x170 [ 3296.002607] ? rcu_softirq_qs+0x20/0x20 [ 3296.006579] ? filemap_map_pages+0xd92/0x1a20 [ 3296.011073] ? find_get_entries_tag+0x1400/0x1400 [ 3296.015908] ? lock_downgrade+0x900/0x900 [ 3296.020118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3296.025645] ? check_preemption_disabled+0x48/0x280 [ 3296.030656] ? debug_smp_processor_id+0x1c/0x20 [ 3296.035318] ? perf_trace_lock+0x14d/0x7a0 [ 3296.039551] ? __pte_alloc_kernel+0x220/0x220 [ 3296.044037] ? lock_is_held_type+0x210/0x210 [ 3296.048434] ? lock_is_held_type+0x210/0x210 [ 3296.052856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3296.058389] shmem_fault+0x25f/0x960 [ 3296.062093] ? zap_class+0x640/0x640 [ 3296.065798] ? shmem_read_mapping_page_gfp+0x1f0/0x1f0 [ 3296.071070] ? find_held_lock+0x36/0x1c0 [ 3296.075126] __do_fault+0x100/0x6b0 [ 3296.078787] ? lock_downgrade+0x900/0x900 [ 3296.082928] ? pmd_devmap_trans_unstable+0x220/0x220 [ 3296.088025] ? kasan_check_read+0x11/0x20 [ 3296.092165] ? do_raw_spin_unlock+0xa7/0x330 [ 3296.096560] ? do_raw_spin_trylock+0x270/0x270 [ 3296.101143] __handle_mm_fault+0x3ea6/0x5be0 [ 3296.105562] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3296.110395] ? lock_is_held_type+0x210/0x210 [ 3296.114796] ? retint_kernel+0x2d/0x2d [ 3296.118677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3296.124201] ? pmd_huge+0xf4/0x140 [ 3296.127765] ? zap_class+0x640/0x640 [ 3296.131477] ? zap_class+0x640/0x640 [ 3296.135180] ? find_held_lock+0x36/0x1c0 [ 3296.139236] ? handle_mm_fault+0x42a/0xc70 [ 3296.143462] ? lock_downgrade+0x900/0x900 [ 3296.147600] ? check_preemption_disabled+0x48/0x280 [ 3296.152608] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3296.157623] ? kasan_check_read+0x11/0x20 [ 3296.161761] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3296.167028] ? rcu_softirq_qs+0x20/0x20 [ 3296.170994] ? trace_hardirqs_off_caller+0x310/0x310 [ 3296.176087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3296.181617] ? check_preemption_disabled+0x48/0x280 [ 3296.186659] handle_mm_fault+0x54f/0xc70 [ 3296.190724] ? __handle_mm_fault+0x5be0/0x5be0 [ 3296.195310] ? find_vma+0x34/0x190 [ 3296.198846] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3296.203854] __get_user_pages+0xa3d/0x1ea0 [ 3296.208086] ? follow_page_mask+0x2160/0x2160 [ 3296.212569] ? perf_trace_lock+0x14d/0x7a0 [ 3296.216801] ? lock_is_held_type+0x210/0x210 [ 3296.221228] ? zap_class+0x640/0x640 [ 3296.224959] ? lock_acquire+0x1ed/0x520 [ 3296.228942] ? __mm_populate+0x31a/0x4d0 [ 3296.232996] ? lock_release+0xa00/0xa00 [ 3296.236975] ? perf_trace_sched_process_exec+0x860/0x860 [ 3296.242425] populate_vma_page_range+0x2db/0x3d0 [ 3296.247191] ? follow_page+0x420/0x420 [ 3296.251073] ? find_vma+0x34/0x190 [ 3296.254604] __mm_populate+0x286/0x4d0 [ 3296.258485] ? populate_vma_page_range+0x3d0/0x3d0 [ 3296.263406] ? down_read_killable+0x150/0x150 [ 3296.267896] ? security_mmap_file+0x174/0x1b0 [ 3296.272393] vm_mmap_pgoff+0x27f/0x2c0 [ 3296.276274] ? vma_is_stack_for_current+0xd0/0xd0 [ 3296.281140] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3296.286673] ksys_mmap_pgoff+0xf1/0x660 [ 3296.290660] ? do_syscall_64+0x9a/0x820 [ 3296.294631] ? find_mergeable_anon_vma+0xd0/0xd0 [ 3296.299412] ? trace_hardirqs_on+0xbd/0x310 [ 3296.303747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3296.309299] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3296.314656] ? trace_hardirqs_off_caller+0x310/0x310 [ 3296.319757] __x64_sys_mmap+0xe9/0x1b0 [ 3296.323642] do_syscall_64+0x1b9/0x820 [ 3296.327534] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3296.332890] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3296.337810] ? trace_hardirqs_on_caller+0x310/0x310 [ 3296.342818] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3296.347825] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 3296.354480] ? __switch_to_asm+0x40/0x70 [ 3296.358529] ? __switch_to_asm+0x34/0x70 [ 3296.362581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3296.367415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3296.372610] RIP: 0033:0x457669 [ 3296.375831] Code: Bad RIP value. [ 3296.379182] RSP: 002b:00007f664a3c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3296.386881] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 3296.394139] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 3296.401401] RBP: 000000000072bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 3296.408655] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f664a3c26d4 [ 3296.415908] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 00000000ffffffff [ 3296.428095] Task in /syz1 killed as a result of limit of /syz1 [ 3296.434155] memory: usage 307024kB, limit 307200kB, failcnt 2223 [ 3296.440397] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3296.447172] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3296.453416] Memory cgroup stats for /syz1: cache:4860KB rss:255824KB rss_huge:235520KB shmem:4624KB mapped_file:4620KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4740KB active_anon:255716KB inactive_file:8KB active_file:0KB unevictable:108KB 22:48:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 22:48:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x9}, 0xf) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:03 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xf000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:03 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x101201, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1b) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x1fffffffffffffe) r2 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0xffffffffffffffe1, 0x200000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) write$P9_RWRITE(r2, &(0x7f00000002c0)={0xb, 0x77, 0x2, 0x2}, 0xb) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000000c0)) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000001c0)={@local, @remote}, &(0x7f0000000200)=0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000140)=r4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000380)={0xa, 0x4, 0xfa00, {r6}}, 0xc) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000040)=0x7000) 22:48:03 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) times(&(0x7f0000000040)) rt_tgsigqueueinfo(r0, r0, 0x1a, 0x0) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') [ 3296.475613] Memory cgroup out of memory: Kill process 22271 (syz-executor1) score 1106 or sacrifice child [ 3296.485496] Killed process 22271 (syz-executor1) total-vm:70340kB, anon-rss:2204kB, file-rss:33560kB, shmem-rss:0kB [ 3296.497919] oom_reaper: reaped process 22271 (syz-executor1), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB 22:48:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$unix(r1, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) [ 3296.563380] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:04 executing program 4: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) perf_event_open(&(0x7f0000000000)={0x4000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) 22:48:04 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4080, 0x80) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$RTC_UIE_ON(r1, 0x7003) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) shmget(0x3, 0x2000, 0x78000800, &(0x7f0000ffb000/0x2000)=nil) r2 = getpid() ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000001440)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) process_vm_readv(r2, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/147, 0x93}, {&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/172, 0xac}], 0x1, 0x0) shmget(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) 22:48:04 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:04 executing program 2: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x7400, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffa, 0x200000) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x6, 0xe37, 0x8, 0x5, 0x4}) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) [ 3296.791218] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:04 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) listen(r0, 0x81) 22:48:04 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xa6, 0xffffffffffff8001}, {0x3, 0x5}]}, 0x14, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000380)=""/87) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r4 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x2, {0x2, 0xabe, 0xfffffffffffffff8, 0x3, 0x5, 0x8}}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000200)) 22:48:04 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xfffffff0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x5, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3296.960539] netlink: 'syz-executor2': attribute type 15 has an invalid length. [ 3296.995402] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) capset(0x0, &(0x7f0000000000)={0x0, 0xb}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) migrate_pages(r2, 0x1, &(0x7f00000000c0)=0x85f2, &(0x7f0000000100)=0xfffffffffffffffb) socketpair(0x2, 0x2, 0x7, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000200)={r4, @in={{0x2, 0x4e21, @rand_addr=0x4}}, [0x7, 0xffffffffffffff00, 0xffffffff, 0x8, 0xdb1, 0x2, 0x5, 0x8, 0x5, 0xc92e, 0x800, 0xe4, 0x0, 0x9, 0x7]}, &(0x7f0000000340)=0x100) 22:48:04 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xa6, 0xffffffffffff8001}, {0x3, 0x5}]}, 0x14, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000380)=""/87) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r4 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x2, {0x2, 0xabe, 0xfffffffffffffff8, 0x3, 0x5, 0x8}}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000200)) 22:48:04 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) 22:48:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x4000000}, 0xdcd6eb3c516781eb) [ 3297.040737] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:04 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x60080) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x8001, 0x3, [], &(0x7f0000000100)={0x9a091c, 0x3f, [], @string=&(0x7f0000000280)=0x4}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x2c, @local, 0x4e20, 0x4, 'wlc\x00', 0x8, 0x80, 0x17}, 0x2c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x3}) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f00000001c0)={0x1, 0x1, [0x6, 0x0, 0x1, 0x3, 0xad5, 0xabe, 0xc611, 0x1000]}) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xfffffffffffffbff, 0x2000) 22:48:04 executing program 2: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x20000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001280)) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x1]) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) perf_event_open(&(0x7f0000000000)={0x4000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x141b00, 0x0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, "717e105b622fd66fb5720d4c22e9258e4c16cd4315d71094074a71406c0e7bbf2ab5e6ddb6ad1d83ec0b2c5ed8e9c9ba1a7e3ef12337b1d3ad9f34c77b6155439752cafe8d5cfc43e81ccb6dff9cfdf26a03df4a72b4ff5e97e86a8188d3e91272ab2fa5c2712e94cbd9936b79adde56feafe44c79343466dcaa7b3005704591ac840489bb7c937ef0a37c660c6b39a906d82ade07c1e0ff3afc04ac9ac3246487eb7fd0f189e9fd0d45e790f6e142b7e9a95998d16139b132009679049a379eebc8193b929effb9191d7f513c8dca19aae223ad06203065d50b4eb050bcb159d9f591993840d113503336761ac20a09867c8fb4dd57c24201ade5ee848d0f753799173cd5483d26164ae87022118c99b92fed249711c9dbd4d9c51f972a3fd1286440b0f1339da7468e5d970cfb5bffbc5ff84457e5c06ede19baf578164661ac160ab196c66bcf9757bdc9ada211f4754b73657a55083ae8d2719041ae8ebcd54487a44f10f515598622a2e9c438ce03dc3419a8bc9b282f77912e32e083b960c7b91a04ce8d253fe0f23f024b5b704cbc6532a719186f8718c13493fb2f9ef45aac4d5544a9e9c32a9cd4cdbf759dd97cf3d8bdc4a9c00930ecfbe0a3bbd571997f248ea62dfec0d020a00c7efdcc823ee8906c3a37c07cbd4d48c1d9059fbc71b7df7e74a839653f3c3ca054801de7dee0b8cfacd2fc09a347827018a216638c6b79d7fa834b9b3a11c09a6a6e013b0fd985b3a65db21b7f2aa93fe3a2fbb837b2c695bda2f546b20eb7c6187c012ee7ebc257fbc4ac387d0414fea1698c58568da01d70f128754fc4723164e2b993c9a4f7a84d6df791042dbced4b3a827386a7d59451c4beadf51e9379673cdbd2a3879c7b5fa4fd60cac78eb164846283eab9ebc7c64087345cd56917fb9b9e379eb8dd52b6a13bc574a86da1588ff2c217bbf38fa35c008b5285c1d091ed9aa1d3a51e0154a341d12eac25a7b6d2e8480821b64aeb5874999d9b65a8bef9b98555e6f958c20d09a93c002510510faa5086c8a30dffb92864f8235ab4fb830c77e650bea15e74e23569ebd6ffc5b9070867aed242b8aadf41f0333d64b2cf8cbfbd243cdb11acb54c32b4155ad1085ac9554a6b24b26077cf9bd166360afc4ddedce4b9e7c522780094625e74777155f7c0802402290e14e06ef41fd708aaf008e80b6bf7e0b2f2d55b3d480040d91953ab067940e67484427a7450ce79e5f4b260ab3ee75e2d99977315b6beb8386540135378d01807eb8cbe62d3890d6340c27c2f11d087351fa1ee524e7f5e5c47b442504fa4be853993823d5510b24c053d367c354897de44d2fce2c76f5f4dc3de2977f42ef76afcc7f4d095eadf85d6c47d21ca72e51488eb2bcbcd462c775a813f70eac7e6e74cea9c7b03716cc15c67b5b96fbc256f4040262cb755e49a77662434a6034a47380dd23db99675629284fb406c96eb79b4102deb13e1208840263fe1b2e309106d856cd2c093589e8a98b1e6b7a65c73dc341de493403ba9b8bf95bb622e8fff87b73cd003b3f4955933d8794fd0d42517b827f164377a1e0e7d7462e3667a2b4e2ce61cd7b36e4115282c31b9209e998f046c23b43371759e2b652740fc8953744ba62adbcf3aba674c2bd5ab7494c53f6891d26074f399bc974f1c4c81c1b0ab6e666183b26217f011583af99d11b6173dc13e2ba14a35c08be50b11870d558b39f1905c2eac3a206665c5f254d3f5cbc78e8281fa6f4208c07e68e991b36d48e5c195e2c8e1caaff8391cc2a06922adc092091c5b015f847322a948121826fb92c6e7fd48437e3c4a0b4236fba68c1966b9f7e56f685daa9aa6b28b58ef5f1351ac9394d1dbda0d960c383a75f013b9aa8692e312a303ee116054f4b75f84d8d55777988fc347219f0f545dc0a27235f1a213d0c86cfc9dc1e2aabc087ab46608eb6556170606decba2b13df412307780e1fc77a9bbc80b6b7398556c8115682bd5d359be2fbe537a0f1e0f061f025408ae049e524190b228cd4fd7d583a9a6ae5cb0aa681fe4a2a5a2ba142c34b48606acae61c48c7b6b9b17d27adf1195f891b2110da5863fe7213623f26fb4a6edff4fa74f1567117a33bade960b5bbf818929610c8f5daf0485ef903871c6d20f373710144025287ef14988c08026a2b62ffee81acfa8069dbaef58f1dff15cf9f8758d565c96075c65c200712d65a3530d374fe2c5f53e2227bc7124716c774b3e1c7ad9c049355b4c06f700215d3cfd5526890350d3ff6aa4cacf111a269fc5fe010fcd7c293bae45d4b658a708db7f072f5ca9452bfe8099024e40a7822ec594f3ff47769f472c1dad5594460480b5e453a190d0474660bd522b3fb2df5d4a860f69139567e87ee936714c9e05a7b990d9b2b792e89ac38aa21d1facfa9a61ce9fc1e724862e61170785208e5882e16d238461d005a2a498cdd0f31978a09964b466447e1a256a4c4977207cc228f293292a7689cfcf5ea60865522bd19a27135c89d600281a4654a13c11fa2171417598bbc377581539d72c4225d2363de0776e29896504699282c601dffe357c96ea88d1bc0397b66dc12bb5544523316ae190b9495107feffa18fa502d8deb45c0cd3fe42bb8af92e9468c99869430afd905f43e505af58728c4d13e2294022318be6ff5811fa6685ba880ab1ff33214239fe14cb11a3d598274b8da62f07957f712788d12250acdd3956e7ca8459be2b3c7736b333d33657c11246e29e36b833a2fea7f8d7dd89888e3e9332ef113a985ca4a97b238f855ca6345e25996061a34d33f5d9ee2a65f904c8447a33bfd002c2699b2e1d98110e1831233c742ee1cb6f380d25743d6e9f796a587e3f7e1631a197c77db81a82f72bf5e03ad5d4774984c306f1f5e5cbbfe90eb56945aea878ed24fa7f4ff2c3b151a9a72237682fcf93897bce10a4eb8ac9a6b87094a5227be592d7e6231412ea289fc2c0af04a5ba93439c48a7000c83ef31c816c8abeeec941de83f68e409eb771d2949be0cfa39fb7879128d0b4c1262e53ff2d3863a1aa7193d5cee1857cc48bafa3717a2872f7a89e1d9c150c5fd559870fe13a753d39beb01481a58abf9e430570827c1571451c67b8787323eda22902361093dfcb735b1cb2422138bcf5c44963b3aca9142c7b84defa621101f5ef57505a8c825f5964c7b6c78355782a7595d8b7fb475b45564f96b7663f9ce604370d51cd27967dbd94ca38d5cbc58d5ebb7f784e638a70b534f5a6552de0c9949148c35703645e845ab2b782346e2c66f2f44c1c88f159c7285cb85f2975c7e219dc09bd8029383facefae9350e38d440c63533bd98b5a5100961b6f373b8f38df2ed924a2cb8171c199d71c14760242b43c3383aec638550e060977d1de117ba43fc80fcec72a72402de16f69eced864c43e27501d24a378d640f4a58618f7fd0e3f5b480d68bf33d332e0bf4f678cfa9a49ddc8045fa79a2ebcd314864062adc8c14c31bee87494ab8036dfa5ca2835724da12b6f879d3409dd1f8899465766f5956f5c0dcb41dc845e927cba376bec9ca50d3d48971d1f1d9ebd251391d98e23e2e43edfb12c8c182c3eacbbbae0a7250e0cd5051b6583d1248016e54a96681da609bf7e954bb4cf72eaebaf8441f86faeed97138379de1e9a56dd1d4aab0be9630391ca527e37a0a3639600af8da25e12ef7da472cc911f423858d487a22cbf05b44aee394d6d8dc17c38eb9faed4c8c8c20993b07c1d0e0e823d81316eda958971e0b3da8780cf30535b2e6f8bbedc7b65afcb80fb22f313820281677491d459e34acc03b67b5ff955068faeb8babdbe440003a0ab5c7c7a32ec423e99551163f4cbb4987d90d996a0ddfffe5e8cf787cd476ab960eda7398c82f208b0672846d3dc4616a1da91f8f67654e100529e0c38f68b875422b545af58790fcfdceaaf4c6011e3821e6738f6681ff7c130974aa33c523178a7139f5f7c86dd4b03092f4b088c3acd31a7f4370ce6418e2ca358719a01464d98a47694fa0b0e79b6fd1777138caacff54b97cfad60c4a408966917784620b677a216075d6561f2fd777be468e57f4b1834ac9ff4b0a9735a2443ebecf1f98d9cc7f3145a4585e8c360fe38f94f7cf627498632c91f47a09e1e565101f5504c0d4b5522eab7ad90287e775367434f7aca1ddc48903a55a83ac707167b007113bfdc16edc8bf833caba74f0870b81abdc5f9ee3c7a4d676adc184a9ee02f39e95df17114bebe17b8a2887883bab912de63ccbd302a51ca6c74a54f96f100e98f771a859d7c8f4cde0f91f954455f4abb27549605fec0060a6925c77750c0b97eb0da3a4c7da981a58af1e47c6224c7c52427497f0547af12be51aa5abb90296fd70fc77cd0523da883c212b47e654222d2f737f24f3176fa165b0b54bfaaaac9ed9308bde33f3953c7ea7ba7f72a72accfa4e1c2c2174508180b8350ea844b021c3cb4c3843e461290002d026a813dae5c0fb2dec3df867d57714e954c7cc95b15c29f635014cb538a0122e81c547487ecb0aeec239a444fef3a6ef5f7d90fe0990d55341d18dd8267407b5205b44edea181584fd8686d5705736a599c213438ccd47b2bbdabbc41ff658a2b51bab6b9b88e44cc422d49d5941ded274f3ab535d1764fc0b191c55c41cd889a62f4b764ef71708b2d2b48069ccdd6fa57e60ba637a28783473c595b1ccd19932ce93d4a57477b184c7c080d9d11bf2be71c85b56c5db3cc710df7163a042487a0d2310400cf053ed1b1528f468ffa083f06b964d818a7906b5f0053e4c5a76b65a32cc831258a70dcdb006aeb128eb7fa28a219c06e045e499f62491147578cdc25517caa1073c0a9c6cc73b5e872c703b1cfd653d2a3ace9d1583c7b6ee96122f64cbea6ad914dc415b8d4e9f3199b2e3c0bec2a02b80b51848d42c76b1fd6da7624271546ad49e4c78b37a7aa2b6844ff42eaa69495b3945d5130b804ab63a918185c815206444a054c5a6055b78b21a207c4040eb02e84f0be71540c70556b9eb48052aebee0fa073a002348e4049ad3087741065e384bb068f3aeecd547b272a4d0a025de01d0aea73574666bfac266d29b3bc85b3ad66334aa95159479e5f9fbe8812a8ddd1d3c796cbb8a9a16878a61a81e856c82ce1e8f612140e340678ac1e1b86e1da55072696a78ac3df82c1e21dda36c71081a5d808a5bcf8ef1dbc1edc6410aee09a6f8b2209abca2131c0695288c718d4313e76e4f36c89df02d45d3a2ce8ac5f3dd60cb6e9886c3a80bccc03a52ae6b758cfd697fbe659a10c5a0e9da910cc57a23978da64e4abc095a25784164ca0932882bd91c37d4ac96ea81ad9efa587358921bdaa8a20699f7e073732d1e20b657591659d65c823dd3e0952af374b3fad3c9c840aeacc201682e7a7f4e8da8e2dcf8d889a1409e9be9b9e8b2a9f89a5536a1b8086d6619457169e7aa70a41b509cad8cf0a69bfe92bdb5791f8b297f959e671f39c9c8833de4b49a2fcc5ed0ea3f6fe398ba3a4425fc0a3fee511a8e119aad16242b2ef83a3b267231f88340f264e2aacd8638923f6ae1696878241e84bd84226a1d9c1afb760d60765a24f4d65f169e0fed24bf4343e54d0a95f791af5ef56577b5df30d0dcf6e7aaabba751a3052deb3b0343ff2284c3895f15fdd1f47508d6754924d1c943868baa948956a0f1a86e09feda5d7992faca12352d78bb2f8549f8f05aa9cb047ba5800719d045c2aeb5855178b68bcee2d3219dbb06d7a6c11ea", 0x1000}, 0x1006) 22:48:04 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xa6, 0xffffffffffff8001}, {0x3, 0x5}]}, 0x14, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000380)=""/87) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r4 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x2, {0x2, 0xabe, 0xfffffffffffffff8, 0x3, 0x5, 0x8}}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000200)) [ 3297.244819] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:04 executing program 1: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000000, 0x10880) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x4200, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x3, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x200000) 22:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x600000000000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:04 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x101d0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:04 executing program 2: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x20000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001280)) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x1]) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) perf_event_open(&(0x7f0000000000)={0x4000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x141b00, 