.223474][T24466] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 398.231989][T24466] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 398.240742][T24466] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 398.249107][T24466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.257310][T24466] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 398.278569][T24466] kobject_add_internal failed for veth14 (error: -12 parent: net) [ 398.287170][T24467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:32:15 executing program 0 (fault-call:1 fault-nth:21): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x8982, 0x0) [ 398.324203][T24479] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 398.348267][T24479] team0: Device ipvlan0 failed to register rx_handler [ 398.410014][T24496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 398.427328][ T9575] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 398.427326][ T9706] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 398.427751][ C1] ================================================================== [ 398.427761][ C1] BUG: KCSAN: data-race in data_push_tail / string [ 398.427766][ C1] [ 398.427770][ C1] write to 0xffffffff88f1a038 of 1 bytes by task 9575 on cpu 0: [ 398.427776][ C1] string+0xa1/0x210 [ 398.427780][ C1] vsnprintf+0xab0/0xed0 [ 398.427784][ C1] pointer+0xeb/0x800 [ 398.427788][ C1] vsnprintf+0x8a1/0xed0 [ 398.427797][ C1] vscnprintf+0x29/0x80 [ 398.427801][ C1] vprintk_store+0x4c1/0x9c0 [ 398.427806][ C1] vprintk_emit+0xca/0x3e0 [ 398.427810][ C1] dev_vprintk_emit+0x1c6/0x1ea [ 398.427815][ C1] dev_printk_emit+0x6a/0x8c [ 398.427819][ C1] __dev_printk+0xfa/0x103 [ 398.427824][ C1] _dev_info+0x76/0x96 [ 398.427828][ C1] hub_port_init+0x7d3/0x18d0 [ 398.427832][ C1] hub_event+0x1a1e/0x2b60 [ 398.427836][ C1] process_one_work+0x3e1/0x950 [ 398.427841][ C1] worker_thread+0x616/0xa70 [ 398.427845][ C1] kthread+0x20b/0x230 [ 398.427849][ C1] ret_from_fork+0x1f/0x30 [ 398.427853][ C1] [ 398.427857][ C1] read to 0xffffffff88f1a038 of 8 bytes by task 9706 on cpu 1: [ 398.427863][ C1] data_push_tail+0x125/0x460 [ 398.427868][ C1] data_alloc+0xbc/0x2b0 [ 398.427872][ C1] prb_reserve+0x8f0/0xbc0 [ 398.427876][ C1] vprintk_store+0x3e9/0x9c0 [ 398.427880][ C1] vprintk_emit+0xca/0x3e0 [ 398.427885][ C1] dev_vprintk_emit+0x1c6/0x1ea [ 398.427890][ C1] dev_printk_emit+0x6a/0x8c [ 398.427894][ C1] __dev_printk+0xfa/0x103 [ 398.427898][ C1] _dev_info+0x76/0x96 [ 398.427902][ C1] hub_port_init+0x7d3/0x18d0 [ 398.427910][ C1] hub_event+0x1a1e/0x2b60 [ 398.427914][ C1] process_one_work+0x3e1/0x950 21:32:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x400448c9, 0x0) 21:32:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 398.427919][ C1] worker_thread+0x616/0xa70 [ 398.427923][ C1] kthread+0x20b/0x230 [ 398.427927][ C1] ret_from_fork+0x1f/0x30 [ 398.427931][ C1] [ 398.427935][ C1] Reported by Kernel Concurrency Sanitizer on: [ 398.427941][ C1] CPU: 1 PID: 9706 Comm: kworker/1:6 Not tainted 5.12.0-rc3-syzkaller #0 [ 398.427949][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.427959][ C1] Workqueue: usb_hub_wq hub_event [ 398.427969][ C1] ================================================================== [ 398.516275][T24496] FAULT_INJECTION: forcing a failure. [ 398.516275][T24496] name failslab, interval 1, probability 0, space 0, times 0 [ 398.677545][T24496] CPU: 0 PID: 24496 Comm: syz-executor.0 Not tainted 5.12.0-rc3-syzkaller #0 [ 398.686310][T24496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.696359][T24496] Call Trace: [ 398.699645][T24496] dump_stack+0x137/0x19d [ 398.704038][T24496] should_fail+0x23c/0x250 [ 398.708623][T24496] ? radix_tree_node_alloc+0x154/0x1f0 [ 398.715008][T24496] __should_failslab+0x81/0x90 [ 398.720331][T24496] should_failslab+0x5/0x20 [ 398.725167][T24496] kmem_cache_alloc+0x46/0x320 [ 398.730700][T24496] radix_tree_node_alloc+0x154/0x1f0 [ 398.736173][T24496] idr_get_free+0x22a/0x5d0 [ 398.740694][T24496] idr_alloc_cyclic+0xe3/0x2d0 [ 398.745898][T24496] ? __radix_tree_preload+0x19e/0x1c0 [ 398.751556][T24496] __kernfs_new_node+0xbd/0x360 [ 398.756870][T24496] ? net_ns_get_ownership+0xaa/0xc0 [ 398.762366][T24496] ? net_namespace+0x20/0x20 [ 398.767340][T24496] kernfs_create_dir_ns+0x5e/0x140 [ 398.772933][T24496] sysfs_create_dir_ns+0x94/0x190 [ 398.778295][T24496] kobject_add_internal+0x456/0x840 [ 398.783682][T24496] kobject_add+0xbe/0x130 [ 398.788128][T24496] ? kcsan_setup_watchpoint+0x26e/0x470 [ 398.793880][T24496] device_add+0x338/0xe50 [ 398.798399][T24496] ? dev_set_name+0x6c/0x90 [ 398.803306][T24496] netdev_register_kobject+0xfd/0x230 [ 398.809595][T24496] register_netdevice+0xbcb/0x1080 [ 398.815468][T24496] veth_newlink+0x475/0x6e0 [ 398.820529][T24496] ? kmem_cache_alloc_node_trace+0x1c1/0x310 [ 398.826854][T24496] ? __kmalloc_node+0x30/0x40 [ 398.831793][T24496] ? strcpy+0x3b/0x60 [ 398.836220][T24496] ? alloc_netdev_mqs+0x72d/0x750 [ 398.841415][T24496] ? veth_validate+0x110/0x110 [ 