0x0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, "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", 0x1000}, 0x1006) 22:48:04 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xa6, 0xffffffffffff8001}, {0x3, 0x5}]}, 0x14, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000380)=""/87) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r4 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x2, {0x2, 0xabe, 0xfffffffffffffff8, 0x3, 0x5, 0x8}}) 22:48:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/187) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) [ 3297.414776] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x101, 0x0) r3 = semget$private(0x0, 0x1, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) r5 = getgid() lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000400)=[0x0, 0xee01]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000440)={{0x0, r4, r5, r6, r7, 0x80, 0x7ff}, 0x50, 0x8}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) 22:48:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x3f00000000000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:04 executing program 2: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x20000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001280)) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x1]) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) perf_event_open(&(0x7f0000000000)={0x4000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x141b00, 0x0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, "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", 0x1000}, 0x1006) 22:48:04 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xa6, 0xffffffffffff8001}, {0x3, 0x5}]}, 0x14, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000380)=""/87) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') 22:48:05 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x6) 22:48:05 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3297.623886] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3297.726042] Unknown ioctl 1074021776 22:48:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3297.753268] Unknown ioctl 1074021776 22:48:05 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xa6, 0xffffffffffff8001}, {0x3, 0x5}]}, 0x14, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000380)=""/87) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:05 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:05 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2de7d5b061565075, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) [ 3297.829823] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:05 executing program 1: socketpair$unix(0x1, 0x2000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x88800, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x10001, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$KIOCSOUND(r2, 0x4b2f, 0x10000) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:05 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xa6, 0xffffffffffff8001}, {0x3, 0x5}]}, 0x14, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000380)=""/87) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in=@empty}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10b000, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000280)={0x40, 0x2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000200)={'nat\x00'}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x81, 0x12833486, 0x0, 0x0, 0x100000}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) [ 3298.029140] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:05 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3f00}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:05 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x410d00) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r3}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000140)={0x8001}, 0x1) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x400, 0x8101) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000040)) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f00000001c0)={0x3d, 0x4, 0x7, 0x6, 0x4}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x9effffff00000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:05 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xa6, 0xffffffffffff8001}, {0x3, 0x5}]}, 0x14, 0x2) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="6b113647b5563b5579a8c2d728d074a81480e4ba482367e06eec65ce95bea5e0c73d5d7ae6ffa39f8165662884892ccbf5bf62806476a0b23774fead937df1e55dadfe66c68908d57875d687f9fc3c38b63d473ba92732b5d0af2abda50b177f9cb3513e0ed68ec8a874e95c1fd1abdeabf5de191df25d26eb894985c7c486d079c81a68cbb0f4d3cce2a96a75a1545d0f37056b3cb3df7f1eb5eeb43967a3c4c3043761e7ba5e1bddc704e893123ae8dcdd80b6f2d36b55a26b3a8173d82f8ed59af9c4ab2941de9c3a420f93151964fdb1b365724b2c34e8b5f1b1a23e11", 0xdf, 0x0) keyctl$link(0x8, r2, r3) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) fcntl$dupfd(r0, 0x0, r1) 22:48:05 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:05 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x101201) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x78) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000100)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/\x04\x00\x00\x00net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0x7f, 0x101, 0x9, 0x8}, 0x14) 22:48:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x500000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x200002) sendto$inet6(r2, &(0x7f0000000140)="1b5d6b2de842866036548dc001d35ac8d1b475f6ce5908d70b536d0f7bd73fe7acf3bb875cac573ff8849f44707f041c0786947a8723f63c6c205b359296d303e9d005a0f3cee49c076302a13a531a8000551c7f9a197193e83c0bd7a6b67ef1e05629f134582e283649452d209d47a23a78c2f629694138ecc9c41a7f26599a6b075159295e52162da1729ef75fc999b06ca110e65906c9ec9bdb7cc02f3314a84dc7bb3331efe3e7ee9f785475f18b80c03492d430317273b8717577bc0e4022294e5cedb8185d7e6328b80bfe9abd2b172e79b84c1ac3b18cb43c9bac5568ec01f2842cc0341e1f45c9d1b3de07944636666e24af", 0xf6, 0x800, &(0x7f0000000240)={0xa, 0x4e20, 0x81, @loopback, 0x100}, 0x1c) accept$unix(r1, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x2, 0x9, 0x10001, 0x9, 0x0, [{0x3, 0x0, 0x101, [], 0x2}, {0x3, 0x3, 0x4, [], 0x8}, {0xffffffffffffff7f, 0xffff, 0x4, [], 0x8001}, {0x1000000000000000, 0x2, 0x7, [], 0x9}, {0x6, 0x0, 0x1, [], 0x2}, {0x3, 0x6, 0x1, [], 0x1}, {0x3, 0x800, 0x9}, {0x0, 0xffffffffffffff09, 0x1, [], 0x8}, {0x9, 0x0, 0x0, [], 0x4}, {0x1, 0x7, 0x4, [], 0xe6}, {0x20, 0x6, 0x0, [], 0x8001}, {0x81, 0xff, 0x3fffffffc000000, [], 0x1}, {0x9, 0xfe4, 0x7f, [], 0x4}, {0x4, 0x4, 0xfffffffffffffffa, [], 0x1ff}, {0xf4, 0x5, 0x8, [], 0x287}, {0x46e4, 0x3, 0xbf5f, [], 0xfffffffffffffff8}, {0x2a, 0x401, 0x931, [], 0xfffffffffffffffe}, {0x9, 0x6, 0x400040, [], 0x64}, {0x7, 0x2, 0x7, [], 0xfffffffeffffffff}, {0xb487, 0xa4, 0x6, [], 0x81}, {0x4, 0x9, 0x8c7}, {0x4, 0x2, 0x9, [], 0x1000}, {0x101, 0x0, 0xa9, [], 0x401}, {0x8001, 0x1ff, 0x3, [], 0xcdc}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='system.advise\x00', &(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x15, 0x2) r3 = accept(r2, 0x0, &(0x7f0000000340)=0xfffffffffffffda0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x992f, @remote, 0x9}, 0x1c) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='./file0\x00') setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000280)=0x3ff, 0x8) capset(0x0, &(0x7f0000000000)={0xfffffffffffffffe, 0x8, 0x0, 0x0, 0xf847}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:05 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) rt_tgsigqueueinfo(r0, 0x0, 0x1, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:05 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x300000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x10000) recvmsg$kcm(r1, &(0x7f0000001480)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/204, 0xcc}, {&(0x7f00000012c0)=""/149, 0x95}, {&(0x7f0000000100)=""/43, 0x2b}], 0x4, &(0x7f0000001380)=""/235, 0xeb}, 0x10000) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) 22:48:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8100, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffff4295, 0x81, 0xfcc6, 0x8}}) 22:48:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:06 executing program 4: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000370200010900000000000000a4047a00fe410000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1e) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3f00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:06 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:06 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x4, [0x1, 0x5, 0x0, 0x6]}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/122, 0x7a) 22:48:06 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, 0x4, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000000)='eql\x00', 0x44, 0x3, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) 22:48:06 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:06 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r2}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:06 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3298.867819] syz-executor0 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=1000 22:48:06 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40400, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x104) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) [ 3298.946585] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3298.975228] CPU: 1 PID: 1002 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3298.982541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3298.991907] Call Trace: [ 3298.994518] dump_stack+0x244/0x39d [ 3298.998163] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3299.003384] dump_header+0x27b/0xf72 [ 3299.007134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3299.012685] ? check_preemption_disabled+0x48/0x280 [ 3299.017743] ? pagefault_out_of_memory+0x197/0x197 22:48:06 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:06 executing program 4: getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r1}, 0x14) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3299.022691] ? debug_smp_processor_id+0x1c/0x20 [ 3299.027387] ? perf_trace_lock+0x14d/0x7a0 [ 3299.031657] ? lock_is_held_type+0x210/0x210 [ 3299.036090] ? __lock_is_held+0xb5/0x140 [ 3299.040175] ? debug_smp_processor_id+0x1c/0x20 [ 3299.044861] ? perf_trace_lock+0x14d/0x7a0 [ 3299.049113] ? zap_class+0x640/0x640 [ 3299.052850] ? print_usage_bug+0xc0/0xc0 [ 3299.056933] ? lock_is_held_type+0x210/0x210 [ 3299.061376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3299.066934] ? find_held_lock+0x36/0x1c0 [ 3299.071018] ? mark_held_locks+0xc7/0x130 [ 3299.075189] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3299.080312] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3299.085449] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3299.090075] ? trace_hardirqs_on+0xbd/0x310 [ 3299.094414] ? kasan_check_read+0x11/0x20 [ 3299.098582] ? ___ratelimit+0x3b4/0x672 [ 3299.102577] ? trace_hardirqs_off_caller+0x310/0x310 [ 3299.107697] ? trace_hardirqs_on+0x310/0x310 [ 3299.112145] ? lock_downgrade+0x900/0x900 [ 3299.116322] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3299.121459] ? ___ratelimit+0x3b9/0x672 22:48:06 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd001010000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:06 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3299.125494] ? idr_get_free+0xf70/0xf70 [ 3299.129482] ? _raw_spin_unlock_irq+0x27/0x80 [ 3299.133990] ? _raw_spin_unlock_irq+0x27/0x80 [ 3299.138511] oom_kill_process.cold.27+0x10/0x903 [ 3299.143292] ? _raw_spin_unlock_irq+0x27/0x80 [ 3299.147812] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3299.152419] ? oom_evaluate_task+0x540/0x540 [ 3299.156845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3299.162416] ? cgroup_procs_next+0x70/0x70 [ 3299.166689] ? _raw_spin_unlock_irq+0x60/0x80 [ 3299.171215] ? oom_badness+0xaa0/0xaa0 22:48:06 executing program 4: getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r1}, 0x14) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3299.175125] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3299.179910] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3299.185465] ? mem_cgroup_iter_break+0x30/0x30 [ 3299.190089] ? cgroup_file_notify+0x226/0x2f0 [ 3299.194605] out_of_memory+0xa84/0x1430 [ 3299.198594] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3299.203198] ? kasan_check_read+0x11/0x20 [ 3299.207374] ? oom_killer_disable+0x3a0/0x3a0 [ 3299.211912] mem_cgroup_out_of_memory+0x15e/0x210 [ 3299.216778] ? memory_oom_group_write+0x160/0x160 [ 3299.221640] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3299.226507] ? page_counter_try_charge+0x1c1/0x220 [ 3299.231454] try_charge+0xda9/0x1700 [ 3299.235197] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3299.239893] ? rcu_pm_notify+0xc0/0xc0 [ 3299.243819] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3299.248867] ? __alloc_pages_nodemask+0xb87/0xea0 [ 3299.253740] ? zap_class+0x640/0x640 [ 3299.257493] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3299.262567] ? find_held_lock+0x36/0x1c0 [ 3299.266655] ? cache_grow_begin+0x65/0x8c0 [ 3299.270910] memcg_kmem_charge_memcg+0x7c/0x120 [ 3299.275599] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3299.280115] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3299.285681] cache_grow_begin+0x43f/0x8c0 [ 3299.289867] ? do_raw_spin_unlock+0xa7/0x330 [ 3299.294343] fallback_alloc+0x204/0x2e0 [ 3299.298363] ____cache_alloc_node+0x1c7/0x1e0 [ 3299.302882] kmem_cache_alloc+0x1f8/0x730 [ 3299.307060] ? sock_destroy_inode+0x60/0x60 [ 3299.311401] sock_alloc_inode+0x1d/0x260 [ 3299.315484] ? sock_destroy_inode+0x60/0x60 [ 3299.319816] alloc_inode+0x63/0x190 [ 3299.323487] new_inode_pseudo+0x71/0x1a0 [ 3299.327573] ? prune_icache_sb+0x1c0/0x1c0 [ 3299.331830] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3299.337392] ? rcu_pm_notify+0xc0/0xc0 [ 3299.341314] sock_alloc+0x41/0x270 [ 3299.344874] __sock_create+0x175/0x930 [ 3299.348783] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3299.354343] ? kernel_sock_ip_overhead+0x570/0x570 [ 3299.359300] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3299.364884] __sys_socket+0x106/0x260 [ 3299.368695] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3299.373313] ? move_addr_to_kernel+0x70/0x70 [ 3299.377746] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3299.383126] ? trace_hardirqs_off_caller+0x310/0x310 [ 3299.388264] __x64_sys_socket+0x73/0xb0 [ 3299.392279] do_syscall_64+0x1b9/0x820 [ 3299.396193] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3299.401579] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3299.406528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3299.411389] ? trace_hardirqs_on_caller+0x310/0x310 [ 3299.416424] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3299.421485] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3299.426522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3299.431390] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3299.436596] RIP: 0033:0x457669 [ 3299.439807] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3299.458811] RSP: 002b:00007f010550bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3299.466535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 22:48:06 executing program 4: getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r1}, 0x14) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3299.473818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 3299.481100] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3299.488381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f010550c6d4 [ 3299.495668] R13: 00000000004c518d R14: 00000000004d94a0 R15: 00000000ffffffff [ 3299.573175] Task in /syz0 killed as a result of limit of /syz0 [ 3299.579332] memory: usage 307200kB, limit 307200kB, failcnt 1007149 [ 3299.585758] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3299.592610] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3299.598814] Memory cgroup stats for /syz0: cache:200KB rss:141024KB rss_huge:65536KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:141136KB inactive_file:0KB active_file:0KB unevictable:0KB 22:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x0, "cecbbfc03e022efb"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x800, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffefffffff5) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x2e09c892, 0x100, 0x5, 0x8ed, 0xdf, 0x81, 0x1000, {0x0, @in6={{0xa, 0x4e22, 0x2e0, @mcast2, 0x9}}, 0x3f, 0x9, 0x7, 0xeaf8, 0x1}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x3, 0x9c6d, 0xffffffffffffffff}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, &(0x7f0000000100)={0x1000, 0x80000000, 0x4, 0x7}) ioctl$VIDIOC_OVERLAY(r7, 0x4004560e, &(0x7f0000000180)=0x8) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x80000007, 0xbed, 0x3, 0x800, 0x5b, 0x7, 0x5}]}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:07 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:07 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:07 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff0600001e000000"], 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000240)={{0x4, 0x8}, {0x4, 0x7}, 0x6, 0x3, 0x7f}) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x2, @mcast2, 0xfd}}, 0x100000000, 0xffffffff, 0x5, 0x4, 0x44}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r4}, 0x8) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000300)={0x9, 0x9, 0x3}) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x4, 0x8100) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000180)={0x0, @speck128, 0x2, "0c407284e6cb149d"}) 22:48:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3299.620278] Memory cgroup out of memory: Kill process 677 (syz-executor0) score 1106 or sacrifice child [ 3299.630045] Killed process 677 (syz-executor0) total-vm:70604kB, anon-rss:2220kB, file-rss:33560kB, shmem-rss:0kB [ 3299.644825] oom_reaper: reaped process 677 (syz-executor0), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB 22:48:07 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:07 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:07 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5c251621) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x700000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f0000000100)={0x0, 0xa}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x521a00, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:07 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:07 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:07 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x1, 0x4ac2db6d}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:07 executing program 4: getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x1}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:07 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x10000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm-control\x00', 0x4400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x7fffffff, 0x8, 0x44cd, 0x6, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r3, 0x0, 0x1, 0x100000001, 0x9, 0xfffffffffffff332}, &(0x7f0000000340)=0x14) perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x70, 0x5, 0xa9, 0xff, 0x9, 0x0, 0x4, 0x4000, 0x2, 0x0, 0x6, 0x2, 0x1ff, 0x2, 0x4c, 0x8001, 0x7fff, 0x8001, 0x8, 0x1, 0x9, 0x8, 0x101, 0xd7, 0x5, 0x10000, 0xfffffffffffeffff, 0x0, 0x9, 0x8, 0xa8c, 0x5, 0x5, 0x4, 0x199d, 0x2d, 0x100000000, 0x0, 0x4, 0x0, @perf_config_ext={0xe05, 0x5}, 0x1080, 0x1f, 0x3, 0x0, 0x61, 0x6, 0x8000}, r0, 0x10, r0, 0x65aec03c8f0c47b4) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000000)='fd/4\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000380)={0x0, 0x3, 0xff, 0x0, 0x3e04}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x4, 0x820a, 0x1, 0xe3fc, 0xfffffffffffffffe, 0x81, 0x400, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0x14}, 0x10000}}, 0x4cd76733, 0x4, 0x1, 0xfff}, 0x98) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000003c0)=0xaf) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)=0xfffffffffffffffc, 0x4) 22:48:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:07 executing program 4: getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0xfffffffffffffffc, {{0x2, 0x4e20, @rand_addr=0x7}}}, 0x88) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:07 executing program 1: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x57, "f6c2552af73205abd3ad0cb5bbb3357ce496e3a8cc24607ac8100b11d345d30b8f5b14e8585d41566cbc1919b45e090b49f606939c24159839e21c1a9ba6a2a5957af4a983d919e7b945e3bc3099d8fdcb9dec034db410"}, &(0x7f00000000c0)=0x5f) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r0, 0x5}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r0, 0x3}, &(0x7f00000001c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffffff0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:07 executing program 4: getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:07 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) getgid() write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000040000000000000000000000010000000000000000005a0000000000040000000000001800000000056acffff3240de1f489f403eb512648ddd4c33ceac4bb73e2760000000000000009c632992eb5c700b44d09b4229ab46622ff79a31f0500374051285dff3fc605c6b17fbaf5b519dbbe45950432f96071c251bd468b262367d71c8e519590a1e68b2b"], 0x2c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x90}, 0x2c) 22:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:08 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff7f00000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0400, 0x21) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)={0x1194, 0x2f, 0x0, 0x70bd2a, 0x25dfdbfc, {0x13}, [@typed={0x8, 0x5, @fd=r1}, @nested={0x110c, 0x88, [@typed={0x8, 0x13, @u32=0x49}, @typed={0xc, 0x89, @u64=0x909}, @generic="0d4c31b176c592091bf3af5666835ae0a14c39fd40fce5e04e96278ec2f9114a428573ddb96d99fcace2b7c94c5e5ca6c3b0563a80f9076b308ecc61c4cf7ddbf836a5e2fed9a9ba18bf1231c6505e475bb8ec230eb4e6f8fb52f335a1b55260fd8062e5c756caefcb52438399684c273c5f6ef54b1be80338b3f7c37670953e773bbbe793cd54f743baf6ca39092481b2da26dca792af5ee6a5ea57e1a8f7e46d2c2d5a92f3fc4de7194c755e967774a952d9fac996ceb052571829835d9d819ccf87f2dc7f2a493666f393798a2255d9ecc6ffd7e88697e5b11b7417ea111d576510f0", @typed={0x8, 0x53, @uid=r2}, @typed={0x8, 0x8b, @ipv4=@remote}, @generic="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"]}, @typed={0x8, 0x1c, @fd=r0}, @typed={0x14, 0x4a, @ipv6=@ipv4={[], [], @rand_addr=0x4}}, @generic="bfa5a0b962f4e057be575fd0f7c90fc2541e2956f6c0a8734a78dfbc5e60a4b783da370fcf39b1b3b80324f043fdf37fd4f61d78911c804038934a8f53e68c0f6933ee4254d79f75", @typed={0x8, 0x78, @uid=r2}]}, 0x1194}, 0x1, 0x0, 0x0, 0xc080}, 0x50) 22:48:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x610020fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x800000000000000, 0xfffffffffffffffd}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x70ba40, 0x90) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffff00000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:08 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x80000000, 0x4) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x0, 0x7fffffff, 0x4, 0xff, 0x0, 0xffffffff, 0x10, 0x5, 0xffffffff, 0x8, 0x0, 0xb7c, 0xb2, 0x5, 0x3, 0x4, 0x7fffffff, 0x0, 0x3, 0xc7e, 0x7, 0x8001, 0x0, 0x1, 0xffffffff, 0xfff, 0x80000000, 0xd7, 0x81, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x1, 0x0, 0x400, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1220, 0x8, 0x100, 0x3, 0x4, 0xfffffffffffffffc, 0x191c}, 0x0, 0x4, 0xffffffffffffff9c, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x80) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x2a, 0xffff, 0x10001, 0xcee1, 0x5, 0x3, 0x2b59, 0x41, 0x1a5a, 0x1, 0x100000000, 0x80000001}) 22:48:08 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x1000000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:08 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3300.973448] IPVS: ftp: loaded support on port[0] = 21 22:48:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x778f510c, 0xa0080) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x10d006, 0x11000, 0x1, 0xff, 0x8}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:08 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3301.266111] IPVS: ftp: loaded support on port[0] = 21 22:48:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x323000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000100)) 22:48:08 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8b02bb193a8b06a2, 0x2) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/78, &(0x7f0000000080)=0x4e) 22:48:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:08 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a00, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:08 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x15, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000180)=""/207, &(0x7f0000000280)=0xcf) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x81, 0x7e402) r5 = dup2(r3, r2) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r1, r5}) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000100)=[0x943, 0x101]) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:09 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x2000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/15) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x50080, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x402040, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) dup2(r0, r1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) [ 3301.726726] validate_nla: 18 callbacks suppressed [ 3301.726738] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:09 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3301.823293] netlink: 'syz-executor2': attribute type 15 has an invalid length. 22:48:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB="020001007386ddc3f2c0f8eccaf66c7c81b9f687bfcd06eccfa0f39600576183133e46d0eb38818d405e7868edeb13779ca11f2cea13c1334c8275f0ecf6a573c86ea230c9c1081e60afb535563f67c9ea03acd36a76e0b06af35411b6c584ccd7ad23c307cab8d5cf20209bf2caa37ca6dbcf1ca7b3421788e0beefca58d738469761014e24afe45d74d5be35170103a8009c4ea31895bcaece0d0b78290a68ce3075213bdea7f4a421601a68f73a398ee866e64bd4a255776688054a17d9245bb1af144a4dfacfc2f5c22da8c9663814f2cf624b375d8881f17f2b45672e97b78850b49ea56d58b4741a691c3eb1197b47ce9babb4859bfa16b55ba7f87099ec9f3023cf60f62237292d14bfd4b70d554c8cf14394608c2438713264f22a3bbeacc252850c9fa80c3f82d57ec7108f9e93d632bab9f3d637dced278aba34ae16a0d9d8bc2c0c48ee5cd9af359be8ebead25c720c8e7f656ca620bbb842fb4a5efefee313007336c3e5572aa80d0ce878bd313ee1c50b23e49400e127e524523d63de9435a18b7f7027dd785f114eff902bc688a6b218879cbe6da7c209ba600bc603a8"], &(0x7f0000000100)=0xa) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 22:48:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8100000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x60900, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x11) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:09 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:09 executing program 2: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3301.952313] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4000000000000000, 0x8000) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000000000200) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000040)=0x878) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000000c0)={0x8, 0x1, 0xffffffffffff342c}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x1e, 0x100, 0x0, 0x2, 0x6, 0x2, 0x7, 0x1f, r5}, &(0x7f0000000200)=0x20) ioctl$FICLONE(r1, 0x40049409, r1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 22:48:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x200000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x100}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000180)) accept$unix(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SMI(r1, 0xaeb7) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x300, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x3, 0x0, 0x0) 22:48:09 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 3302.238643] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000000c0)={0x1ff, 0xfffffffffffffff9, 0x2, 0x7, 0x6, 0x6}) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) 22:48:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c00, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="08de38b82e3627760f2368e83d7780ed8b752814ff", 0x15}, {&(0x7f0000000040)="65f8945c95c425b300e9d92ee6306a3fb76a5e7602c65344239ed8bbdf4c9a245d782fdc4d833b98c4e29c76d7997c", 0x2f}, {&(0x7f0000000100)="799a56ae73de43aa4d10853e1952fddd7f582d7ca1732851242b32413375c08f2a3869f055ecb708d04edc7df54b6fc9d456c26bd92795a23020844994cf0d2872f8759aac495a431894cc272dffa44c13546de81fbd6b2d789541583062a0b534c27a70bf303c12e9b5590f2cda16495e127d32ac66555d9136118b4f424b4748b30f7b9ab46d607fe9c16fd718dbfc55947da7126987f428025c7426", 0x9d}, {&(0x7f00000001c0)="44b52bfbbb0f9ca4c86f8fb2c7f47adbc82232d44ef227fd91b9bc0120f86b46b251f68f", 0x24}], 0x4) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x3, 0x0, 0x0) 22:48:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 3302.377908] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:09 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) bind$tipc(r1, 0x0, 0x0) 22:48:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x9, 0x10002) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x837, 0x2000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x42000) ioctl$TCSBRK(r4, 0x5409, 0x80) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0x9ce6d0895c3b7d1b) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000002c0)={0x1, 0x0, 0x2, 0xfffffffffffffe00}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500)) r6 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000380)='rxrpc\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r6) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000004c0)={0x101, r5}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L+', 0x9}, 0x28, 0x2) 22:48:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="08de38b82e3627760f2368e83d7780ed8b752814ff", 0x15}, {&(0x7f0000000040)="65f8945c95c425b300e9d92ee6306a3fb76a5e7602c65344239ed8bbdf4c9a245d782fdc4d833b98c4e29c76d7997c", 0x2f}, {&(0x7f0000000100)="799a56ae73de43aa4d10853e1952fddd7f582d7ca1732851242b32413375c08f2a3869f055ecb708d04edc7df54b6fc9d456c26bd92795a23020844994cf0d2872f8759aac495a431894cc272dffa44c13546de81fbd6b2d789541583062a0b534c27a70bf303c12e9b5590f2cda16495e127d32ac66555d9136118b4f424b4748b30f7b9ab46d607fe9c16fd718dbfc55947da7126987f428025c7426", 0x9d}, {&(0x7f00000001c0)="44b52bfbbb0f9ca4c86f8fb2c7f47adbc82232d44ef227fd91b9bc0120f86b46b251f68f", 0x24}], 0x4) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:09 executing program 2: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3302.563094] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 3302.579873] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:09 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3302.639688] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3302.668491] CPU: 0 PID: 23716 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3302.675897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3302.675908] Call Trace: [ 3302.687864] dump_stack+0x244/0x39d [ 3302.691519] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3302.696738] ? mark_held_locks+0x130/0x130 [ 3302.700989] ? mark_held_locks+0x130/0x130 [ 3302.705245] dump_header+0x27b/0xf72 [ 3302.708982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3302.714535] ? check_preemption_disabled+0x48/0x280 [ 3302.719571] ? pagefault_out_of_memory+0x197/0x197 [ 3302.724514] ? debug_smp_processor_id+0x1c/0x20 [ 3302.729200] ? perf_trace_lock+0x14d/0x7a0 [ 3302.733475] ? lock_is_held_type+0x210/0x210 [ 3302.737900] ? __lock_is_held+0xb5/0x140 [ 3302.741985] ? debug_smp_processor_id+0x1c/0x20 [ 3302.746689] ? perf_trace_lock+0x14d/0x7a0 [ 3302.750950] ? zap_class+0x640/0x640 [ 3302.754699] ? print_usage_bug+0xc0/0xc0 [ 3302.758797] ? lock_is_held_type+0x210/0x210 [ 3302.763230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3302.768782] ? find_held_lock+0x36/0x1c0 [ 3302.772874] ? mark_held_locks+0xc7/0x130 [ 3302.777036] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3302.782153] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3302.787278] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3302.791880] ? trace_hardirqs_on+0xbd/0x310 [ 3302.796221] ? kasan_check_read+0x11/0x20 [ 3302.800381] ? ___ratelimit+0x3b4/0x672 [ 3302.804373] ? trace_hardirqs_off_caller+0x310/0x310 [ 3302.809497] ? trace_hardirqs_on+0x310/0x310 [ 3302.813930] ? lock_downgrade+0x900/0x900 [ 3302.818100] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3302.823218] ? ___ratelimit+0x3b9/0x672 [ 3302.827210] ? idr_get_free+0xf70/0xf70 [ 3302.831201] ? _raw_spin_unlock_irq+0x27/0x80 [ 3302.835710] ? _raw_spin_unlock_irq+0x27/0x80 [ 3302.840240] oom_kill_process.cold.27+0x10/0x903 [ 3302.845010] ? _raw_spin_unlock_irq+0x27/0x80 [ 3302.849522] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3302.854124] ? oom_evaluate_task+0x540/0x540 [ 3302.858595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3302.864160] ? cgroup_procs_next+0x70/0x70 [ 3302.868411] ? _raw_spin_unlock_irq+0x60/0x80 [ 3302.872926] ? oom_badness+0xaa0/0xaa0 [ 3302.876840] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3302.881615] ? mem_cgroup_iter_break+0x30/0x30 [ 3302.886226] ? mark_held_locks+0xc7/0x130 [ 3302.890392] out_of_memory+0xa84/0x1430 [ 3302.894382] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3302.898985] ? kasan_check_read+0x11/0x20 [ 3302.903154] ? oom_killer_disable+0x3a0/0x3a0 [ 3302.907688] mem_cgroup_out_of_memory+0x15e/0x210 [ 3302.912564] ? memory_oom_group_write+0x160/0x160 [ 3302.917421] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3302.922290] ? page_counter_try_charge+0x1c1/0x220 [ 3302.927240] try_charge+0xda9/0x1700 [ 3302.930973] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3302.935660] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3302.940600] ? kasan_check_read+0x11/0x20 [ 3302.944767] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3302.950064] ? rcu_softirq_qs+0x20/0x20 [ 3302.954073] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3302.959630] ? print_usage_bug+0xc0/0xc0 [ 3302.963740] ? lock_page_memcg+0x350/0x350 [ 3302.967993] ? lock_acquire+0x1ed/0x520 [ 3302.971985] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3302.977368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3302.982922] ? check_preemption_disabled+0x48/0x280 [ 3302.987967] memcg_kmem_charge_memcg+0x7c/0x120 [ 3302.992666] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3302.997188] memcg_kmem_charge+0x149/0x350 [ 3303.001455] __alloc_pages_nodemask+0x75e/0xea0 [ 3303.006138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3303.011692] ? check_preemption_disabled+0x48/0x280 [ 3303.016746] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3303.021793] ? debug_smp_processor_id+0x1c/0x20 [ 3303.026476] ? perf_trace_lock+0x14d/0x7a0 [ 3303.030741] ? check_preemption_disabled+0x48/0x280 [ 3303.035782] ? lock_is_held_type+0x210/0x210 [ 3303.040217] ? __lock_acquire+0x62f/0x4c20 [ 3303.044475] ? lock_is_held_type+0x210/0x210 [ 3303.048918] ? print_usage_bug+0xc0/0xc0 [ 3303.053016] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3303.058575] alloc_pages_current+0x173/0x350 [ 3303.063003] pte_alloc_one+0x1b/0x1a0 [ 3303.066826] __pte_alloc+0x2a/0x350 [ 3303.070470] copy_page_range+0x2017/0x2ee0 [ 3303.074743] ? mark_held_locks+0x130/0x130 [ 3303.079017] ? kernel_text_address+0x79/0xf0 [ 3303.083460] ? __pmd_alloc+0x450/0x450 [ 3303.087367] ? __rb_insert_augmented+0x3b2/0x1890 [ 3303.092220] ? lock_is_held_type+0x210/0x210 [ 3303.096645] ? rb_insert_color_cached+0x14b0/0x14b0 [ 3303.101675] ? save_stack+0xa9/0xd0 [ 3303.105316] ? zap_class+0x640/0x640 [ 3303.109049] ? kasan_kmalloc+0xc7/0xe0 [ 3303.112945] ? kasan_slab_alloc+0x12/0x20 [ 3303.117095] ? kmem_cache_alloc+0x12e/0x730 [ 3303.121421] ? zap_class+0x640/0x640 [ 3303.125147] ? __x64_sys_clone+0xbf/0x150 [ 3303.129326] ? do_syscall_64+0x1b9/0x820 [ 3303.133403] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3303.138784] ? find_held_lock+0x36/0x1c0 [ 3303.142869] ? anon_vma_fork+0x5ef/0x820 [ 3303.146952] ? lock_downgrade+0x900/0x900 [ 3303.151109] ? lock_release+0xa00/0xa00 [ 3303.155086] ? perf_trace_sched_process_exec+0x860/0x860 [ 3303.160545] ? __lock_is_held+0xb5/0x140 [ 3303.164629] ? up_write+0x7b/0x220 [ 3303.168183] ? down_write_nested+0x130/0x130 [ 3303.172619] ? anon_vma_interval_tree_insert+0x2c9/0x370 [ 3303.178109] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3303.183134] ? vma_compute_subtree_gap+0x160/0x240 [ 3303.188076] ? validate_mm_rb+0xaa/0xc0 [ 3303.192061] ? __vma_link_rb+0x26c/0x370 [ 3303.196139] copy_process+0x45e9/0x87a0 [ 3303.200162] ? __cleanup_sighand+0x70/0x70 [ 3303.204404] ? debug_smp_processor_id+0x1c/0x20 [ 3303.209078] ? perf_trace_lock+0x14d/0x7a0 [ 3303.213334] ? find_held_lock+0x36/0x1c0 [ 3303.217410] ? lock_is_held_type+0x210/0x210 [ 3303.221825] ? try_to_wake_up+0x11c/0x1440 [ 3303.226073] ? lock_downgrade+0x900/0x900 [ 3303.230230] ? lock_downgrade+0x900/0x900 [ 3303.234390] ? zap_class+0x640/0x640 [ 3303.238113] ? trace_hardirqs_off+0xb8/0x310 [ 3303.242542] ? kasan_check_read+0x11/0x20 [ 3303.246707] ? trace_hardirqs_on+0x310/0x310 [ 3303.251126] ? do_raw_spin_trylock+0x270/0x270 [ 3303.255712] ? lock_pin_lock+0x350/0x350 [ 3303.259805] ? find_held_lock+0x36/0x1c0 [ 3303.263887] ? do_wp_page+0x127c/0x2920 [ 3303.267871] ? lock_downgrade+0x900/0x900 [ 3303.272029] ? wake_up_page_bit+0x6f0/0x6f0 [ 3303.276359] ? print_usage_bug+0xc0/0xc0 [ 3303.280434] ? kasan_check_read+0x11/0x20 [ 3303.284590] ? do_raw_spin_unlock+0xa7/0x330 [ 3303.289005] ? do_raw_spin_trylock+0x270/0x270 [ 3303.293590] ? pgd_free+0x380/0x380 [ 3303.297232] ? _raw_spin_unlock+0x2c/0x50 [ 3303.301392] ? do_wp_page+0x528/0x2920 [ 3303.305288] ? __lock_acquire+0x62f/0x4c20 [ 3303.309536] ? finish_mkwrite_fault+0x650/0x650 [ 3303.314230] ? __lock_acquire+0x62f/0x4c20 [ 3303.318481] ? mark_held_locks+0x130/0x130 [ 3303.322748] ? lock_downgrade+0x900/0x900 [ 3303.326926] ? mark_held_locks+0x130/0x130 [ 3303.331166] ? rcu_softirq_qs+0x20/0x20 [ 3303.335162] ? mark_held_locks+0x130/0x130 [ 3303.339405] ? check_preemption_disabled+0x48/0x280 [ 3303.344426] ? lock_is_held_type+0x210/0x210 [ 3303.348844] ? zap_class+0x640/0x640 [ 3303.352563] ? perf_trace_lock+0x14d/0x7a0 [ 3303.356809] ? mark_held_locks+0x130/0x130 [ 3303.361057] ? check_preemption_disabled+0x48/0x280 [ 3303.366083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3303.371627] ? check_preemption_disabled+0x48/0x280 [ 3303.376661] ? __lock_is_held+0xb5/0x140 [ 3303.380743] ? print_usage_bug+0xc0/0xc0 [ 3303.384821] ? debug_smp_processor_id+0x1c/0x20 [ 3303.389520] ? print_usage_bug+0xc0/0xc0 [ 3303.393605] ? print_usage_bug+0xc0/0xc0 [ 3303.397675] ? lock_is_held_type+0x210/0x210 [ 3303.402087] ? find_held_lock+0x36/0x1c0 [ 3303.406170] ? __lock_acquire+0x62f/0x4c20 [ 3303.410420] ? __lock_acquire+0x62f/0x4c20 [ 3303.414680] ? mark_held_locks+0x130/0x130 [ 3303.418929] ? kasan_check_read+0x11/0x20 [ 3303.423087] ? do_raw_spin_lock+0x14f/0x350 [ 3303.427420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3303.432966] ? check_preemption_disabled+0x48/0x280 [ 3303.437990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3303.443538] ? check_preemption_disabled+0x48/0x280 [ 3303.448571] ? debug_smp_processor_id+0x1c/0x20 [ 3303.453246] ? perf_trace_lock+0x14d/0x7a0 [ 3303.457498] ? lock_is_held_type+0x210/0x210 [ 3303.461918] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3303.466771] ? zap_class+0x640/0x640 [ 3303.470493] ? touch_atime+0x103/0x320 [ 3303.474387] ? zap_class+0x640/0x640 [ 3303.478106] ? atime_needs_update+0x710/0x710 [ 3303.482614] ? zap_class+0x640/0x640 [ 3303.486349] ? find_held_lock+0x36/0x1c0 [ 3303.490425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3303.495972] ? check_preemption_disabled+0x48/0x280 [ 3303.501008] _do_fork+0x1cb/0x11d0 [ 3303.504566] ? fork_idle+0x1d0/0x1d0 [ 3303.508298] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3303.513848] ? syscall_trace_enter+0x68c/0x1260 [ 3303.518530] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3303.524088] ? do_syscall_64+0x9a/0x820 [ 3303.528068] ? do_syscall_64+0x9a/0x820 [ 