398.846342][T24496] rtnl_newlink+0xdba/0x1310 [ 398.851139][T24496] ? psi_group_change+0x1c2/0x250 [ 398.856357][T24496] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 398.862155][T24496] ? _raw_spin_unlock_irq+0x22/0x40 [ 398.867430][T24496] ? finish_task_switch+0xc0/0x2a0 [ 398.872870][T24496] ? __schedule+0x3c1/0x580 [ 398.877796][T24496] ? _raw_spin_unlock+0x22/0x40 [ 398.882697][T24496] ? __mutex_lock+0x5ae/0x670 [ 398.887604][T24496] ? rtnl_setlink+0x280/0x280 [ 398.893139][T24496] rtnetlink_rcv_msg+0x728/0x7c0 [ 398.898427][T24496] ? ima_match_policy+0xb2a/0xb60 [ 398.904440][T24496] ? __down_write_common+0x45/0x870 [ 398.909914][T24496] ? ima_get_action+0x5c/0x70 [ 398.915592][T24496] ? up_write+0x25/0xc0 [ 398.920652][T24496] ? process_measurement+0xf40/0x10f0 [ 398.927530][T24496] ? __list_del_entry_valid+0x54/0xc0 [ 398.934664][T24496] ? __inc_numa_state+0x10/0x50 [ 398.939616][T24496] ? rhashtable_jhash2+0x13a/0x1a0 [ 398.945070][T24496] ? __rcu_read_unlock+0x5c/0x250 [ 398.950370][T24496] ? jhash+0x2b0/0x2b0 [ 398.954605][T24496] netlink_rcv_skb+0x13e/0x240 [ 398.959423][T24496] ? rtnetlink_bind+0x60/0x60 [ 398.964203][T24496] rtnetlink_rcv+0x18/0x20 [ 398.968698][T24496] netlink_unicast+0x5fc/0x6c0 [ 398.973590][T24496] netlink_sendmsg+0x6f8/0x7c0 [ 398.978348][T24496] ? netlink_getsockopt+0x720/0x720 [ 398.983623][T24496] ____sys_sendmsg+0x360/0x4d0 [ 398.988993][T24496] ? import_iovec+0xb8/0xd0 [ 398.993521][T24496] __sys_sendmsg+0x1ed/0x270 [ 398.998137][T24496] ? __fsnotify_parent+0x32f/0x430 [ 399.003296][T24496] ? get_pid_task+0x90/0xc0 [ 399.007917][T24496] ? vfs_write+0x572/0x7e0 [ 399.012375][T24496] ? __fget_light+0x219/0x260 [ 399.017045][T24496] ? fput+0x2d/0x130 [ 399.021103][T24496] ? ksys_write+0x157/0x180 [ 399.025847][T24496] __x64_sys_sendmsg+0x42/0x50 [ 399.031555][T24496] do_syscall_64+0x39/0x80 [ 399.036159][T24496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 399.042932][T24496] RIP: 0033:0x465f69 [ 399.047115][T24496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 399.067437][T24496] RSP: 002b:00007fd9b9ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.076254][T24496] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 399.084534][T24496] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 399.094079][T24496] RBP: 00007fd9b9ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 399.102229][T24496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.111595][T24496] R13: 00007ffe41b782cf R14: 00007fd9b9ce8300 R15: 0000000000022000 [ 399.150275][T24520] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 399.162575][T24520] team0: Device ipvlan0 failed to register rx_handler [ 399.177285][ T9706] usb 5-1: Using ep0 maxpacket: 8 [ 399.231311][T24524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 399.247208][ T9575] usb 2-1: Using ep0 maxpacket: 8 [ 399.317557][ T9706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.340215][ T9706] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.363502][ T9706] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 399.373046][ T9575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.374455][ T9706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.387607][ T9575] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.400712][ T9575] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 399.401938][ T9706] usb 5-1: config 0 descriptor?? [ 399.410304][ T9575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.430906][ T9575] usb 2-1: config 0 descriptor?? [ 399.680208][ T9706] usb 5-1: USB disconnect, device number 41 [ 399.682075][ T9575] usb 2-1: USB disconnect, device number 98 21:32:17 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:32:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x400448dd, 0x0) 21:32:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:17 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a009"], 0x0) [ 400.234577][T24559] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 400.252041][T24559] team0: Device ipvlan0 failed to register rx_handler 21:32:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) 21:32:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x25, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 400.322369][T24561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 400.364384][T24560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:32:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 21:32:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 400.416095][T24596] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 400.432693][T24596] team0: Device ipvlan0 failed to register rx_handler 21:32:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 400.500850][T24603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 400.517300][ T9706] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 400.537936][ T3062] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 400.578405][T24618] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 400.590660][T24618] team0: Device ipvlan0 failed to register