3303.532071] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3303.536665] ? trace_hardirqs_on+0xbd/0x310 [ 3303.540998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3303.546541] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3303.551911] ? trace_hardirqs_off_caller+0x310/0x310 [ 3303.557027] __x64_sys_clone+0xbf/0x150 [ 3303.561014] do_syscall_64+0x1b9/0x820 [ 3303.564907] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3303.570286] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3303.575220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3303.580072] ? trace_hardirqs_on_caller+0x310/0x310 [ 3303.585478] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3303.590510] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3303.595370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3303.600564] RIP: 0033:0x455c1a [ 3303.603792] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 22:48:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:10 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x800, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="01d2d455892f6d58f24e62f86f87afb0e687df479ab62d1a451a3a58d3884ed9d1ebbd4f0fadfa0ee3af85936394439a3d84340f", 0x34, 0xfffffffffffffff9) keyctl$read(0xb, r2, &(0x7f00000001c0)=""/186, 0xba) 22:48:10 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:10 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:10 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3303.622784] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3303.630505] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c1a [ 3303.637793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3303.645068] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 000000000252f940 [ 3303.652357] R10: 000000000252fc10 R11: 0000000000000246 R12: 0000000000000001 [ 3303.659629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 22:48:11 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x40, 0x800) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 22:48:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2010, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3303.672524] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3303.709459] Task in /syz0 killed as a result of limit of /syz0 [ 3303.715779] memory: usage 307200kB, limit 307200kB, failcnt 1007194 [ 3303.722284] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3303.722295] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3303.722308] Memory cgroup stats for /syz0: cache:200KB rss:139672KB rss_huge:63488KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:139716KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3303.761740] Memory cgroup out of memory: Kill process 772 (syz-executor0) score 1106 or sacrifice child [ 3303.772409] Killed process 772 (syz-executor0) total-vm:70604kB, anon-rss:2220kB, file-rss:33556kB, shmem-rss:0kB 22:48:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=@v2={0x7, 0x3, 0x2, 0x6, 0x62, "27ddbc28d59733903977bfb4b0ae7df36a7d0b892be0c264e5fd0c8de0de57b627170de91da1792d3a75fd390cebc15fcea790cb9bd8d2e74f8efbbb8d7845b92fbc5cf8acace1433a2c52f52f47e63b9bf767825546e7ea0aef5c6633a23fcf93c4"}, 0x6c, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x6, 0x7, 0x18000000000000}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x9, 0x9, 0xd, 0x3, 0x6, 0x9, 0x0, 0x8, r3}, 0x20) 22:48:11 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x101d0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:11 executing program 4 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x9effffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7ffffffff000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:11 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x107, 0xffffffff, 0x80, 0x1fc, 0x234, 0x8001, 0x12f, 0xfff}, "e0d8e0709eb1824be900f50726cb3c03b67a6c91ecddd672b04ee8e9a5c9bbad1489e77acba8d562c85bd12a4935cd88536205", [[], [], [], [], [], []]}, 0x653) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000000), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0xc, @loopback={0xf00000000000000}}]}}}]}, 0x48}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x7f) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0xe, {0x6, 0xffffffffffffffe1, 0x200, 0x3, 0x6, 0xc97}}) write$binfmt_script(r1, &(0x7f0000001840)={'#! ', './file0', [{}, {0x20, '\'*md5sum'}], 0xa, "17792ff6f0d3ee0a65081a1290f37cd54a3075bb8bfdc2ead96964019c9bffc2d0d38fc83c8a57f6759fcbc2443d34a344dbea3a08b9a61720f2e8c0eb6edc788b8a9b5b90b5cb22fcbcf7c04e7f52444b3c3eb78c1be25afb36e8"}, 0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000018c0)={0x3, &(0x7f0000000140)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000001900)={r4, 0x24}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000840)="7d06a1fd4de2f634678bec1f5acadbb4e7e464e465518c78b28a51b0dd215f4c574153cb7301e62639e0add2aceca25c60eb07ac66b4c613e9b83ef73dad21768adec01b0d94c4975d94deb6eab3bf49dfd972b32317ebe5d3c447ecb4fd6b32e605e65b8e25df5a06bdc81c65040c72924b8fae8d265ee90c2925acf01afd6b98add6512fbdcf82e88b061a2b29999b156097c46c70d7c72b8c5d6842528fb82408641f6c87f21b6ea99af9f386e5d38bf39c35d7af1cfdcad093740971013d4022063474cd16b9e9c2ca585d9c2358aa2382dc068c0a9c246b69fc372031f72a0921adf47ce64995d09183cf0a3067dd0fc5efb89e7dae6b59e6cfd647e829f4458bf05db87440ac492b238ae3bcaf6b30cabf5e0af14d49e9cbf619f6252fc7e1723f82b6a18b03f631d027103eeda476ee18d40ac2275be2054e220edd1ab7a23004ddd6c00688bf1cd9c7027874faff32fef2450fcc284f6059b6b5ad7fa05663957bf02dc35c2fcf6626a071395091490e4b5458f1deef90c9917e135ca73afe8436e23a6e133c90559c7183601238349f23807691b660a08347c75b4e2515a9693b2620ed785f4666319df6800f4659a8a2e24a493ac96aaa204cae30872c747d204140638d8257f969756298e5aca03b65939d83650d7cf1512f87f12b4d22cf8f60183d7ee88b89cdfd13135586aca89b769b6e7c75a872f36ebbb3b2c70fbaf7df6ab9b222d35360c225bf9ca59474da03822feec0d3129d558b9212338b9be9a83fbfd59c4cd10b37771683bb01e53e72445569227079da1db4825874f4ac2bdc32ae2f1932db08fa0c8cffb9a57ebd6f51934aa5b51aa56cd1f67a9cfd80e0e87a7757156fbb24926a9564043ac9e60769e04daedfad8885edc97aa45cbd10317b92d28cc23db634da7448aee76439fcf623265233cd03bde80e3ed2534134e817d32594178b3707113a2798c8cc81270bf4b2c04bfa639cd0dc86f6a2e8cd823c500602e6d0af2dbe407c17db02a37f2a4c8cb22f471367e0fb46bbfecff93415860f6b27a81aeacb9c51c3118f40662744c9dc51cedc5cb6371cb9a5192f8d920a18176f9bf9d94147a64efde66a13dc348a4596ddc461ff66e1a2d90841f0bc6bf2b81830afc1ad36b594109228f344632b3e9983f23d2fa11fa469f66225bcda25faa540840b8492921d64ac4ba88b9e0815e80823f12400d28aaa033731b0fddd76c93ffe621c3c26455c5b8bd235c360230b89b24ac23176d744bd7f87936cd67e7e07bdc672924068bd30c8d259d775d7dbe44b934e911678b3c53af9037ee2432cfbd07b31e30d71d0468644b4402385edcd40e487b2908a2d44bcaeea68238126719bd5d5206dcf04ed3d26731b4097cc784ec38a657b7a9c12e4dded3e881d08cbb997c7f3337a5b22506fc5cce7afee6f707538f0b2fa2c4db661549fa30f42826bd2dcc57e756148fb7ad7cdd383c290e8a70ac9731bcb1e27aa776ab7e13e005326fae41282de3e9bdf7421796fa96a5f36b2d983d864a0f34030c24cb6c8668106508427cc4c056cfe943950cd6d98ae40be3659a1d75b8cb5623dc0dc6849ca48b0c0a566fe8407b9619ebeb08867958af52e70b2e04603ca910b60adf516c0296045ed78bc8330c4ddfc8e46f759257248ca063415e80dfa8188f0a7b3e3df58204d4bbcf671348c8d4e23975dd268a172ac7f0af1b12e00bb0c5592401260aa7aebb7cb54134c268f3816032eaef7899e50c5ca8d151fb8b946a702d482ac2838d21462ded50fda001491bceb0b88a1a505c587bb8f0a6742ea60fe3a267681b060887bc7ad74c155065fef0aa51f3caf63bc215e2fca38cbddd0ba5371bda6e886e04e1d6e9d52f7041de6295267342140a01151d772b165838ca117c4542ad3039d9568a5061a84fa9e9d85a4c3373e6c3ecde57c92ff08ac50bf696672ef8765855788416f69eaec8257b92cabcaaf91627f6f4075c3255456d7e1382843c1aac381450939482ebc49f930e753efcb7fea576e1fa9ec9e02f733867c64a904dae86be160919899899dd9afd6d40358f3d8f5c02ea2e48a6ac4edd75c3484de99f1dc667c8364c41c2f601bf25c22dcf0c2fb89d39bdf9265b6950bec75691bdeb982fb55e878902e1d83e72016faba4f4ac82819ce1259e257bdb7bb87ba84b27796cd42d3bfa766704ecc7b0afd3441eab5bf845c5f2a79878660a67af55c1c33c10e9b563e530b759d32a235470c63017c61014c8a90802125b2e2e92f2755bbfc33a246377d4c327b10873a8d1b85fec9e21e075aba2809e120f1779ffdbde29f15e0f769cddc30124f510e7cb9fb805076b0ece7d3a2cdc1580c52a5afc11340bd0a20e9e49ec30041406fda1d4583282139496a0b7a731260b1eea474f34b375cdb1d3d26eed064cc35bc23e05e7cbfc76d16f4d55a6505237a1f84c3fe59d77ac7e70483481b4d546de729b34f4cd2226a47156f25c92576dc1cbc68c9687f7eb99878db21acaeee305ebd342213ce6b0850690081d6d066c6783748060c41395da55c617c7ab58f1f5df96604bc6847fc438fcbfcf9b1602c2685e9eb0d3ec90baaeb98407db6355830194621e7c0d62e540f84fb0d4a20dfcb6d1921c6e05170dc4c9e213c0c313a848e34ecdc778b3e098922de4b6da28709eaeda300c67757e05c611a1714863f2d2603b9de41cfe019c2479e9683840df8f603994a9ebf1302e4ebf088f714c04074e64fd3651730bc856c713fdbc5956b42debadaebce2854ce64a917f8b723e92c11b2c030b4eedb25ea76ae39cb3e24438965b5050137d601e158b11f32ce44ce16257ec817ef8b0c58da1ffc867cb0a8d477d192db5bb275d1b91efa0dcacce73b5220d79e27a6367bd254322a53d962981c8ef42ffca0e9f29d5a85a73bc9d12a21fbcc6fdc422fc7256a5211c4a43c9358e023e5ca6008abfb5d14a4bd4e0275ace6961265eb3c514ed688a2aac24bf8ffa4e216bea6e43ea17ff46a36da85bc64eaeef92082352ff5dff4c8b8f50841ab83aab95ffeb1ef932d17e9ad853d2cd859c04ad4b70ad6e8a178ba01358a43367aeddc261e6dcdbd3bc925ba54055a0515ab9f0b9e92640d163bd9fdef68c9a24c07075e683ad29fed5063ff2386c8dd84bc0ad5820ef76e8b37ea2ec3e6e9f452d611ab58a8011a89fe8bd9bbdd3f09b52bb5ee1eaaa3af1a0a2c8474f3902a663bd337d870aa1cda603df556cded57a0f2cb25c6bdf045cb7fabfb6f40da87897cb2bc65cc254b372167e777bac015dc556146f1764458a37e00c7c08cd084f8759457e1c578e273bebff9ee588bdf2b028d2de0d02d7520d4f1c079b7ccde2b6550aadec65efdfdc5b80168f66e0bce0feb6627a6651472e5bbe36e238bc8a5244b9f7ce4b2aaab6e1426b25c0dfe14caa6fdefc9aee9448d430f326e28391723cbf4bf4f4b539fd7d0ea1b7bac2af6511b3135a268da085ba8f0276e2620e5671b7c573db4a11a47765d8c2454a619d74611e88b181d0c8fd76cea112ac8a3fc14ea32e3290e8311771754c6a0c73521b72a6da046989d0e0b83d0bf7789a8753fb7d20a9b2ca62eca6cf95b4364907e6c90bd45e2eaf7a0f6a9383588c8436e1a1ff42b67083e82a3952780f29bb83e6b8de14f43d38403608c2b001f761ade8d3847d2cff577d54d4495d7b24e4d10642063399f97dff93a6fa1c2cf5c71075e40a3b2894c6f2e9ebea7b509ecb5ca8cf6e15999b22f271892630113fcfffe0b8c501a44c09a192184b49844879515018dcf440a1cfcbc32b86245b5ee21fa9507059bc50bfee94a9211a71a0fcf2a88b731109e21dc42829236137b500d0c0fc1157344e7cf73928376e4d2110fdf889eb287339396e3006b66cdd0d851d33744c2d71e4534f53d5caa17e98388edd0cbf508cccb863e13ada197fc1ab41247d5973a5e8261c3c860882bc48d344780dd4a3718b167802cb9d5c3fd8f6b98dcd4ca90e4d03a5aa01a2f00120c854d449d2eeb9af24028b0667b11754471c9e9c436e369ccd110dc1b6a6a0ad5a2cfccabe3eb82ea00a35ac1382601188a20473d900e567af81cef913c8f1a704f3c2d25fe93f755cb1b290efe823c93696786f1c306a4d1d3970f904c2417f0526144fd039472e83e9ae0e111841c3cfc2a6ce25347267ddabbb52011ee24e0f0af2775d83210e5dfefa9c449de8646741fd5667e8f0d9be69443eb89a51e495ff87337687b87b7cd8a5601a602ad78355b7e04826431de02aa09b2c774cbe4a2f7d0270e70c163d378056fcbd35001a754e28f1a415c6ca257292e284dc1f36cd0447d78001566de0ab4f0cfaf4baaf450c4d81affd932f9dddeb8dd296a1667b1aac45fe2adf05f12c78a2b5ac9b5089938768157fa1d04b73f052d1cd9ab6629f456647c7b07dadd94addbe2f3b34ae2879fb67e172818ca10531c7b8a9297f6b1058273f94d1aeec627c6c4575ddf6a5c2150659b36d86eb0518ef11df4d1d4f5684006d929d433243a916c9b32cedf9a8cd0d28ae9be8bdf76b8c4d3694c614bd01cf2de0677152a57e3e14b96e84fefca28617f7f137ead517953ca3b100016b6c017423dc3ff27a7ec9ca11e476b84c351ad3b22d0ee0f0b99ea89438e36e84d498c812d9a35636cf77c62eddf38ffd6c2d37cbf4c1e0b1716e6e2202b2f0b14a0b86238ae25ea5f41a49dcf007b9159f1bde8e5d9718d2ad5a2c05b897cee765f4e936f16f9494486ad02bbea9ff56c9c7e28e2e69c6f72a115de52a3d8642e7f4d23815b1865e19c2a368ebdaefe8c91c2ffdccaa23d1cd89f6f28facac0d1d7ce307ea84584e517190bf62b73cb7b95664333a8ba09f527d8d1dcab23078a0dea58dc5e89d52c6304368fbeba992b4baad2ab39b14f8fa49c423e019b8b7d7752bc8a8c184d179dbadd5d8a949fdbdf726cd72366a667e7fd519ad21574ed5e1fb74a9b3d8cacd3b5e634a397f2d9bd64e916d5d29074cb048cf4808c688758c3957abcb1d02090b626866efa183c946f0a5ce85055745b1c5d539c06aed709d3b95baef5e255f59d2d5640019689a4ae5449cdf110730460edfcc773b3f9d47974b66f2f72332c821af5b6088171db902c951a20ac10b95292a4b3bbc603dd5de1fb5beb0c3a45f21685a685687f6fdcbac6d884468d2e5e1da35e012b778da728dde77e920ccc244a6378bfa3dbd0b001295c86fe620f813072a8d5382b5e4357a34570453450f08dda76e39989e207085d939e8e02483caf9cb8b211fea8c7b1ad88cd5f2b71984f8c20893b42fb8f7ad5559d6c6993284c74543b99214ed8c087c5e98e6c2c3f5b30052f37c553fa558fb94b8f1b9ef1aab80999ff33df978ebd4afa0c21e167365bd41a19385ae2ad53069c2888e4632073e8b9cb342e7376817112a83956a6b246a28cd1d6398852ccd95c465ca9bfd93e5756b856a1e6ec1749f598fd0fa67f35684c3605a7109b44a57e3a0b1db6c6a82c9f55cafd5dbec6ca7d8ca48d1b3f71ddb29188d7591c2d1967022321281242b4b29a0938d21468ebc2e38832cc2e1d1fef5b1c34758c024e74a867ae8c80d3e06736022963201723a5cb840f113c1b119e42d4a986253e40b5e2e7492e4231b2da1119d705896375f87f2b2c7fcb6d4bb73ea3c0a7a37b4fc6ea37cbe0c04a57e05a12102b0e231bda8283839e1f78e71fb72f88920c6842cfdfb544fd1c06540db945b0acd6b4188f78f21fd4806873a2c44bddb242c86f9a89b1be23a538", 0x1000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) [ 3303.857581] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3303.896933] netlink: 'syz-executor1': attribute type 12 has an invalid length. 22:48:11 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7f, 0x80000000, 0x0, 0x6, 0xb, 0x4, "6e6333280bd936e5eb5a7f5c75e51d9dac6768e26b03a28089280e28a6619e0b02f2aec7d671e33a5df486478eca7b0cf6d7001317bbf5695c104a3193151698", "5ab2ef477554ca61b1fbd56627d83a33b6d0bf09a83b9864810448d7f2753a530d9d9a2d21124f9e424b1d1c7507648e2ee75bf1a5b4781d3eb29a59686edd9b", "147f67ea1b67e8f57e72fcb9144c6f1fbdb8f7b02afdd1cff487a5d9ad037f46", [0x200, 0x100000001]}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x8, 0x3ff, 0x79, &(0x7f0000000000)="efd795f258a8131462b7ceedfec99737744c25d8387ad22e2d761b6b5f467959954574dca717f41afe73eeae86828eda23bb09e7b554b6d8e21cf16c046c37e94d348ada486911b1edff4b21b9ebb9509feaa56f52ae4ce9c67be183bc595ac9c56e7000f973d68e3c7f5d4dc03a2ae1fbfc2e068ae56f29c0"}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4800, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3010, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:11 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:11 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x121000, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000000c0)={0x800000000006, {0x80, 0xbee, 0x76d, 0x1ff, 0x1f, 0xfffffffffffff800}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3, 0x10, 0x6, 0xff}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0xff, 0x2, 0xff}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x20, 0x7}, &(0x7f00000001c0)=0xc) 22:48:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) [ 3304.092953] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:11 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 22:48:11 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x1c, 0x0, 0x0) 22:48:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x23e, 0x84000) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='bcsh0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r1, 0x0, 0x3, &(0x7f00000001c0)='lo\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r1, 0x0, 0xa, &(0x7f0000000180)='\'+cgroup-\x00', r3}, 0x30) 22:48:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x100000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:11 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200c00, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x2, &(0x7f0000000080), 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x140629bd, 0x30100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6800000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:11 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r3 = dup2(r1, r2) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000000)=""/108) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:11 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) 22:48:11 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x500, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:11 executing program 1: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x800) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @rand_addr=0x3}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="2c03bc092f1ada98a4232f60d03fe7b3d890dc1f6eec53b35ab42ed844adf9", 0x1f}], 0x1, 0x0, 0x0, 0x800}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:11 executing program 2: get_thread_area(&(0x7f0000000400)={0x1, 0x20001800, 0x4000, 0x790, 0xfffffffffffffffb, 0x40, 0x2, 0xd2e, 0x40, 0x4}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6, 0x6000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) writev(r1, &(0x7f0000001680)=[{&(0x7f0000000180)="0b57bcfdcce315ab4840adb071857444a555a16338554a56fc74704096475a450e8433582fa1930e68f88b33cfaa1187f534d68f13d62c40c4e1f6024af1d6cbb97c844192e138afaa41d38efd80a7998f4e7ddfb171835b350d12d5ece13e0cc81c9cd8ff2b31aa668a6ca85054c05d8430a5e45a4720a0e811f5ac8f6fecd00df11153ad2d23f39e8c40a369c29fe9d63a663f26527abea2c9b5e7202f39bff18d1f961f7a26bf34f5620d9e2e020be158314b74a887e0bcf0b49f4b9f144e9905e4d484afbb4e4cbdbc55", 0xcc}, {&(0x7f0000000280)="14db3037015a7446a1c8d45063ef77dec27489fa95fd4536fa7ffc2c40b4f4d6186c7ee0b5ccf4836a929279d20a13683a69d9d04b845697878b5e93d7430d6d5e64f1da51d9db28b9dbbd52bf77e5aabc5ee75b2929aa45dd", 0x59}, {&(0x7f0000000300)="e55a673d6606963a1702acc3b7981683c2a94b288c56ff9710962707ce980e598a5bb80c1df01399f9a9bd5a3c56db90b646c091ca14f7ddd354084d82ebefc0556aeb707f2f76f3bfb625e3c3132857e4daf46bd4597b56c649ead25852a69c1ab2eeccf120b85e74c89588341711ff007509cd822fda23a6b53b40b8c0d25945bceb65bad20aa29d4c8c77be2b56b9f9e4f8d63bd2876f9bc9e37dd30d804aeaeeea5e043b0d962752d896193a9e33f4639b393e298de62c24fef83c9ff7d43673f1ee8d385a2927", 0xc9}, {&(0x7f0000000400)}, {&(0x7f0000000440)="8dbf3e8dfb8581efdd94855c90701d9fe1926705b016aaab703c9f57e9000b85ac08c030cfdab765d43721760595122741abe8fc49e9e20c3fec3252240d488b317ab4c59b82bdfe16c9c5fb156f061e220fd593dfc141bdf4af31fbcd5d2b87f68ef395851874ac1165dcbe69a37c038c023bbb043620b65b15299f5f49f65c2f579dc5307f0362ce22614a344bbb9e5b268feb7b61", 0x96}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001780)="5ffd143277e210a28e9e1ff0ed2f79fdc295614317a99741c3dc35535be0922fa3129473aa2e5ded4a6fbc36d72701763ad32b48658c29332f6fd94b4e5a392e1ebd65b3f89c5136de080730a50ac126dc98e724744721b88cab928193a3e0cd61a854550ce02d3274d248e17551a2c13bd65413dc5eb28933553ff31acb49d1a862c96e78bf353d852173fabb6871277ab16d825e8a325f614668566fee33b8b5a4432a6245f1951b7695b64ac02b453f9903", 0xb3}, {&(0x7f00000015c0)="f3a51146f6fd08ed27e2098e9388068d83b1e81de0b1522eaa34719f504881d5a926ba71b0e820ce702b413a439778bd021671c5f281e4e32547434dca2d12554f901b345652a0c64a862cef40c309ff7ad2ecbef3912587425f573de1371798840c5fb95585c074d5cb1058323082ef92add0fe0400d6db0e3f2872dd0b70aa630ac6b4e82601", 0x87}], 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001700)={0x80000001, 0x401, 0xbd4, 0x1, 0x8, 0x1c3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x100000000, 0xbcd7, 0x0, 0x0, 0x101, 0xfffffffffffffffc}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:12 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x18, 0x0, 0x0) 22:48:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x3, 0x2, 0x2b}, 0x60) 22:48:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x600, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x86}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x7f, 0x2, 0x7f, 0x4, r4}, 0x10) 22:48:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={r2, 0x1}, &(0x7f0000000280)=0x8) r3 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r4, 0xe71, 0x3ff, 0x1bd8}, &(0x7f0000000180)=0x14) 22:48:12 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x29, 0x0, 0x0) 22:48:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000e2ffffffffffffff0000000000000000000000000000000000000000000000000000"], 0x58) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000080)="2332da9a82f30c43c8175e5b7c03459e6771c2efd4846dbb7b176954b1f43ef33ba861205bd581f0276b66bd4244f00adbc9eda7e8e356b6b580c3d3c446aca043972e76efc1ec943b59f83f4d8b606d05e6be75e9f6b351c1e2554cd725bd0c9a8b02edd50f5b80297635ba01733008363751796e0cca5bd006f8255dce81a2fb1671a43c75c6816849376c40", 0x8d) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) socketpair(0x10, 0x3, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x8}, @in={0x2, 0x4e24, @rand_addr=0xfffffffffffffffa}], 0x4c) 22:48:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x200000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000001140)={0x2, 0xb5f, &(0x7f0000000040)="1e4c9d31276d06a6b46cf75c65d09f99780637dba03da6d699789ce826fd1baa127c4bdb7f12d696d22d05a59b1b84f388a30152a9146e0317bf005539febc2c8aedd42393909b3bc15810924ab4e125f87fc045769b4485a5f3e248c209f100a2017d73d4dd2147f35e6c32c726da21178aa884da809ffd89a52cc0a15f6ecfbc7bed4c011042d96888a07c147272d9b062f23edf3fd1340c4ec167b07a223d15a3dfc7b94a65b2efda5ebdaf6f04f6f23f47d1032e29c809557e692bce32765f5ec8d05615c9e0369715f8ba346b0b9b16116d7ad408b4d75247a5fc33fa01a4ac1b5ab5fa1d5dd2a093e8f6cda0f9d92b5eed34cce6b1e815e54b0937a18ac2661342d56ddd57885599698da6988080dc3f2f57afaf66fdf24d2f73fd55acf9325bbd9c141271e7f2abcc6a158fc97b11814cb25b2015be440b1115467e8fba3c8b2753de05688455d75da53684a1e308d9f1eb85e60a1dea46fe22429d483ee432ce72507227c04a0236cc2a5891162a25aeb73a0b3cb8254f595ace640f66335c96f1665d8cd296789e539bbbebca95bf22af0eb3de8447dab80b048de892c63483c13e092c2e309b8336f88f782806e4190833db1acacc96a46a9f11bc5694a476ce3f7cf8a0b61a7f2571575724b8460ec95ed5efb74333c935565fab8adf3ae8cd8767a508bca43795dae6577915f7768caf34537866eebdfc57a369abf4e4ccebb696a22cd83d2d8ada85b95c95b43be5d39ae5d8f8094051e75892b13c05e58dd615625d5b6dab804fe790176bc7876acea678c13870bb6a4d7cf534e6616a0c1c00e830dc3bed6310ecaf4daa7133ba243a6bc22ad97e7c52cba3ed8039015ff22b9b761547accfc2db164e75c0d20b19270ca05c322834e8d56a0d6105a4c18dd1dd69becaeb74dfc1ecb3688605ab6069744bd3ebb29c10c845d99eb952b24a49753795da256cec298567530bab1e05c4af2010795e8d27f9317aa57ab8f6297bce7837ff5dca45c02846ff197ff76e3d069dcd77bcdf934014d21105481f0c383d7757bf473ba830100e7c1e19289fbb73f3ca2355b1b717fcfa58ddb1c0f161242dd6249e2d004d95a9f2c5e7fb147e9ff8ab4168fbbd50e51825650b50aeb3d17cedf0c375bcf3f3a8c3aa7fba958aedb4a5016ade7b518b3d32c67c82872c7919552067890a47552193d39537f2cde9fe16284424049baf1660ed46a1977bc3c05b93662414d24b802daf90b10f58298dc344baa9256ed548aa335ce61e8b0eff4b299d3ec3b1507c8fadb8ffe1a2902275cfe031f26e7b293f90dae3b0c9eec9233090e921b1ab4db290a5d79854675f7e94fd670935676999227efb912d84f923474588e5b90f5c9f5431f3026534f4c890592c2e55275ca2960be554fa109d166cca589a7f0aa99234b456d3ebbd85520fcb4cc990c2d64200df5831cce9a38f4d5a4d41303f03de72e5e49c0c2cf1c37a8f3d3ebda42a4d699327780c1f56122b67da5315759d5e332f6a259e6a15b0b62619d4677dd3e2ab7806213b93aa58dc9644c5d2caa135a8522bb7daa5df07121dbe2d74f249055fbe4ccd95fac13b43b21ea9bef744ca9cd21a3c7d54bbc99ce44e7da7848885133d67c771b684fa6ec50a91b685400f319d2b8d964d466f0793eabab9e636defabad4ffcad26c5d6233f11ea2bc259a724afe1e1c8b19a2a1ade3b4c49f2c87b4ef970333cb7ca72a64bf431f83dd296c2e97239ecde02c4c7b2d5e50c671624315bec5e0cff2bfb30438ed1b098fe2a8416b4fc846e388c808da20e058a962e4e7ffa048225360787cb7754ef816e2ee1ee51ce0edfa1deddb824672abe57d97690f606b8564f02145d5fe6704a444cc6002647ea9edcdcf0afb1a67e887a3a7523ba26315c2d4f8f2ce49e576faf1fcd418c2952e5dcdad8e4e5cc1cc237ee669448ddb087b04a5401e0cc31de50eed5bd2cb6d8da603a43f706f8ed61caad5ed80cd0dfa41ac8d11a141704f473204ced3f2b4255b86654d405b1cf4b7078bb3245806afa267d7909e3210da79097331ada1e9c8e994a186388cceb81c12e114e27ae1dce6ac09c6c1b6ff45ccdc1765fef02dc08ec162d48a2d19682e1086534c23319d1909c98a3fdfaecd561f1a43f760550245c19fe5f7a76944481fbc8bf2343d92691419b22a8ccb2d0b3907bc7f5408a7a0e75de086ecddb8923860eab012a0da11416276c03b56cf4a3aae8b6b74945f4df44a4e732a25c4a63a4fb2b4fc751bc0599827a57a24117abb57fe25275fe968d2a044bb5f0cbbb9fad15405e4ac38beab28fbcf7e9cc4ab9563ca0550baccccf693e37edbb0ed6b4fa214d3dfebc3a0d16a7e9285e42c3550d93f131f3822aaf8d3a7e608be4332f3aa0bef0e855f7e381caa121325be296059b76afffde6b7b58495bd13255adfd8c8c0fe429caa042c47c030f6831382b9e4fb5060cf9ca682915843693b88cae0197f2c6fa7b2bbfd866c6540b25a775faeb2e0e270780d209db445f8c5e4ab50d9ee43c233c160a7f5910499638edebb6abba90ec056350bc1fd66ef2bf8b4bf289fc0b31f844fcb4c1d23a570bbe2fe66f80d4fdf81065dbd90d41102c7318e4f6c504c44861e01f9833b8e33b5a64f7bbb017d4359a48962734885d3cd735fa2569e6d49b24ae04e57ba0a57229da719b671e6d2a756ab86aa424229814142ff722b71d51ebdee3c68e1e6df543238afa4795288d8916fdc6599fa6d6bcfdca315e27734fbf7a2eaa1f0cb7fb9352ec8c2ce843de32d2cc66a06d4df483c0fc99d45460879ea5df5a2a280300a69cd349b8c6ccf42aea96bb72fbfcda0bd58a665c95d5a104934943299b4b883bacfaeec71e1950338214bc7c782346a610313d20ae69212e0e4b03ce656d33eee1f8187902c8a1c56012e2d1dd25180a1c0cf4d368aeba7033ed183b36634f7d4cc252790ed74ad46b19fd64a3c0e9ecc6851b21b3fedf98ad0e8fc6f82de58e64bd147cca54e8948bee7f02aa4d37cd563da6ef03f0fad6dbe3b8cff13b3df077b1c22aaa615ea9aa8c0d44498c2ea5bfe91c9c811c1e3e9b92247e6981174bbefcd6ae7bfd02313083cb09207aa868f81ea64a1ee6e4931299782e0be0be82727dac83c41609dcd97e7a601fd8738b30683cda77abdfb8e552796e9a2998bdea0d9cfeeff13d5707e40747e526e9c590ce1077a772f6f131828fd3c14eb02f09798b984018005091cdb7a3b58f7ea7665da9efbf741133c54cb5ddbec405dcababa7ed208cd4ac8657a6d4f0bb1b317b7df80c92cd78f489ec25f23a1e5d43a86bb1fad0527922a959614eceeeefed8ed4c5297389f30abcd1d0516fd9685fe7a1b31958cb8fa1928842ef5356789a9c03914090067ae313d4feb898e33b1373f1e847cb09644b82fbca27b2a0b689f2f1adcd6c92b65b5e6c5e47ab453a4e8c2f79e19a892c841a649f658e85f43030b5c1db72c46ef250c8b783ec6bc51d50a3cece1e54712d2939ddf07b48c7e47ca7d793686f4ab7d1ceea1b0582025dfccbcf4b4792113a7150069d81324dacddd120540c41ed1c4ace6225b5da7a0d409b15b59034fc1dff07ec1f8aa80bbdf93ac7a30b9fc77a8f4bdcc45ba112d193e27a92238db6e3f03bfd232bb357d6c9358ffc4db82b8a7bd071cee80161a804b526cec996e8539b355f11ef141a32de0eb847d071671c6bec830c8a572a9cd86dabe342c3bd751f695e4884a67f888114d2618289e98dfca646a85c87356a92b47c941941cbeb0606b6cbddb0fd471068c550f68579a838ab36f08af22e035c457abca4b77721655bd10218853200d3a7412de06a11d982aa2b9793741458ed45329c305b68ead0cfcb61d124292b5b0792c2bf092b5d10d209cf3bb9393f963ed281f4c708e543ef0323973437b2371968506765d0accc95ce601ea87e0ca9b48fac411e831d9005c792905e33621be6d5249c74c81ea77725f7f0392a7e2b95ce9bc9156ca0e8f9abfc9ccf3c5339c0ccf23e0346ac36799a875cb46131d466346ffd7b0f236e731856f5c1c70266152cce31c09829e61b192060af3323ac69a7086fd0d1f8da1380489c090e90ea824d6b67540772c1d5470d1c9a831b24390202ee67266fd5937b376367b8a0d89ab11f61823655c73bf8e0ea3af495a2d263a5a37fa81301a9fa05ef7aeface8117eee36a7c233f345ad40db80e519a296c0a9e9600bb451d5998efe1c1ea06c8e95c292ab4e7ccfdf8854550c47ad2d434f6ddc2354be58db09bc7ff2332c31440c4f24bb125751a226be78d182b3e1a10af2e993e9fb016c0b5ce612d8aec27b9ff260a010d3e65799b40e657b9415eaa4e3791da1e1588577a130b82d9726032936fb03dd4e6fd304b18eaf1d391f091c14845f4db7fc3d072bc99a613f1304ba30b1ea9749f1c098ce317fcf079d7bcacd033dde8721d22aa3d86c5d2c6e740ca2a8375b5134b6d7dbf9aeda9283551470f91e3807aecef862b074614c50a4354fbb19e1a24057625338c50fbd560f597aa649d5c19b265dd7f4f46dd2946b2a44270a8c03ff84b6846d1a07b81a83f4b1b1e42ce19d419e31f75b09663e84f84323d2edf85a988de6062386a154d922af046e86548376ab561542535815f29445e345cb9d599fdb94beadf58f71ac00a0f6abdc87b322a44f43aad2666b22deeb5cfb6d7c953d03aed10a7bc5f3f507c05dd99ae193a1b96ae82780c69bb8ad63fca47ac2c35244a35a69f7c3d5f8952e0e03f9112d7306abe5b66154427759737a64fc1a5dcaad25c447970ae392a10b5f3508275fc963392c74d1dafe62a06741cb5c860e57ca2adcf2da88c23d0fd5c804d8445ad0a374ab25f21463404752743fba7e714946452711b635b2851422caba3d402558be58250fc775d282dd9b4b3e73cbecb456be8738280a3c3b638a14f8f356278fdd429d6baaf24a57ff5c05b966eeb6e45eaacc7a663d9f3087e6aa5a42c39bd5dfe14dcec45f4c15f884214ab45d807c67859109d7f63a799837b58b58cd375395cb0f9e5adda0e09a3748b8dfdfcd60738fc028c484fd2bdcc85b68bfcf422ebbf1baffaad84489c79a6bac465ab12c060e772fc4ae19eb1679875152c3addd0ec4a58d862907d237b9e9206b4ac354218f7d787a43054d7a330764500d7659279338ace66976739511ab6008ee7ef98d619ea808f7c593562984f3bca50b75f8fae2fa9a008beb740ae9955348176f922213c86f111d7f64dba1c1f7b6bb88651fef8850c93a6cb5c61d52043f10be26efc7e40754f1ad4fd0c919c5a59e17582f1ad464867e48ee1bb1605a280d0f6bc6f167fe2e476ed8e87a4db115adbf470f2f3dc6b6d1c48032f08bfc831afe2918a65d7c2a6e95909ede071c4f83de546c89fedc7c6154bdbf42419f5851edd7f2d517466561a5a24c2b65aa7d215b926adad98f0309f57ef0ab49610a57c014c22531a10fb16738dbf8f200d9d16c721b50ca87da90ae30f9cf52eebc538961cd729b1cf7d508833e55c5a81e7d77a3653a5fded565d438c73e74d0e54a8a08089db462ea5e8e43f2eb4651ac90385465992f7ea4a0730752ddffb68ff750294354dabe7ff91119721ee2b680bb2e0b87d8751ca18876e2ef40addc457158ae39578693446beb6814fb158963f873f75364a9cef5c7a214819c25afc3fd58322521f56d26c38e1ea61089a4a508b07406fcf38c517e9eb14d1824bc225ef3f47e20d563793bf5f75afd3ddc11ebd9465e187dd35", &(0x7f0000001040)="0dbdd41c308f3da9cdb94a20918b7d4ded2b83597c6d82f30656e700990cd5101b7f58254515170066ed541072e4391dc195aee0cfcd037b15280e990ed15a9fb5a16bd5f814638e2132538c0b25438e5e6852810261ff954715bcd78bde86f4fdbf73595757ee107639dfed4dbf142ac843fee342314068bb2f8488cb7741628bf9f319112c89646db855ddd888fc6ec9ea430c3545d0624ced0eb03c65230daf2927a3d79d4ecad78f042b811ff02b9fa5390bb52aea8ebe6d64de019b8010d138", 0x1000, 0xc2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000040)={0x8000}) 22:48:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x0) 22:48:12 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', '.', [{0x20, '/dev/audio\x00'}], 0xa, "1260eedc393f812841946fe91853945c16cf96d8cdb82fd8bcc7759a8a0b011c7cbee72dfa8c3e0f552621daad0bf60f4cfd478340e08b3c874e8ee3cde960f0f2a71dba19cdd4ebda79eb3aba485032e114be58605d74e1f3c1381629de2dc45fbe65f1"}, 0x75) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='/dev/audio\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200000400201) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000140)={0x4, {0xfffffffffffffff8, 0x4, 0x2, 0x3, 0x4, 0x1}}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x8001, 0x7}, 0x2) 22:48:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x1a, 0x0, 0x0) 22:48:12 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x80) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000240)={0x6, "328d8a0e499584e1eace221a1901b627f4ab197a60d387e26b0b0bbe192ed26e", 0x820, 0x7, 0x8, 0x1d, 0x4}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x73, @rand_addr=0x9, 0x4e23, 0x4, 'none\x00', 0x0, 0x100000001, 0x71}, 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x8000, @ipv4={[], [], @multicast2}}], 0x2c) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x54) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfff) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000002c0)={{0x7, 0x8001, 0x80, 0xfffffffffffffff8, 0x3, 0xffffffff}, 0x6, 0xfff, 0x7ff, 0xffff, 0x400000000000000, "5fa994e16b73a46656560d7662dc7f1259a77007eb91f9566d4c952713b9d1d2ffc05604bf129e7b776654a4ae31569ce1cffa0e361a0a1e8f6f61516affaf01543defa2ed20a81796cf1415768d5936bb13ba382160b343bf0bdfc863a0e1b1a6d06f5e4a05dcfeb4891445d6aa99232f04b5532a0fd95f30446d7703123444"}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0)) 22:48:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/88) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0xe, 0x0, 0x0) 22:48:12 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x2b, 0x0, 0x0) 22:48:12 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x139) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x8000, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x4000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000200)={'raw\x00'}, &(0x7f0000000280)=0x54) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) 22:48:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/72, &(0x7f0000000080)=0x48) 22:48:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) msgget(0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x52f, 0x420001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001340)={0x64, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x68, 0x50, &(0x7f0000000180)=[@ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1, 0x4, 0x2b}, @fda={0x66646185, 0x0, 0x4, 0x7}, @fda={0x66646185, 0x8, 0x0, 0x12}], &(0x7f0000000200)=[0x38, 0x28, 0x20, 0x60, 0x30, 0x48, 0x20, 0x30, 0x78, 0x38]}, 0x8000}}, @increfs={0x40046304, 0x4}, @dead_binder_done, @register_looper], 0x1000, 0x0, &(0x7f0000000340)="2c83ec1649d856170f86ab290512112afa2f29c358de95e1eb59ed7637af3c6dcd117a3a653c979f2b6ab8b298354dce27fe96bca5fbdafd2238288233c2a9fcb2e47dc9c73afe9ba6c32972cce1ecbdda0fbae758c8457bfe58af329af7612d9fb8c46e2fcafa2dc8e3f8835d3029d3ca245e2f47e16e9814d6f81e76b07c958a2930eedcb118c5b9e525ba0eee267daa9131419f52d72c66a6f6f99b29a4b2ae3253c3780abf48245ae2d71213c08450ebc2fb9d81c79fde0abe0502435dd2ba3dba583584ebc0e788a9b48eaf6b021dc161620dcb99fc51fb406a4b0fd187f1b674f2d4a17f524f873b3ae4ac55d2614ec08bf67a59c956c0b4c6806183db6d76952a6f369b92d5cb40869d8654bb8163d04eca22c79a42785778a481a707e583e235cbe093a43c586614d833921bc00f4cc8ded0815b9d39e79f5b858d150456902df868927c3534041dcfd7400c67d7ba4dd9bf6d9459ab03cea44a3c877c0f0d1de3db7f9e2ed5f34a37454fd433089b0bd0cda37577174805c55221427e2c4afd945fe609142fa1d85c6fbfe1892ae2424516b9d0eb38033fd05be5fbda9e62b2f850d523e4c140d9430dd3f31a0c17ec2a90bb0a2a93bfb94ef697708fb5d1f36e602f75bec24cb8b1d8c4dec710b5ea6bb266dd7067448a3e712cda210fc270ed1c15caeae6073a27a3cc5e263c1140fe826b71c649ff4c7e52e8c12d72d0da6aa0daf18ba2aeabb5325f099e14811c4560299c96b0abec7259470865ff7666198fada3ddb904e131d94ddbe8447ce7ef2052102f7a49309493f93a698450808958c9039ff89525c12e54e0da698baca9a355e9143d4eb40d15646c8f53ed032530d67c1b04d508e0b67537b7a6d266fb79bc6af81c4c2bfa73b21de6ae420148676ccee030c9e03b1321494014e9eff96e5d09423db1d59a056c71c606f4a97c43b25f9414abd021bd18c00a9585bb7a3dcbd47b94f4dad1a43b73abdf7a46b724bd83ee22171dea77c96294eee518d4dcf8444cb7e0c2692e6d4f08f7ff919b83771fc39522537865eed76b535161c3c4487c70e0e0a264cb557a917aff894abecb8fcca821115f3ed738acf06d6d5b313fb9fb4aa8b0ef12041a47596cb6a0312110254065399bde5c65c9c6628331b38bff9e1d244ff003613f925c3651886f73a1976bb42ddcea655b88290f46fae32220c454be1587450ac1577093fae344362bb455c4ec3b62d0e5d060a1b826ecca19f5727d7a8988bd5abb9adb9e478f1df9c35f30245f8d8e732c327721d1cac30a07c7cf2566c929259fd141e2588bea923e465b81addb12d3488053cd69ead80b0b97e2501a5d4495cf18b26996fadbfaaa6edf2b1f20786f7c47ea4b135a9a359a3628dd6f0cba478fdfec7978bbe60c74ed8f3d32290ff67aea3945a754546258c6d5f3ae5e60c975ce0549b199e72d3db0ba23b038bf7086a867291906c8f5238b626f07f7af66ee7de3dbce8aa7fe7b47035a88b3f1cb2bfc43d869060f917869caa4aac8b87e748b37509f477d76e5a6584bf2bd62887ca39c35d4f4e039eb97b73280c4ab93cd59037ae6d5d4adc372ff7448e64ea8d6d88cd95b0de1cddc60413646836a35e546c6bb47d490a8d3f954af53d763a59f3782cbbf999f4c730c8fc5b858c7f8f77cb300799bcd63029ded9154bbaa038e2a7deb86ad74ffd08cfb68961147a127368479fd4067f310e09fc3069094fb3ca17fade25364d416f69ad99ed23d5f1ebf4833b380287a65641664f09155fb5b78cee5e8d5c4284a26c22a429e9ad5fd6e94b6895ab4e9770396f6b0c71e6b5ffb8980867d6d63c1328a8bc7ecab6b4f01ee1e4ed78ab6183aa84ce7d1594354d396b8b8c6cff3b55c0a6c88f603f9c32a8ddf5ce025d2279abd4309999f24d1c6edfa15e7c4ee56c548bd174838f3027b2ce7f49f84ade20ca8177158fd58833bc75fac268ecff86c23ee874d009502428f2d0a7c1d060e4199dc14a2e834fc47caf86ed3d32ec6f74945b3b517f602d6890a3a323b37b7273a6baf1eb3502107c2ade49bbc91b7c1b374d65e7d017322256130bcd92955947937cb67f71701c9efab65c85a5d668e5a284bc4eb4f951740c73d004c2833471af9662d456a9195e01afd768a3042358a7d2e1ab6f4cc9d5a2670d368036fa5a76f055472e356503cfea06165c0805a54b154f45ded841164207a627818d1a05daaac405b28b23a4d0279e80c25ed41171858a118e822404d0e739fd343e145993c9597ec7de4fc6f3534b0437d98fc8e6ca16a6315f3d7109f93fd15029e11e8f9f5d6b8bf9b69a546eebc95a739447cb00e20beebd6671795ea53240a17fbc6aca278192b91451af834190e9670d8e644a5cd205dc033976940ec49b8d41f423c02153d93999f0b5dff1b6b27ce6f5aba305ab181a92581a983b8498004b735fb5a240753da00fb806e118ab58996cabfba369cdc5dc884377ff6702d56bb3dae00af6a8a8717e3ff60dc4cbf34c30cd2522e253de644965ab6cbda8cce2fc6de38d81e451f4988e1d4e5d3388f6b0e3d814df6991adaca3a3e085475a1201d5a42e9f0998f03bf4773df378e0e6b7afc7cea9f79e7fb6d0082a263728a04a608a9ae9d7461f12635e338c81d69a36fdcdb306deaec78b2f890e899ba812ff33e33bfd6c2107c57971d0160d634299cb0e5a14108c08a88f41d7873aee2e1916382686413be6c1fd05bb947da6722684ea2a672dc561f2476d85aeb35312e1cefde45f1f223ad2dac5104daa07e1ddc59843a08400fc686fffd83c84e347786cc132db335bc71852dcf128841ec27a6bc495bba0996692e05fd8c1898f72373df61a26a982427c0f30a52253724a000f06417a56c6010221e329c1404e76e2ebbf0057f4744a9f27af5735d914d81a49d3cb5da926744abb89ead0f28cd08a2daa47864f86209852f029965bb03fc49691f2d3886b1cfcbfc47bf076bd62965e02ac254310ec7166a770dd2a5a71481d42260a36911bc1797084c3b38c3101375314d14c33a28775359f5a91a15d5e0473390ac5ad4759dd1fa9519317791d348f140c9f4420e8c01dc2a9d61eff9faea059a5187540b7a93702ffd281f015efde68f2457d9c55559271cd78432bf9abd59425ae4c9334cc0a9660679b16716d2303df9a4aab50c74bc922b0192b02895ecd218899dd4066f81f41ca03db2d3493562874b4eb161621f0b228971dd6818ac82ff2bcbbc9101df540bfa5666dc0305a1aa3f0b6c6e22399ec3e37342295e16a287296dc65375323ff36148837cffc24309b49262c519ca286299be97c75c104155c2c1e740042673c6bc7641aa491889b7c09e94cf2bd9947f3b2ee2fcb70f50ff3b75a521cd355199a1d56ef2baad40a5c2b39a9deb7ddc85cba3d24e94c228e62e9e0562b55bae6b4a3a3230223023293b5e93bd10b13123279df18e503390bab0f0af0f0fa33f9c27659601a498a20fb2787a415ecc384d66cc8fde392e537910d08bbee542c1d759b326fdcd7c2f046a6120cb69c1093d3aa24e18fc737245ba2e33a92aed30400de32313aafd51e5d7f5bca46128c9ce84c2a50176efa73edd6b73283abc0a4153b78dcc475e9e7423d8f969e305baf4891733c0613e0ee2ba05926c6ba502ecf85afa0e3c8cc9d8449af2f42287bb81df89ee3fc55a7c4c9f1ec068c2a5e2c05abd327729ff7bda79ea82da4b574baaea5c77320f60bef517d1c1b301c8ee9967aa5c9eedbd8e9844e4681f174092e3e722790b2f7087d20c065e523b998c0452d445acf30c272149382435654fc16a6f46839c4f4f69aadb0b299004d0b89cfa5103d2b81287c1c978061a871c76e5443ce66a24043b0c216e90114aab08711177df0410874217b43947df18dbebdbec2f946d315e298ad8e0fef2c5fedb3bb4cc7597093c3d6688c9bb3485558a913007de0d19454ed93ae3704f149125f2ee8521a3e70513ff18a2c0cc4f56948e7312514a2689b8833d5725b913490b33a6f12e05f19f37b38c6f120728fdd1047fa8828ffb0ea4537518a0627516a45bbe925d387428e1c89b507f2287cec76b3237254b23abfea6a6367c83ba9f62450151387a38b00bfd01843fe3eda08cd10daad3bbb58f44b7050b37de525733f42c6a9e78cd73793c656fcc781c64fc25c3ea9ca2bd3561e9e23079285bd8157de0b1f1cdb4d9072a4870da55699950f4cadd4dbae10911c2376e99d350d9b618bab22ea01864a9febfbb0c7c8f2630d314e3c673c7386d70b5b99cfd3ac64636161f60b79e558865e86c9d0fa4f62203d9a55bc6ca9af7ed5637d8cbd8c5f1b2f6c60882a6bc540052b524ce1c4dde8cbe7d645bd13b7e24cfa361a60f112eed4199101fc7568e23e55e228f7b1d8646d5f5092a7963e4f2e2bf183cf4593edee8a2bc2d8c4df47c4932bd028a3fe4281e6493d3271c67bf330f79badf920f1b22bf046da9c220217f9f9f5f887494ec5c34129ab84693c50293f0aa89ef8c842c07b810477f688951f8ff5a650ed8127d1ba964d349c0195a26d88e1dff2556e3f561c5a1380fdbd4640ac47fa68300d957e3002d73ce1ffb0a23dc1d5833b79e277b3a7870a156a79f8eb113e2bc9d3a34be5e10a037b6041e0d48161b2a83a85a8fba80ee59b6a9d9ee014cfb31b67d9abbaf0707ff637112fca2df5c931c54dc7714d8515bc0655d5260e74fab36efdd312d86e2c8766fe2c76e7924beef049e8274e21352325d16837981faed1a1dd607417ef1e06603e451e78e56593a134b8c1367b6c96dbc9df49e927feb6ee5c6b0d572db262e5fb982d193b031d3ae3f077ad93b1b7f61f4dcc8117320832d740a2bf661455d79a459b3a894a73bdd8b3a0339f0f92035149a19a85af40b2caf96b41eecd2dda1f15a75700a6996a5db531e8cb5125b6ada495f5de56a578e08418571a0dfb61250e7c564e2eb845212d21bb13970cfa33bed107daa29406172e330cabc27a661df7de00847d7e808d9ad8bd18adc9c25d0962aac1241ee6d44fd4cefe2d83ce7220249da617911676f6770890e3148d34c67653b2f515df9a197591dea14932fff30a2399d6765e81d7e499130e088317c5f5694aaf8d3d3ca1249ad508408ebfa13bd40c73103397d8da5960657c9d2a1f3f5deb05a32e06e1156ad5fa41fa59468cd648432e234ee485792c7db78e383879e1f723def50129ad8b55760ea22c39aebda3f61621d3d93d28184852bbc9b33d5d02fdb7d30e7b6b4661ee3dbe04d518f72e639dcaee8dc220113691c0f5ff4e5b4553388fb38ae7a3af474456be39528f16d008d179376ea4891c25e55b2af7039f9ce48b965ac8a6145ff736393e57700092e56471a832baf3246799f6039e3eee05a5403b23d80d591a337c2fd5fb429d16824e4cf0a9e85ffbdaca0f1e782ef5d6252694a7094e3572d2d52f72985bd6fe7f08575dc0fc9be40bb33bdb04485f63ba29aa67c8ee9c9e6e4a63fc47571bf2da02d6284923807072de2dafb5fb9717eae9df52d94ad956ac8dbce43d35271cdae0f5882e9a8091f0a7cf7f5501d0fba21bf651bcf395a3d4b5babf201c2dd62418ed2877dec088abe00a53c1be6c7597e38257f12c462eb890f0d83c12b296aeec8bcfb1e6a308b9f79d4ece40e5d541ea25fbe4ffd2741c8d591308796e528e1c702b287b65573d63a48aca69b12f12e0121be6c4c8eef3b03af655804e135acd4f368e57a5b653488feac8ed2f4155b05ddcea117820fe86b"}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x800) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3305.557378] IPVS: length: 72 != 8 22:48:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x2c, 0x0, 0x0) 22:48:13 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x8, 0x3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x8}) 22:48:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r2, 0x9edf1750787b1436, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800000000000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fff, 