rx_handler [ 400.639048][T24620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 400.767253][ T9706] usb 2-1: Using ep0 maxpacket: 8 [ 400.797235][ T3062] usb 5-1: Using ep0 maxpacket: 8 [ 400.887432][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.899472][ T9706] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.909728][ T9706] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 400.919549][ T9706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.928271][ T3062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.939164][ T9706] usb 2-1: config 0 descriptor?? [ 400.952730][ T3062] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.963609][ T3062] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 400.973106][ T3062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.982611][ T3062] usb 5-1: config 0 descriptor?? [ 401.178279][ T9706] usb 2-1: USB disconnect, device number 99 [ 401.229154][ T3062] usb 5-1: USB disconnect, device number 42 21:32:18 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a00904"], 0x0) 21:32:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 21:32:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:18 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a009"], 0x0) [ 401.781954][T24655] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 401.797059][T24655] team0: Device ipvlan0 failed to register rx_handler 21:32:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 21:32:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x4c, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 401.844749][T24654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.893420][T24657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:32:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x40186366, 0x0) 21:32:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 401.947670][T24687] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 401.967613][T24687] team0: Device ipvlan0 failed to register rx_handler 21:32:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x60, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 402.027992][T24695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.047183][ T9706] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 402.067227][ T9575] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 402.138358][T24712] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 402.148384][T24712] team0: Device ipvlan0 failed to register rx_handler [ 402.193445][T24713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.287306][ T9706] usb 2-1: Using ep0 maxpacket: 8 [ 402.327181][ T9575] usb 5-1: Using ep0 maxpacket: 8 [ 402.417243][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.427886][ T9706] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 402.437176][ T9706] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 402.446509][ T9706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.457351][ T9575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.457799][ T9706] usb 2-1: config 0 descriptor?? [ 402.475460][ T9575] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 402.485290][ T9575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.494331][ T9575] usb 5-1: config 0 descriptor?? [ 402.549622][ T9575] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 402.718787][ T9706] usb 2-1: USB disconnect, device number 100 [ 402.749004][ T3062] usb 5-1: USB disconnect, device number 43 [ 402.757216][T10511] usb 5-1: Failed to submit usb control message: -71 [ 402.764363][T10511] usb 5-1: unable to send the bmi data to the device: -71 [ 402.771741][T10511] usb 5-1: unable to get target info from device [ 402.778603][T10511] usb 5-1: could not get target info (-71) [ 402.784551][T10511] usb 5-1: could not probe fw (-71) 21:32:20 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a009"], 0x0) 21:32:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4020565a, 0x0) 21:32:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x68, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:20 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a0"], 0x0) 21:32:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 403.304169][T24753] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 403.329616][T24753] team0: Device ipvlan0 failed to register rx_handler 21:32:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x40345410, 0x0) 21:32:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x6c, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 403.444315][T24755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.512830][T24756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.550432][T24798] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 21:32:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) [ 403.565203][T24798] team0: Device ipvlan0 failed to register rx_handler [ 403.597295][ T9575] usb 5-1: new high-speed USB device number 44 using dummy_hcd 21:32:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 403.647960][T24805] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.667097][ T9708] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 403.735708][T24820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.837129][ T9575] usb 5-1: Using ep0 maxpacket: 8 [ 403.957176][ T9708] usb 2-1: Using ep0 maxpacket: 8 [ 403.957176][ T9575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.974573][ T9575] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 403.984339][ T9575] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 403.993564][ T9575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.003647][ T9575] usb 5-1: config 0 descriptor?? [ 404.087164][ T9708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.097742][ T9708] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 404.108313][ T9708] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 404.119325][ T9708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.130594][ T9708] usb 2-1: config 0 descriptor?? [ 404.249666][ T9575] usb 5-1: USB disconnect, device number 44 [ 404.370575][ T7] usb 2-1: USB disconnect, device number 101 21:32:21 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a009"], 0x0) 21:32:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 21:32:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 404.790770][T24851] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 404.806081][T24851] team0: Device ipvlan0 failed to register rx_handler 21:32:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 21:32:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x7a, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 404.899100][T24850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 404.953842][T24854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 404.991029][T24882] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:32:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) [ 405.009970][T24885] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 405.022710][T24885] team0: Device ipvlan0 failed to register rx_handler 21:32:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 405.087151][ T5] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 405.099390][T24901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:32:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x80045643, 0x0) [ 405.162815][T24912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 405.357085][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 405.487357][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.499403][ T5] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.510340][ T5] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 405.522089][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.531503][ T5] usb 5-1: config 0 descriptor?? [ 405.769294][ T5] usb 5-1: USB disconnect, device number 45 21:32:23 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a009"], 0x0) 21:32:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x8a, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0xffffffffffffd65, 0x1, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x220400, 0xb0) flock(r0, 0x3) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) 21:32:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) [ 406.313538][T24948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.350519][T24956] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 406.360402][T24956] team0: Device ipvlan0 failed to register rx_handler 21:32:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x80085617, 0x0) 21:32:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xbc, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x80086301, 0x0) [ 406.549041][T24991] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 406.566717][T24991] team0: Device ipvlan0 failed to register rx_handler 21:32:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x25, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 406.628970][ T3062] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 406.887047][ T3062] usb 5-1: Using ep0 maxpacket: 8 [ 407.007056][ T3062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.018644][ T3062] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.029041][ T3062] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=34.0d [ 407.038522][ T3062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.048376][ T3062] usb 5-1: config 0 descriptor?? [ 407.289264][ T5] usb 5-1: USB disconnect, device number 46 21:32:24 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a00904"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001a80)={0x2c, &(0x7f0000001880), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x22, 0x58, {0x58, 0x9, "8d08ebd7906ecdd68ff25255e8ef8035c98624e67a254b2a30429315488374133aa844bbe77a09a972d6527f04988eeb83af6df2b9dc228d0fc009b70c4cc24d22b99a00992350a6ba206f9299598a1d435563be7619"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "b328082b"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x63e7, 0xc0, 0x1, {0x22, 0x35e}}}}, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0xe, 