0x200000) accept$unix(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fe) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x8000000000, 0x8, 0x5, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x2003) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x0, 0x3ff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @remote}, {0x306, @local}, 0x2c, {0x2, 0x4e24, @rand_addr=0x1c0000000000}, 'gre0\x00'}) 22:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x74, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0xf, 0x0, 0x0) 22:48:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x98, &(0x7f0000000300)=[@in={0x2, 0x4e20, @rand_addr=0xffffffff}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x147, @loopback, 0x8}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8e}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000440)={r2, 0x40, 0x3, 0x2}, &(0x7f0000000480)=0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x410000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x82, "0320a9303a49e2fe51e5c12187bc979a799130dc50dfc9fbaae165bcc3e0405ac4fc3a94aa37e0b96519bcb3e3ec2db466d618b6985cec842a9e401ea40a0cb1c779107830632339e688774fbb3cc1147d21a4f19f39ee07a13f2718c1993bb09f91d2199adeb35ab0eebd3676e598fca5f8998a86857ae589d87b8e2955c4cc7a43"}, &(0x7f0000000140)=0x8a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, [0x50000000, 0x5aec0e36, 0x1, 0x5, 0xfe4, 0x0, 0x3, 0x0, 0x6, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x7, 0x8]}, &(0x7f0000000280)=0x100) epoll_wait(r3, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x3) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000004c0)=0x7, 0x2, 0x5) 22:48:13 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:13 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xffffffff80000001}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r1, 0x4}, &(0x7f00000003c0)=0x8) socketpair(0x10, 0x3, 0x80, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x100bd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x60040, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10440}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002dbd7000fbdbdf2506000000000000000b000000008cb687e90bd0c3202f79e090c13a352f212f063a8b9a65550000"], 0x28}}, 0x810) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1092c2, 0x0) 22:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x68, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x81, 0x10000) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) 22:48:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40002, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2007f, 0x100) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xfffffffffffffffa, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000400202) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) 22:48:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x2f, 0x0, 0x0) 22:48:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x493d) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:13 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd0010100}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x400000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x10100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x4, 0x8, 0xffffffff80000001, {}, {0x0, 0x2710}, {0x0, 0xe0, 0x1, 0xda5f}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x3852}, 0x1a, 0x2, 0x0, 0x0, "968def40358d24b8406a6af83c8afda30deeb16067359acfe51b30bd02994881eb85e6bb648bbd28ac4a489e821f45aaef1f2266388a122e749617e8a4653296"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/cgroup\x00') 22:48:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x27, 0x0, 0x0) 22:48:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = userfaultfd(0x800) close(r1) 22:48:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000340)={0x9, 0x10000, [{0x3, 0x0, 0x7}, {0x4, 0x0, 0x2}, {0x93a, 0x0, 0x9}, {0x0, 0x0, 0x4}, {0x10001, 0x0, 0x9}, {0x2, 0x0, 0xfffffffffffffffd}, {0x2, 0x0, 0x7}, {0x1, 0x0, 0x81}, {0x262f, 0x0, 0x9}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) setreuid(r2, r3) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x74000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:13 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x3}, 0x28, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x1d, 0x0, 0x0) 22:48:13 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40201, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x8, {{0x2, 0x4e24, @broadcast}}}, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x2402) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r3, 0x4fad, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0xe2, {"68a09e4ecf611bc8226149105b2bfc3c"}, 0x3, 0x3, 0x3f}, @ib={0x1b, 0x8, 0x3, {"3288abd8e8fad6ffd87d83e410e5e139"}, 0x101, 0x6fc57a7f, 0x3}}}, 0x118) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x24, 0x0, 0x0) 22:48:13 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffb000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3f00, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:14 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = dup(r0) getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 3306.665444] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3306.728883] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3306.738662] CPU: 0 PID: 1828 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3306.745961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3306.755323] Call Trace: [ 3306.757937] dump_stack+0x244/0x39d [ 3306.761593] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3306.766814] dump_header+0x27b/0xf72 [ 3306.770545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3306.776116] ? check_preemption_disabled+0x48/0x280 [ 3306.781156] ? pagefault_out_of_memory+0x197/0x197 [ 3306.786096] ? debug_smp_processor_id+0x1c/0x20 [ 3306.790777] ? perf_trace_lock+0x14d/0x7a0 [ 3306.795036] ? lock_is_held_type+0x210/0x210 [ 3306.799454] ? __lock_is_held+0xb5/0x140 [ 3306.803529] ? debug_smp_processor_id+0x1c/0x20 [ 3306.808207] ? perf_trace_lock+0x14d/0x7a0 [ 3306.812453] ? zap_class+0x640/0x640 [ 3306.816178] ? print_usage_bug+0xc0/0xc0 [ 3306.820248] ? lock_is_held_type+0x210/0x210 [ 3306.824697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3306.830257] ? find_held_lock+0x36/0x1c0 [ 3306.834344] ? mark_held_locks+0xc7/0x130 [ 3306.838506] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3306.843621] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3306.848744] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3306.853342] ? trace_hardirqs_on+0xbd/0x310 [ 3306.857672] ? kasan_check_read+0x11/0x20 [ 3306.861833] ? ___ratelimit+0x3b4/0x672 [ 3306.865833] ? trace_hardirqs_off_caller+0x310/0x310 [ 3306.870973] ? trace_hardirqs_on+0x310/0x310 [ 3306.875392] ? lock_downgrade+0x900/0x900 [ 3306.879564] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3306.884680] ? ___ratelimit+0x3b9/0x672 [ 3306.888671] ? idr_get_free+0xf70/0xf70 [ 3306.892663] ? _raw_spin_unlock_irq+0x27/0x80 [ 3306.897164] ? _raw_spin_unlock_irq+0x27/0x80 [ 3306.901681] oom_kill_process.cold.27+0x10/0x903 [ 3306.906462] ? _raw_spin_unlock_irq+0x27/0x80 [ 3306.910975] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3306.915585] ? oom_evaluate_task+0x540/0x540 [ 3306.920022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3306.925574] ? cgroup_procs_next+0x70/0x70 [ 3306.929825] ? _raw_spin_unlock_irq+0x60/0x80 [ 3306.934329] ? oom_badness+0xaa0/0xaa0 [ 3306.938229] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3306.942998] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3306.948545] ? mem_cgroup_iter_break+0x30/0x30 [ 3306.953158] ? cgroup_file_notify+0x226/0x2f0 [ 3306.957671] out_of_memory+0xa84/0x1430 [ 3306.961680] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3306.966275] ? kasan_check_read+0x11/0x20 [ 3306.970434] ? oom_killer_disable+0x3a0/0x3a0 [ 3306.974965] mem_cgroup_out_of_memory+0x15e/0x210 [ 3306.979823] ? memory_oom_group_write+0x160/0x160 [ 3306.984686] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3306.989555] ? page_counter_try_charge+0x1c1/0x220 [ 3306.994508] try_charge+0xda9/0x1700 [ 3306.998245] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3307.002928] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3307.007872] ? kasan_check_read+0x11/0x20 [ 3307.012040] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3307.017327] ? rcu_softirq_qs+0x20/0x20 [ 3307.021330] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3307.026885] ? __kernel_text_address+0xd/0x40 [ 3307.031393] ? lock_page_memcg+0x350/0x350 [ 3307.035673] ? lock_acquire+0x1ed/0x520 [ 3307.039659] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3307.045035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.050599] ? check_preemption_disabled+0x48/0x280 [ 3307.055642] memcg_kmem_charge_memcg+0x7c/0x120 [ 3307.060321] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3307.064828] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3307.070212] memcg_kmem_charge+0x149/0x350 [ 3307.074495] __alloc_pages_nodemask+0x75e/0xea0 [ 3307.079177] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3307.084473] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3307.089498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.095049] ? check_preemption_disabled+0x48/0x280 [ 3307.100090] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3307.105642] ? rcu_pm_notify+0xc0/0xc0 [ 3307.109553] ? copy_process+0x2026/0x87a0 [ 3307.113710] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3307.118753] ? kmem_cache_alloc_node+0x349/0x730 [ 3307.123547] copy_process+0xa09/0x87a0 [ 3307.127461] ? find_held_lock+0x36/0x1c0 [ 3307.131547] ? finish_task_switch+0x1f4/0x910 [ 3307.136086] ? _raw_spin_unlock_irq+0x27/0x80 [ 3307.140610] ? _raw_spin_unlock_irq+0x27/0x80 [ 3307.145135] ? __cleanup_sighand+0x70/0x70 [ 3307.149378] ? compat_start_thread+0x80/0x80 [ 3307.153847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.159398] ? _raw_spin_unlock_irq+0x60/0x80 [ 3307.163909] ? finish_task_switch+0x1f4/0x910 [ 3307.168417] ? finish_task_switch+0x1b4/0x910 [ 3307.172920] ? __switch_to_asm+0x34/0x70 [ 3307.176996] ? preempt_notifier_register+0x200/0x200 [ 3307.182109] ? __switch_to_asm+0x34/0x70 [ 3307.186225] ? __switch_to_asm+0x34/0x70 [ 3307.190292] ? __switch_to_asm+0x40/0x70 [ 3307.194364] ? __switch_to_asm+0x34/0x70 [ 3307.198442] ? __switch_to_asm+0x40/0x70 [ 3307.202518] ? __switch_to_asm+0x34/0x70 [ 3307.206591] ? __switch_to_asm+0x40/0x70 [ 3307.210675] ? __switch_to_asm+0x34/0x70 [ 3307.214752] ? __switch_to_asm+0x34/0x70 [ 3307.218830] ? __switch_to_asm+0x40/0x70 [ 3307.222897] ? __switch_to_asm+0x34/0x70 [ 3307.226967] ? __switch_to_asm+0x40/0x70 [ 3307.231036] ? __switch_to_asm+0x34/0x70 [ 3307.235108] ? __switch_to_asm+0x40/0x70 [ 3307.239193] ? __schedule+0x8d7/0x21d0 [ 3307.243089] ? perf_trace_lock+0x14d/0x7a0 [ 3307.247343] ? perf_trace_lock+0x14d/0x7a0 [ 3307.251612] ? __sched_text_start+0x8/0x8 [ 3307.255779] ? zap_class+0x640/0x640 [ 3307.259508] ? plist_check_list+0xa0/0xa0 [ 3307.263663] ? zap_class+0x640/0x640 [ 3307.267425] ? perf_trace_sched_process_exec+0x860/0x860 [ 3307.272889] ? do_raw_spin_unlock+0xa7/0x330 [ 3307.277313] ? do_raw_spin_trylock+0x270/0x270 [ 3307.281916] ? lock_acquire+0x1ed/0x520 [ 3307.285909] ? __might_sleep+0x95/0x190 [ 3307.285934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.285952] ? futex_wait_queue_me+0x55d/0x840 [ 3307.300076] ? refill_pi_state_cache.part.8+0x310/0x310 [ 3307.305471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.311031] ? get_futex_value_locked+0xcb/0xf0 [ 3307.315714] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3307.320761] ? futex_wait_setup+0x266/0x3e0 [ 3307.325116] ? futex_wake+0x760/0x760 [ 3307.328951] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 3307.334166] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 3307.337059] validate_nla: 15 callbacks suppressed [ 3307.337070] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3307.339280] ? futex_wait+0x5ec/0xa50 [ 3307.339305] ? print_usage_bug+0xc0/0xc0 [ 3307.339323] ? print_usage_bug+0xc0/0xc0 [ 3307.339336] ? futex_wait_setup+0x3e0/0x3e0 [ 3307.339355] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 3307.339378] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 3307.378109] ? futex_wake+0x304/0x760 [ 3307.381939] ? __lock_acquire+0x62f/0x4c20 [ 3307.386206] ? mark_held_locks+0x130/0x130 [ 3307.390560] ? do_futex+0x249/0x26d0 [ 3307.394293] ? _raw_spin_unlock_irq+0x27/0x80 [ 3307.398811] ? _raw_spin_unlock_irq+0x27/0x80 [ 3307.403328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.408884] ? check_preemption_disabled+0x48/0x280 [ 3307.413921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.419476] ? check_preemption_disabled+0x48/0x280 [ 3307.419501] ? debug_smp_processor_id+0x1c/0x20 [ 3307.419517] ? perf_trace_lock+0x14d/0x7a0 [ 3307.419541] ? lock_is_held_type+0x210/0x210 [ 3307.429232] ? lock_is_held_type+0x210/0x210 [ 3307.429250] ? zap_class+0x640/0x640 [ 3307.429269] ? zap_class+0x640/0x640 [ 3307.429290] ? zap_class+0x640/0x640 [ 3307.429305] ? cgroup_file_notify+0x226/0x2f0 [ 3307.429334] ? find_held_lock+0x36/0x1c0 [ 3307.462051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.467608] ? check_preemption_disabled+0x48/0x280 [ 3307.472645] _do_fork+0x1cb/0x11d0 [ 3307.476211] ? fork_idle+0x1d0/0x1d0 [ 3307.479957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3307.485519] ? syscall_trace_enter+0x68c/0x1260 [ 3307.490213] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3307.495784] ? do_syscall_64+0x9a/0x820 [ 3307.499780] ? do_syscall_64+0x9a/0x820 [ 3307.503781] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3307.508390] ? trace_hardirqs_on+0xbd/0x310 [ 3307.512756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.518320] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3307.523701] ? trace_hardirqs_off_caller+0x310/0x310 [ 3307.528847] __x64_sys_clone+0xbf/0x150 22:48:14 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5c93, @mcast2, 0xfffffffffffff8e6}, {0xa, 0x4e23, 0xff, @dev={0xfe, 0x80, [], 0x20}, 0x2}, r2, 0x3}}, 0x48) sendto$inet6(r0, &(0x7f0000000000)="8be60c1c83ef18bb7c8e", 0xa, 0x4001, &(0x7f0000000040)={0xa, 0x4e23, 0xe6, @ipv4={[], [], @loopback}, 0xa6}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:14 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8100, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x25, 0x0, 0x0) 22:48:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x8, 0x0, 0x0) [ 3307.532845] do_syscall_64+0x1b9/0x820 [ 3307.536762] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3307.542159] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3307.547107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3307.551975] ? trace_hardirqs_on_caller+0x310/0x310 [ 3307.557008] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3307.562046] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3307.567082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3307.571954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3307.577158] RIP: 0033:0x457669 [ 3307.580355] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3307.599257] RSP: 002b:00007f010550bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3307.606974] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457669 [ 3307.614248] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000020002100 [ 3307.621518] RBP: 000000000072bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 3307.628802] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f010550c6d4 [ 3307.636067] R13: 00000000004bdbbd R14: 00000000004cd560 R15: 00000000ffffffff [ 3307.650180] Task in /syz0 killed as a result of limit of /syz0 [ 3307.656254] memory: usage 307192kB, limit 307200kB, failcnt 1007238 [ 3307.662758] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3307.669589] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3307.676122] Memory cgroup stats for /syz0: cache:200KB rss:138276KB rss_huge:61440KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:138368KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3307.698326] Memory cgroup out of memory: Kill process 932 (syz-executor0) score 1106 or sacrifice child [ 3307.708054] Killed process 932 (syz-executor0) total-vm:70604kB, anon-rss:2220kB, file-rss:33556kB, shmem-rss:0kB [ 3307.724802] oom_reaper: reaped process 932 (syz-executor0), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 3307.756743] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3307.778416] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3307.783564] CPU: 0 PID: 1827 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3307.790845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3307.800207] Call Trace: [ 3307.802844] dump_stack+0x244/0x39d [ 3307.806495] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3307.811710] dump_header+0x27b/0xf72 [ 3307.815459] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.821017] ? check_preemption_disabled+0x48/0x280 [ 3307.826047] ? pagefault_out_of_memory+0x197/0x197 [ 3307.831101] ? debug_smp_processor_id+0x1c/0x20 [ 3307.835779] ? perf_trace_lock+0x14d/0x7a0 [ 3307.840016] ? lock_is_held_type+0x210/0x210 [ 3307.844415] ? __lock_is_held+0xb5/0x140 [ 3307.848469] ? debug_smp_processor_id+0x1c/0x20 [ 3307.853143] ? perf_trace_lock+0x14d/0x7a0 [ 3307.857378] ? zap_class+0x640/0x640 [ 3307.861099] ? print_usage_bug+0xc0/0xc0 [ 3307.865155] ? lock_is_held_type+0x210/0x210 [ 3307.869585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.875128] ? find_held_lock+0x36/0x1c0 [ 3307.879190] ? mark_held_locks+0xc7/0x130 [ 3307.883331] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3307.888422] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3307.893518] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3307.898092] ? trace_hardirqs_on+0xbd/0x310 [ 3307.902405] ? kasan_check_read+0x11/0x20 [ 3307.906556] ? ___ratelimit+0x3b4/0x672 [ 3307.910525] ? trace_hardirqs_off_caller+0x310/0x310 [ 3307.915619] ? trace_hardirqs_on+0x310/0x310 [ 3307.920016] ? lock_downgrade+0x900/0x900 [ 3307.924169] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3307.929299] ? ___ratelimit+0x3b9/0x672 [ 3307.933275] ? idr_get_free+0xf70/0xf70 [ 3307.937239] ? _raw_spin_unlock_irq+0x27/0x80 [ 3307.941733] ? _raw_spin_unlock_irq+0x27/0x80 [ 3307.946228] oom_kill_process.cold.27+0x10/0x903 [ 3307.951095] ? _raw_spin_unlock_irq+0x27/0x80 [ 3307.955587] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3307.960164] ? oom_evaluate_task+0x540/0x540 [ 3307.964562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3307.970106] ? cgroup_procs_next+0x70/0x70 [ 3307.974358] ? _raw_spin_unlock_irq+0x60/0x80 [ 3307.978857] ? oom_badness+0xaa0/0xaa0 [ 3307.982767] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3307.987535] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3307.993065] ? mem_cgroup_iter_break+0x30/0x30 [ 3307.997648] ? cgroup_file_notify+0x226/0x2f0 [ 3308.002138] out_of_memory+0xa84/0x1430 [ 3308.006103] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3308.010690] ? kasan_check_read+0x11/0x20 [ 3308.014854] ? oom_killer_disable+0x3a0/0x3a0 [ 3308.019351] mem_cgroup_out_of_memory+0x15e/0x210 [ 3308.024260] ? memory_oom_group_write+0x160/0x160 [ 3308.029133] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3308.033970] ? page_counter_try_charge+0x1c1/0x220 [ 3308.038895] try_charge+0xda9/0x1700 [ 3308.042606] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3308.047267] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3308.052184] ? kasan_check_read+0x11/0x20 [ 3308.056334] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3308.061615] ? rcu_softirq_qs+0x20/0x20 [ 3308.065584] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3308.071113] ? __kernel_text_address+0xd/0x40 [ 3308.075608] ? lock_page_memcg+0x350/0x350 [ 3308.079845] ? lock_acquire+0x1ed/0x520 [ 3308.083815] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3308.089170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.094877] ? check_preemption_disabled+0x48/0x280 [ 3308.099893] memcg_kmem_charge_memcg+0x7c/0x120 [ 3308.104552] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3308.109039] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3308.114398] memcg_kmem_charge+0x149/0x350 [ 3308.118642] __alloc_pages_nodemask+0x75e/0xea0 [ 3308.123316] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3308.128587] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3308.133612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.139143] ? check_preemption_disabled+0x48/0x280 [ 3308.144167] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3308.149734] ? rcu_pm_notify+0xc0/0xc0 [ 3308.153621] ? copy_process+0x2026/0x87a0 [ 3308.157761] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3308.162767] ? kmem_cache_alloc_node+0x349/0x730 [ 3308.167518] ? check_preemption_disabled+0x48/0x280 [ 3308.172552] copy_process+0xa09/0x87a0 [ 3308.176431] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.181963] ? __lock_acquire+0x62f/0x4c20 [ 3308.186189] ? find_held_lock+0x36/0x1c0 [ 3308.190250] ? __cleanup_sighand+0x70/0x70 [ 3308.194479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.200018] ? print_usage_bug+0xc0/0xc0 [ 3308.204114] ? debug_smp_processor_id+0x1c/0x20 [ 3308.208783] ? perf_trace_lock+0x14d/0x7a0 [ 3308.213028] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3308.218139] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3308.223259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.228785] ? check_preemption_disabled+0x48/0x280 [ 3308.233804] ? debug_smp_processor_id+0x1c/0x20 [ 3308.238488] ? __lock_acquire+0x62f/0x4c20 [ 3308.242714] ? lock_is_held_type+0x210/0x210 [ 3308.247128] ? mark_held_locks+0x130/0x130 [ 3308.251353] ? print_usage_bug+0xc0/0xc0 [ 3308.255411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.260947] ? check_preemption_disabled+0x48/0x280 [ 3308.265980] ? print_usage_bug+0xc0/0xc0 [ 3308.270043] ? __lock_acquire+0x62f/0x4c20 [ 3308.274269] ? lock_is_held_type+0x210/0x210 [ 3308.278694] ? print_usage_bug+0xc0/0xc0 [ 3308.282766] ? __lock_acquire+0x62f/0x4c20 [ 3308.286996] ? print_usage_bug+0xc0/0xc0 [ 3308.291057] ? __lock_acquire+0x62f/0x4c20 [ 3308.295310] ? mark_held_locks+0x130/0x130 [ 3308.299538] ? debug_smp_processor_id+0x1c/0x20 [ 3308.304204] ? mark_held_locks+0x130/0x130 [ 3308.308431] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.313976] ? check_preemption_disabled+0x48/0x280 [ 3308.318987] ? debug_smp_processor_id+0x1c/0x20 [ 3308.323670] ? perf_trace_lock+0x14d/0x7a0 [ 3308.327907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.333440] ? check_preemption_disabled+0x48/0x280 [ 3308.338464] ? debug_smp_processor_id+0x1c/0x20 [ 3308.343135] ? perf_trace_lock+0x14d/0x7a0 [ 3308.347376] ? print_usage_bug+0xc0/0xc0 [ 3308.351451] ? zap_class+0x640/0x640 [ 3308.355169] ? delayacct_end+0xc5/0x100 [ 3308.359132] ? zap_class+0x640/0x640 [ 3308.362838] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3308.367937] ? __lock_acquire+0x62f/0x4c20 [ 3308.372162] ? find_held_lock+0x36/0x1c0 [ 3308.376218] ? mark_held_locks+0x130/0x130 [ 3308.380443] ? _raw_spin_unlock_irq+0x27/0x80 [ 3308.384927] ? _raw_spin_unlock_irq+0x27/0x80 [ 3308.389410] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3308.393982] ? trace_hardirqs_on+0xbd/0x310 [ 3308.398295] ? kasan_check_read+0x11/0x20 [ 3308.402438] ? psi_memstall_leave+0x202/0x260 [ 3308.406938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.412474] ? check_preemption_disabled+0x48/0x280 [ 3308.417478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.423034] ? debug_smp_processor_id+0x1c/0x20 [ 3308.427695] ? perf_trace_lock+0x14d/0x7a0 [ 3308.431940] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3308.437481] ? lock_is_held_type+0x210/0x210 [ 3308.441892] ? zap_class+0x640/0x640 [ 3308.445596] ? cgroup_file_notify+0x226/0x2f0 [ 3308.450101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3308.455667] ? check_preemption_disabled+0x48/0x280 [ 3308.460679] _do_fork+0x1cb/0x11d0 [ 3308.464215] ? fork_idle+0x1d0/0x1d0 [ 3308.467926] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3308.473460] ? syscall_trace_enter+0x68c/0x1260 [ 3308.478126] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3308.483652] ? rcu_softirq_qs+0x20/0x20 [ 3308.487618] ? check_preemption_disabled+0x48/0x280 [ 3308.492632] ? do_syscall_64+0x9a/0x820 [ 3308.496595] ? do_syscall_64+0x9a/0x820 [ 3308.500565] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3308.505143] ? trace_hardirqs_on+0xbd/0x310 [ 3308.509452] ? trace_hardirqs_on+0x310/0x310 [ 3308.513851] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3308.519204] ? trace_hardirqs_off_caller+0x310/0x310 [ 3308.524303] __x64_sys_clone+0xbf/0x150 [ 3308.528294] do_syscall_64+0x1b9/0x820 [ 3308.532177] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3308.537543] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3308.542471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3308.547306] ? trace_hardirqs_on_caller+0x310/0x310 [ 3308.552333] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3308.557342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3308.562178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3308.567356] RIP: 0033:0x45a039 [ 3308.570539] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3308.589443] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3308.597142] RAX: ffffffffffffffda RBX: 00007f01054eb700 RCX: 000000000045a039 [ 3308.604404] RDX: 00007f01054eb9d0 RSI: 00007f01054eadb0 RDI: 00000000003d0f00 [ 3308.611662] RBP: 0000000000a3fcd0 R08: 00007f01054eb700 R09: 00007f01054eb700 [ 3308.618932] R10: 00007f01054eb9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3308.626202] R13: 0000000000a3fb7f R14: 00007f01054eb9c0 R15: 000000000072bfac [ 3308.637110] Task in /syz0 killed as a result of limit of /syz0 [ 3308.643263] memory: usage 303968kB, limit 307200kB, failcnt 1007238 [ 3308.649790] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3308.656564] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3308.662882] Memory cgroup stats for /syz0: cache:200KB rss:136156KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:136200KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3308.684393] Memory cgroup out of memory: Kill process 767 (syz-executor0) score 1106 or sacrifice child [ 3308.694360] Killed process 767 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33560kB, shmem-rss:0kB 22:48:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x16, 0x0, 0x0) 22:48:16 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x4000) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x9) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x8, 0x7576755b, 0x3, @discrete={0x5, 0xffff}}) 22:48:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ptrace$cont(0x1f, r2, 0x5, 0xffffffff00000001) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0x4, {0x5, 0x400, 0x4, 0x80000001}}) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000ffc000/0x3000)=nil) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) 22:48:16 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7ff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) [ 3308.800003] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3308.834181] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xa3d4, 0x113000) sendmsg$nl_crypto(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@get={0x100, 0x13, 0x2, 0x70bd29, 0x25dfdbfc, {{'aegis128l-aesni\x00'}, [], [], 0x2400, 0x400}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0x80}, {0x8, 0x1, 0x20}, {0x8, 0x1, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x8000) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffffffffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:16 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101201, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x3, 0x0, 0x0) 22:48:16 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3308.971253] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x400, 0x1}, {0x1, 0x840a}, {0xe58e2b6, 0x7ff}]}) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x20000000, 'wrr\x00', 0x5}, 0xfffffffffffffe41) fstat(r2, &(0x7f0000000140)) 22:48:16 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000207264bc0ba3c1213c807539f9cbf37407878ed0c0cbab9d78f43b61a7b090f8ff0f2b639e8a85c14f1cc377c473ec1fa2b425918d60d77176bf33eb95f639cc79d0352d404b499871041815d639ab0c05935c534a24e695e7a5858a0c3e8b579c789cd0f5f714506623c5e2893ce0edbe6e09a1ce1090af21dc00f1a4e722d630c3a3e72d9ac8c7350e9263", @ANYRES16=r1, @ANYBLOB="00142dbd7000fddbdf25010000e7ffffff000841000000140018000000007564703a73797a3100000000c444c8f2a8c4df8256e00032ef712bfc5f201cb47fa01f28dae6b94c52a055311605313fc43537a14411db64b7ae4cecae6cb5c8c9"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000500)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0xfa2b, 0x3ea658fe, 0x7, 'queue1\x00', 0x80000001}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)) lsetxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.origin\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000100)={0xd1, [0x2, 0x100, 0x8001, 0xffffffffa59681d7, 0x2, 0x7, 0x4, 0xd49a, 0x20, 0x3, 0x7fff, 0x6, 0x3, 0x1c000000000, 0x4b4, 0x2, 0xa75, 0x6477, 0x7c, 0x2, 0x3, 0xfffffffffffffff9, 0x100, 0x646ee81a, 0x19, 0x4, 0x0, 0x2, 0x40, 0xffff, 0x800000000002, 0xe9, 0x381, 0xffffffff, 0xffffffff7fffffff, 0xffff, 0x9, 0x0, 0xf19, 0x8, 0x7fff, 0xe00000000000, 0xb8, 0x2, 0x8, 0x3, 0x1008, 0x2], 0xf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000200)={{0xa0, 0x9}, 'port1\x00', 0x41, 0x8, 0x7, 0x4994, 0x3, 0x19, 0x10001, 0x0, 0x0, 0xfffffffffffff485}) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000640)=[{0x1, 0x4, 0x40, 0x7fffffff, @time={0x77359400}, {0x6}, {0x800, 0x400}, @addr={0x3, 0x20}}, {0x9, 0x4, 0x5, 0x7fff, @time={0x0, 0x989680}, {0x1, 0x7f}, {0xff, 0x9dcf}, @control={0x7, 0xfffffffffffffffe, 0x38000}}, {0x4, 0x1ff, 0x81, 0x3f, @tick=0x2, {0xb6, 0x8}, {0x1, 0x3}, @ext={0xfc, &(0x7f0000000540)="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"}}, {0x4b2cc371, 0x0, 0xffffffffffffff09, 0x4, @tick=0x100000001, {0x2, 0xfffffffffffffffb}, {0x9, 0x1}, @time=@time={r5, r6+10000000}}, {0x546, 0x9, 0x4, 0x100000000, @tick=0x3, {0x3, 0x7f}, {0x80000000, 0xffff}, @time=@tick=0x4}, {0x5, 0x4279, 0x3, 0xb1, @time={0x0, 0x989680}, {0x1, 0x5}, {0x1f, 0x101}, @raw8={"b2f48a12100d1b3acb3d632c"}}], 0x120) 22:48:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x1b, 0x0, 0x0) 22:48:16 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3309.100614] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:16 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3a, 0x800) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000140)='./file0\x00', 0x404000, 0x155) clone(0x20000000200020fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) unshare(0x10000000) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000180)={0x0, @empty, 0x0, 0x4, 'nq\x00', 0x0, 0x7}, 0x2c) 22:48:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_CAPBSET_READ(0x17, 0x12) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x7, 0x0, 0x0) 22:48:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x8000, 0x4) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:16 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3309.275347] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:16 executing program 2: r0 = getuid() setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0xfff, 0xd74}, {0x5, 0x5}], r0}, 0x18, 0x1) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0x1) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000000000000000000000200000020000000000000000000000000000000000000000000000000010000000000700000000000000000000000000000005000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099a9617426010000000000c7efca8ab8d42d5a3397771bb65330440574ac969c8966db9c00bcd8c943b83a6f80c182da558e7db574176d0000000000000000"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x7, 0x800) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x200}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept$unix(r5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x100) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x468100) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40001, 0x0) r7 = dup3(r4, r6, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400000400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f0000000000)={0x0, 0x8, 0x0, 0xfffffffffffffffd}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000180)) 22:48:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x26, 0x0, 0x0) [ 3309.405472] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:16 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x10000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x0, 0x80000000, 0x0, 0x1, 0x200, 0x7fff, 0x1ff, 0x60cf, 0x1000, 0xeb, 0x0, 0x7, 0x9, 0x101, 0x1b, 0x10}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x38) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4fc, 0x30}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x71, @ipv4={[], [], @multicast1}, 0x4}}, [0xf9, 0x55c, 0x3ff, 0x7, 0x6, 0x0, 0x20, 0x7fffffff, 0x7f, 0xf1, 0x10001, 0x10000, 0x3ff, 0x9, 0x2]}, &(0x7f0000000300)=0x100) 22:48:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x81000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x59616d61, 0x0, 0x0) 22:48:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x408000) listen(r0, 0x110000000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000040)=0x6) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r3, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4a4e917}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 22:48:16 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) [ 3309.592675] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:17 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x21, 0x0, 0x0) 22:48:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x0, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x98) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) accept(r1, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_getsetattr(r3, &(0x7f00000006c0)={0x58, 0x2, 0x88c1, 0x3ff, 0x9, 0x0, 0x8001, 0x1}, &(0x7f0000000700)) write$FUSE_ATTR(r3, &(0x7f0000000640)={0x78, 0x0, 0x7, {0x28b, 0x80000001, 0x0, {0x3, 0xffffffff, 0x5, 0x7fff, 0x5, 0xffff, 0x20, 0x401, 0x8, 0x7, 0x9, r5, r6, 0x6, 0xad}}}, 0x78) fcntl$setown(r0, 0x8, r4) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000080)={0x3, 0x244}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) write$FUSE_ATTR(r3, &(0x7f0000000440)={0x78, 0x0, 0x2, {0x6, 0x8, 0x0, {0x1, 0x9, 0x7, 0x5, 0x7f, 0x8001, 0xfffffffeffffffff, 0x400, 0x4e4c, 0x1, 0x8, r7, r8, 0x6, 0x8}}}, 0x78) 22:48:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x1) 22:48:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) r3 = dup2(r0, r1) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x180000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x35cc1b3a1e0c1fda, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='c\'roup4stat\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000000c0)={r0, r5}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={[], 0xffffffffffffff07, 0xfc, 0x9, 0x4, 0x3, r6}) capset(0x0, &(0x7f0000000000)={0x0, 0x8}) 22:48:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x10000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x0, 0x0) 22:48:17 executing program 1: socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod(&(0x7f0000000000)='./file0\x00', 0x8200, 0x7fffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 22:48:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200000, 0x0) fchmodat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x21) pipe2(&(0x7f0000000140), 0x4800) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101600, 0x100) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x800, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) move_pages(r3, 0x7, &(0x7f0000000040)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil], &(0x7f0000000080)=[0x5, 0x2ff, 0x1f, 0x2, 0x77e, 0x7, 0x2, 0x394, 0x5, 0xffffffffffffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:17 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x10000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x0, 0x80000000, 0x0, 0x1, 0x200, 0x7fff, 0x1ff, 0x60cf, 0x1000, 0xeb, 0x0, 0x7, 0x9, 0x101, 0x1b, 0x10}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x38) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4fc, 0x30}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x71, @ipv4={[], [], @multicast1}, 0x4}}, [0xf9, 0x55c, 0x3ff, 0x7, 0x6, 0x0, 0x20, 0x7fffffff, 0x7f, 0xf1, 0x10001, 0x10000, 0x3ff, 0x9, 0x2]}, &(0x7f0000000300)=0x100) 22:48:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) kexec_load(0x6, 0x7, &(0x7f0000000500)=[{&(0x7f0000000000)="9c836c762aec0473622a0301d23c04835d60c674b02d798e63836173e88240c86d9e757c48bffe5843582843cd01ea0d61a39715962c04ef21097f2449e942d65362c5aa67393156a406797f2e03ae71fadb83c133db8a3bef159f782d7ff03c839fc4ea4a09955497ad27d0803e76f048b3f274bf7c4cd43dd75f675c0bcbf4ae014d4fc5b379424fbd813b01197afcfce19042afeec3cfc96b93d1cc252c4825b4704867defda2e7808ca64b2f", 0xae, 0x0, 0xffffffff}, {&(0x7f00000000c0)="f0a5c5ce1d124aef5edf51fad5e4765d9886e1f1908aeb6948d04f633bb5d60cbe524f78a3a7d082a83a9bf68d1a9f649158b7a59705f49cb595077b2f324a58b954a416f3acd039d3f222574b345414108443f13fe7d95af5f04c80f99fbfde5637709237dea08f915a2d5986c8cf5aeb69433b318ce0b0fe8f0cfd81500b913bd0f946f15466a2d91a5fbb43b3bb245f9356170ba77567278312ac92cfed0588297ec9971cb83780f6bbca6106c674bcdd59ebd2da36a5cbae33cb2cfb00259a3dd82c021adb605fdb1e2640b57c934ad5462567911842f5b5a70b97926f0b4ba1e485f22663a8ff", 0xe9, 0x69f, 0x100000000}, {&(0x7f00000001c0)="696664f59cb6cfd3f4ee9a51d3839be6746c8c1c6f2030c15240190ef3d20c2b7b2aabf3f276e4d80b7cf0270e9c878f2cdbd6ec7d77bff74d530032360c52f905a74aae92c5794d6b85e89fa333002854167e5a527f03b0aa63b78a8b93be2dae58f637a369a067257c337994526ed6f00a50a791ac18a4c6aea38c87c4c5e0343101fabfb26012b3d137bd9b2538966814b80e6056959c5f4acaa151fbce3ac5809d72c79ad1b3aa1904b38f13eb911487850ebcd3efd7c42d0126f8e22ce8ae6f4a2ee4683a5d3f1e2159704fb3ee8aac8b0e842444f29c27e58ea6b1f0f68ce00e474a34a1dc34171d78ca56c2aa2ee7feaf9e0cef3a4f4f5580cdaa24", 0xff, 0xb, 0x5}, {&(0x7f00000002c0)="f52a2eb47a7308ffbbfba2c38650126bdfe205c6f75b63c140c9f3ce878dcc1d34c8104021d1dff46dfab074b1e5f28679ed099fde367ef0ab9f5810498b1c7a9c25e6a654bad80249322e1f6cc47c56da8ae57de2727fb9087e5a3c6fa8767881cad57af29d7ea82ddaad00022648160cbd65fe9a3e255346057d9e6b6af33e524b5c096c007b2abf1c9a2343b9ca59683cb137dbcd9de343ea58b810ea41753d76718acfc15c1dcbd1c6dcab56f69b59eb8de908dcde948125cd9a2927475664dfc78874871507f612fe3f53a3a17a4fae", 0xd2, 0x80000001, 0xfffffffffffff14f}, {&(0x7f00000003c0)="8b0a564824c1026e9435324b23c5ee317e46bcda79cd9da39418b819e77238052b1a97a54202b446d73e3f4ba4cf60d37f29a6d42cb6fcc75ec4293f6ef9bd6626d27a8901f64687", 0x48, 0x10000, 0x100000001}, {&(0x7f0000000440)="bbc052c977799f50b19e34f77cac268910f02b44c3088cb50fa5be203cf7e6e8fef261b316a8ad0d816357de0bd5779f8afdc1e99087749ce2a66ec82a9b205192d90ea3393e1a59ec8ec71afb40c37d3c95b9bef3718857af0371a7c6d852e21370ae3eb2f80b6fb260", 0x6a, 0x9, 0x856d}, {&(0x7f00000004c0)="b77d1953546f3b6643d0d22915ee3efcbff9e62e3c12d2e63ff0d5ebe2eca38d68a8b91601b5c55e510774d837ebd4", 0x2f, 0x7, 0x9}], 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x2a, 0x0, 0x0) [ 3310.045762] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:17 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff9e, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) [ 3310.217443] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$unix(r1, 0x0, 0x0) fcntl$getflags(r2, 0x40b) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 22:48:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:17 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x113, 0x40) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfa2) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x1e, 0x0, 0x0) 22:48:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:17 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @broadcast}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000440), &(0x7f0000000480)) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x1, r3}, {0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x3}, [{0x8, 0x2, r6}], {0x10, 0x6}, {0x20, 0x4}}, 0x44, 0x1) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000005c0)={0xbb0000, 0xabf, 0x5, [], &(0x7f0000000580)={0xa00965, 0x3, [], @ptr=0x3}}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x10, 0x0, 0x0) 22:48:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x1878, 0x65}, {0x1, 0x8}, 0x7f, 0x3, 0x2}) 