0x3d, "296e3811215a7c9db3bf3ee19cee17f586f1c9c457c045e46009e9796a6f7a39a6b89dd9aebe17b988cbb7675caa77d7d975ffcdb192793e545819d1ff"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x1, 0x3a, "fd97885feadc7f46f8885251369e7b6341590fe524b25d99dd984df43796da15d8e649ac1c42462cbc76a77d10fd58bae16baca48e6a57725f65"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x3f}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001080)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001a80)={0x2c, &(0x7f0000001880), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, &(0x7f0000000380)={0x0, 0x3, 0x72, {0x72, 0x22, "71e80be5c2f56790d38a7ad0280230506fa7d7d3525ded4a1b7d4d34d2574379b53febea3f4e5fb7d8213b926483f319b3a0284000fb2cefc31d8ef6663f285931aaeb9e3f2858b876c93e2599b405658b01d3bdf7bc802f9bb026b60b173933168cd91bae76f83734bd47e72904fe84"}}, &(0x7f0000000400)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "f3456a2b8bd12477f5a48e3919450f0994e064fde707952049052659e00419cbd623168e0ad3517b7f7a24493f8e67f0986f797ccbe446b84455114726b1ab5e95236f31a756ea3911f5aea256a83cda30fc19abc318b813bcb17fff9a9985dd3cfeae5c1491dd3fd079ee685a36d9f017fd4a4ab0e2b199daeecd40e93a661d409c5a8323f9cdcddd0a47dc9f64b6cacfcc70c2af578ee31cf879a05798d7fa1d77f79f4c7e137286359f24fc8411a636ebe84573dfdf12045eeaad48ab05734546c857edaa0c8a72"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x40, 0x0, 0x93, "45e771b4274cf33abbfb3522f2114f536a8578698cca6653742dd2efff2285cc144d5e0eb15a2c9d8f0405c2861ab66908ad61ebcabebec4c8fc0a466a0bcdcf94faa9cd9e722b311e26fc835b83726454ac391b067cb8b0118c38f820fb274732e1ab2e31b7e3bc84b7d0f65e2219aaf9782221000284fb997cf280eed7f7117241266f592c93061bc75a4fe6125f26ea1725"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x81, 0x2, "82d5"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "dfa9"}, &(0x7f0000000700)={0x20, 0x83, 0x2, '#b'}, &(0x7f0000000740)={0x20, 0x84, 0x3, "b5aa87"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "30e1fa"}}) 21:32:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 21:32:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xfd, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 21:32:24 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e66d1808b11342000d340000000109021b00010000d5a00904"], 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x76, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "e9c57615a7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6372, 0x0, 0x22c, 0x9}, {0x6, 0x24, 0x1a, 0x1c7c, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x3, 0x7, 0x3, 0x0, 0x7f}, @mbim={0xc, 0x24, 0x1b, 0x5, 0xffe1, 0x1, 0x1, 0x8, 0x4}, @acm={0x4, 0x24, 0x2, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x9, 0x2b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x4, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfe, 0x1, 0x4}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x2, 0x2, 0x1f, 0x20, 0x5}, 0x43, &(0x7f0000000180)=ANY=[@ANYBLOB="050f43000503100b1410040668b70008ea6f4134eebf10021435ae730c100a1f00040000000f0500141004074916cccdec21a87e43dc928f2475335100000000000000"], 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x220400, 0xb0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) flock(r1, 0x3) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000840)=ANY=[@ANYRESHEX=r1], &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000500)={0x40, 0x8, 0xe3, "c5a9a679529f992aa4ef985eacc4a44a35a49f57d61dce017f3e5f5b9f59fb87cd6ef1f6e658617f367cd7da7aa6f621386bb51a1936d6f93ce881a8db2f7f924346af0825e18529651b2cb3fb01faee570837073431d5ebdeb530d0523d5f1b0d3d48fb892b28ec93cf438fcb5442b2b798edb644be47d1607249e09489591371fc678ffd11af50e4f8ff357013d7a1af2b38fadb46194d76b215a91d03e26e84c78e85e7215ed6cb8cb73a51c4c6d94a76b8c6067dabb6846a34569a8ad05ecb5261aaee633c5cdc01c0b22b91a99fc74e339bb663f4f491f4c0eef8f03b1b298611"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x2, 0xc36, 0x7fbf, 0x0, 0x8, 0x3ff, 0x5, 0x50, 0x1, 0x401}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0xffff}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) 21:32:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 407.870931][T25037] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 407.900967][T25037] team0: Device ipvlan0 failed to register rx_handler 21:32:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 21:32:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xfe, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480ef43b000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 21:32:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 408.074980][T25082] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 408.085324][T25082] team0: Device ipvlan0 failed to register rx_handler 21:32:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="d2ea", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 21:32:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 408.196989][ T19] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 408.204771][ T9706] usb 5-1: new high-speed USB device number 47 using dummy_hcd