22:48:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x800000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:17 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3310.564011] Unknown ioctl -1071622583 22:48:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0xfffffffffffffffb, 0x8000, 0x3997, 0x3}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x1000}, 0x28, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x4, 0x0, 0x0) 22:48:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4800000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3310.649226] Unknown ioctl -1071622583 22:48:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) 22:48:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0xd, 0x0, 0x0) 22:48:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7400000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 22:48:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:18 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:18 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x48000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x19, 0x0, 0x0) 22:48:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xf19, 0x420000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r2, 0x10}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:18 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:18 executing program 1: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x68000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast1, r2}, 0xc) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x17, 0x0, 0x0) 22:48:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$unix(0x1, 0x0, 0x0) 22:48:18 executing program 1: get_mempolicy(0x0, &(0x7f0000000040), 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3f000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x2, 0x0, 0x0) 22:48:18 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c00, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3311.246775] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3311.268429] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3311.309450] CPU: 1 PID: 2205 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3311.316768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3311.326131] Call Trace: [ 3311.328752] dump_stack+0x244/0x39d [ 3311.332407] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3311.337629] dump_header+0x27b/0xf72 [ 3311.341384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.346938] ? check_preemption_disabled+0x48/0x280 [ 3311.351989] ? pagefault_out_of_memory+0x197/0x197 [ 3311.356963] ? debug_smp_processor_id+0x1c/0x20 [ 3311.361656] ? perf_trace_lock+0x14d/0x7a0 [ 3311.365919] ? lock_is_held_type+0x210/0x210 [ 3311.370361] ? __lock_is_held+0xb5/0x140 [ 3311.374453] ? debug_smp_processor_id+0x1c/0x20 [ 3311.379141] ? perf_trace_lock+0x14d/0x7a0 [ 3311.383422] ? zap_class+0x640/0x640 [ 3311.387162] ? print_usage_bug+0xc0/0xc0 [ 3311.391242] ? lock_is_held_type+0x210/0x210 [ 3311.395673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.401238] ? find_held_lock+0x36/0x1c0 [ 3311.405336] ? mark_held_locks+0xc7/0x130 [ 3311.409518] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3311.414639] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3311.419767] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3311.424389] ? trace_hardirqs_on+0xbd/0x310 [ 3311.428773] ? kasan_check_read+0x11/0x20 [ 3311.432945] ? ___ratelimit+0x3b4/0x672 [ 3311.436937] ? trace_hardirqs_off_caller+0x310/0x310 [ 3311.442058] ? trace_hardirqs_on+0x310/0x310 [ 3311.446487] ? lock_downgrade+0x900/0x900 [ 3311.450657] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3311.455781] ? ___ratelimit+0x3b9/0x672 22:48:18 executing program 1: get_mempolicy(0x0, 0x0, 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x28, 0x0, 0x0) 22:48:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:18 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) [ 3311.459789] ? idr_get_free+0xf70/0xf70 [ 3311.463777] ? _raw_spin_unlock_irq+0x27/0x80 [ 3311.468290] ? _raw_spin_unlock_irq+0x27/0x80 [ 3311.472826] oom_kill_process.cold.27+0x10/0x903 [ 3311.477601] ? _raw_spin_unlock_irq+0x27/0x80 [ 3311.482119] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3311.482144] ? oom_evaluate_task+0x540/0x540 [ 3311.482163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.482183] ? cgroup_procs_next+0x70/0x70 [ 3311.482202] ? _raw_spin_unlock_irq+0x60/0x80 [ 3311.482218] ? oom_badness+0xaa0/0xaa0 [ 3311.482236] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3311.482253] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3311.482268] ? mem_cgroup_iter_break+0x30/0x30 [ 3311.482307] ? cgroup_file_notify+0x226/0x2f0 [ 3311.482329] out_of_memory+0xa84/0x1430 [ 3311.482349] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3311.537385] ? kasan_check_read+0x11/0x20 [ 3311.541558] ? oom_killer_disable+0x3a0/0x3a0 [ 3311.546097] mem_cgroup_out_of_memory+0x15e/0x210 [ 3311.550968] ? memory_oom_group_write+0x160/0x160 [ 3311.555831] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3311.560703] ? page_counter_try_charge+0x1c1/0x220 [ 3311.565678] try_charge+0xda9/0x1700 [ 3311.569418] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3311.574106] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3311.579052] ? kasan_check_read+0x11/0x20 [ 3311.583223] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3311.588517] ? rcu_softirq_qs+0x20/0x20 [ 3311.592527] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3311.598086] ? __kernel_text_address+0xd/0x40 [ 3311.602603] ? lock_page_memcg+0x350/0x350 [ 3311.606870] ? lock_acquire+0x1ed/0x520 [ 3311.610865] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3311.616243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.621800] ? check_preemption_disabled+0x48/0x280 [ 3311.626839] memcg_kmem_charge_memcg+0x7c/0x120 [ 3311.631530] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3311.636048] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3311.641438] memcg_kmem_charge+0x149/0x350 [ 3311.645683] __alloc_pages_nodemask+0x75e/0xea0 [ 3311.650358] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3311.655659] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3311.660692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.666258] ? check_preemption_disabled+0x48/0x280 [ 3311.671333] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3311.676884] ? rcu_pm_notify+0xc0/0xc0 [ 3311.680775] ? copy_process+0x2026/0x87a0 [ 3311.684929] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3311.689940] ? kmem_cache_alloc_node+0x349/0x730 [ 3311.694695] copy_process+0xa09/0x87a0 [ 3311.698591] ? find_held_lock+0x36/0x1c0 [ 3311.702674] ? finish_task_switch+0x1f4/0x910 [ 3311.707164] ? _raw_spin_unlock_irq+0x27/0x80 [ 3311.711692] ? _raw_spin_unlock_irq+0x27/0x80 [ 3311.716185] ? __cleanup_sighand+0x70/0x70 [ 3311.720431] ? compat_start_thread+0x80/0x80 [ 3311.724899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.730441] ? _raw_spin_unlock_irq+0x60/0x80 [ 3311.734945] ? finish_task_switch+0x1f4/0x910 [ 3311.739453] ? finish_task_switch+0x1b4/0x910 [ 3311.743952] ? __switch_to_asm+0x34/0x70 [ 3311.748005] ? preempt_notifier_register+0x200/0x200 [ 3311.753098] ? __switch_to_asm+0x34/0x70 [ 3311.757158] ? __switch_to_asm+0x34/0x70 [ 3311.761216] ? __switch_to_asm+0x40/0x70 [ 3311.765280] ? __switch_to_asm+0x34/0x70 [ 3311.769339] ? __switch_to_asm+0x40/0x70 [ 3311.773483] ? __switch_to_asm+0x34/0x70 [ 3311.777539] ? __switch_to_asm+0x40/0x70 [ 3311.781605] ? __switch_to_asm+0x34/0x70 [ 3311.785666] ? __switch_to_asm+0x34/0x70 [ 3311.789718] ? __switch_to_asm+0x40/0x70 [ 3311.793776] ? __switch_to_asm+0x34/0x70 [ 3311.797825] ? __switch_to_asm+0x40/0x70 [ 3311.801895] ? __switch_to_asm+0x34/0x70 [ 3311.805957] ? __switch_to_asm+0x40/0x70 [ 3311.810013] ? __schedule+0x8d7/0x21d0 [ 3311.813895] ? perf_trace_lock+0x14d/0x7a0 [ 3311.818120] ? perf_trace_lock+0x14d/0x7a0 [ 3311.822358] ? __sched_text_start+0x8/0x8 [ 3311.826535] ? zap_class+0x640/0x640 [ 3311.830257] ? plist_check_list+0xa0/0xa0 [ 3311.834411] ? zap_class+0x640/0x640 [ 3311.838140] ? perf_trace_sched_process_exec+0x860/0x860 [ 3311.843605] ? do_raw_spin_unlock+0xa7/0x330 [ 3311.848019] ? do_raw_spin_trylock+0x270/0x270 [ 3311.852604] ? lock_acquire+0x1ed/0x520 [ 3311.856582] ? __might_sleep+0x95/0x190 [ 3311.860551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.866088] ? futex_wait_queue_me+0x55d/0x840 [ 3311.870667] ? refill_pi_state_cache.part.8+0x310/0x310 [ 3311.876045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.881589] ? get_futex_value_locked+0xcb/0xf0 [ 3311.886259] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3311.891290] ? futex_wait_setup+0x266/0x3e0 [ 3311.895628] ? futex_wake+0x760/0x760 [ 3311.899438] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 3311.904623] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 3311.909741] ? futex_wait+0x5ec/0xa50 [ 3311.913540] ? print_usage_bug+0xc0/0xc0 [ 3311.917595] ? print_usage_bug+0xc0/0xc0 [ 3311.921657] ? futex_wait_setup+0x3e0/0x3e0 [ 3311.925971] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 3311.931173] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 3311.936265] ? futex_wake+0x304/0x760 [ 3311.940061] ? __lock_acquire+0x62f/0x4c20 [ 3311.944320] ? mark_held_locks+0x130/0x130 [ 3311.948560] ? do_futex+0x249/0x26d0 [ 3311.952278] ? _raw_spin_unlock_irq+0x27/0x80 [ 3311.956765] ? _raw_spin_unlock_irq+0x27/0x80 [ 3311.961249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.966785] ? check_preemption_disabled+0x48/0x280 [ 3311.971835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3311.977383] ? check_preemption_disabled+0x48/0x280 [ 3311.982423] ? debug_smp_processor_id+0x1c/0x20 [ 3311.987084] ? perf_trace_lock+0x14d/0x7a0 [ 3311.991326] ? lock_is_held_type+0x210/0x210 [ 3311.995748] ? lock_is_held_type+0x210/0x210 [ 3312.000154] ? zap_class+0x640/0x640 [ 3312.003859] ? zap_class+0x640/0x640 [ 3312.007610] ? zap_class+0x640/0x640 [ 3312.011320] ? cgroup_file_notify+0x226/0x2f0 [ 3312.015817] ? find_held_lock+0x36/0x1c0 [ 3312.019875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3312.025402] ? check_preemption_disabled+0x48/0x280 [ 3312.030414] _do_fork+0x1cb/0x11d0 [ 3312.033965] ? fork_idle+0x1d0/0x1d0 [ 3312.037709] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3312.043274] ? syscall_trace_enter+0x68c/0x1260 [ 3312.047959] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3312.053509] ? do_syscall_64+0x9a/0x820 [ 3312.057475] ? do_syscall_64+0x9a/0x820 [ 3312.061444] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3312.066026] ? trace_hardirqs_on+0xbd/0x310 [ 3312.070341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3312.075895] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3312.081266] ? trace_hardirqs_off_caller+0x310/0x310 [ 3312.086367] __x64_sys_clone+0xbf/0x150 [ 3312.090338] do_syscall_64+0x1b9/0x820 [ 3312.094215] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3312.099570] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3312.104495] ? trace_hardirqs_on_caller+0x310/0x310 [ 3312.109591] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3312.114600] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 3312.121280] ? __switch_to_asm+0x40/0x70 [ 3312.125343] ? __switch_to_asm+0x34/0x70 [ 3312.129399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3312.134261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3312.139438] RIP: 0033:0x457669 [ 3312.142623] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3312.161512] RSP: 002b:00007f01054eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3312.169229] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457669 [ 3312.176500] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000020002100 [ 3312.183768] RBP: 000000000072bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 3312.191035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f01054eb6d4 [ 3312.198404] R13: 00000000004bdbbd R14: 00000000004cd560 R15: 00000000ffffffff [ 3312.208865] Task in /syz0 killed as a result of limit of /syz0 [ 3312.214882] memory: usage 307120kB, limit 307200kB, failcnt 1007267 [ 3312.221512] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3312.228362] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3312.234508] Memory cgroup stats for /syz0: cache:200KB rss:138616KB rss_huge:61440KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:138680KB inactive_file:0KB active_file:0KB unevictable:0KB 22:48:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x4c6b9c65500ba22f, 0x107000}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffffffffffff000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:19 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:19 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) 22:48:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x10000000, 0x0) 22:48:19 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) prctl$PR_SET_SECUREBITS(0x1c, 0x11) [ 3312.255856] Memory cgroup out of memory: Kill process 924 (syz-executor0) score 1106 or sacrifice child [ 3312.265535] Killed process 924 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33560kB, shmem-rss:0kB [ 3312.277850] oom_reaper: reaped process 924 (syz-executor0), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB 22:48:19 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) [ 3312.342028] validate_nla: 9 callbacks suppressed [ 3312.342039] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x7, 0x4) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000040)={0x7, 0x7, 0x5}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000180)) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1006) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 22:48:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x3f000000, 0x0) 22:48:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x10, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:19 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd001010000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7ff) 22:48:19 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) [ 3312.493658] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x2000) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x6006}, @void, @mpls={[{0x1, 0x44, 0xe1, 0x7fffffff}, {0x3, 0x9, 0x81, 0xff}, {0xffffffffffffffff, 0xbe, 0x7f, 0x1308}], @ipv4={{0xd, 0x4, 0x0, 0x6, 0xc9, 0x67, 0x1f, 0x1, 0x7f, 0x0, @empty, @broadcast, {[@rr={0x7, 0x7, 0x7eb55244, [@dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp={0x44, 0x18, 0x1, 0x3, 0x3, [{[], 0x4}, {[], 0x5}, {[@broadcast], 0x749b8bff}, {[], 0x5}]}]}}, @udp={0x4e20, 0x4e20, 0x95, 0x0, [@guehdr={0x2, 0x4, 0x2, 0x0, 0x100, [0x80]}, @guehdr={0x2, 0x80000001, 0x5042, 0x101, 0x100, [0x80]}, @guehdr={0x2, 0xffff, 0x9, 0x8, 0x100, [0x80]}, @guehdr={0x2, 0x4, 0x3ff, 0x5, 0x100, [0x80]}, @guehdr={0x2, 0x439, 0x7, 0xfffffffffffffffc, 0x100, [0x80]}, @guehdr={0x1, 0x1f, 0x1, 0x9d8, 0x100}, @guehdr={0x2, 0xc, 0x100000001, 0x0, 0x100, [0x80]}], "120613f986658a84ccaeb8aab36ed4269305db39dcd709e32656e0f0043ce3b499e1bd01151450d84e59ee0964670be5a60fbb06a0ce896bcc6d65510f5fb3a6e1ed61fd84baa013133a693555965e7fc34e85764693d47d3b"}}}}, 0xd9) 22:48:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x3f00, 0x0) [ 3312.614480] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:20 executing program 1: get_mempolicy(0x0, 0x0, 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x41a000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x19400000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:20 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:20 executing program 1: get_mempolicy(0x0, 0x0, 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) [ 3312.802105] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x10, 0x0) 22:48:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x80) r2 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x34838ba4, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000018c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001880)={0xffffffffffffffff}, 0x13f, 0x1007}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000001900)={0x5, 0x10, 0xfa00, {&(0x7f0000001680), r3, 0x2}}, 0x18) vmsplice(r2, &(0x7f00000015c0)=[{&(0x7f0000000100)="083fedd743fe12b4d0af93440f50ecdd67b5029c34af6e9e5a13d0d87a0e4836cf473d667fd40f0a8f3136c370a4d21240e7", 0x32}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="599f940cba2c0b37d509820c84ca862721169be42a405b021fec91083acb61bbe3e7639eec9a13a210f934a61a266fb459afa748f3f7831d68814630d1886b2ab2e2e7724766a29d6dbfc79fbe6790acb9c8f269ee6c5738f32f5a6dedc1b5ba21b256fdfd1de93472fd799aabb939ea0ca7a9bce5a31b0364454bb81398f2d30a439852b9", 0x85}, {&(0x7f0000001200)="f71ce71effa869acfef3821b6e42279f825dc9ff1fbe3b", 0x17}, {&(0x7f0000001240)="d3765003e37d49efd8ae4f3d72103bb747e68360cc8097fdcd8a4c0f98a63d9bb099be889f461dbd733545b84a30af296f12b5dbb2c67c91073e8f4b18b33b172542051a3461edf2d2d757c5c93e4819a9da66398757d4e83f673a39185aa405424ef6be47ac9541e40dcd925d1a38401b8424e14c66d8c8c4853da202a7381f575e04594a92b49c65ef8e8120eb7328773955693165371eacd95c1d45ec8702cf784874b8a04163b8b8fe0b79bd65ea558c30eb016d066edcab9b2f1a7992b669e39e1d72", 0xc5}, {&(0x7f0000001340)="fd487f1f3fe682beb69de9c1d6f38256c3a002d7c6f12b350e3b737986aa43fb2eb3c81d694407f0eb16055f59551eab2555faa925071dadc9bb1ab3eeecfe502df1175d9dbb76f8c183e9bc6a78fcae2aa1cf09b257229e3fc63633c805cf3490460a1a438087b4b618663a74886c3e436b233b612803c205e45c118386376353", 0x81}, {&(0x7f0000001400)="bb206b3b899249c958663aac0f7847ca6451c4ce1fb30fbe5a2df3347a26ca2f8ea2304766433362e1a499261645c4db53a9f13b302e09c22817c26b8a4d40e95fcdad0a81c0786f925ccc6b62690d8d3df50a68820b9f4f91f9ad974faa3733d580bb0ad273a86b5a553c3ebe711a5e90d25df9f710", 0x76}, {&(0x7f0000001480)="d677887a617621563c902d9b9423fa1f91cca6893813e0da22cde55da237fc63e7ed", 0x22}, {&(0x7f00000014c0)="c6718b1fa0d27e0232f697ef2b892bff3b33471c27ee62327da8fcc615e54ae3bd8a55dfcf1017b72772ece11c58bd1bb2cc18bf6dccf5bfa1d2f1dc767648d65a08f3befecc5a246951362d4b1aeda3dffced4dc42007709e58516ba5535c42138ce8601c86de732783b005e400627340aa2537e63eb1da952d46a256135a5eb6b9dba0090cb5a214db3ff12bc0bfc63562d6cc3ee0e025ccd3a9fe620d5b5bfd0f0c03d2604ee509bc89a4a9c9aa1a98599c9ae5d34c86daadd07f4e9f42ba2fd6cb850eb342e94426a666e2ecfe89e3508e7986fd58c832f017f09620", 0xde}], 0x9, 0x3) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000000c0)={0x7, 0x3a11, 0x8, 0x501}) 22:48:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x5000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:20 executing program 1: get_mempolicy(0x0, 0x0, 0x10000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:20 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:20 executing program 0: shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000000)={0x7, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x1000000000000000, 0x0) [ 3313.002363] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:20 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4042, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000080)={0x4, 0x1}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_THP_DISABLE(0x2a) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x40000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 22:48:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6800, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8802, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x7fffffff, 0xfffffffffffffffd, 0x2, 0x100, 0x0, 0xa5, 0x52, 0x3f, r3}, 0x20) 22:48:20 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:20 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) r2 = getpid() migrate_pages(r2, 0x0, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x400) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r1, 0x0) [ 3313.151468] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:20 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x3f00000000000000, 0x0) 22:48:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:20 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) [ 3313.255874] QAT: Invalid ioctl [ 3313.268764] QAT: Invalid ioctl [ 3313.285307] QAT: Invalid ioctl 22:48:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x3f00000000000000) 22:48:20 executing program 1: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3313.310749] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x2000000000d4) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000040)={0x80000000, 0x3, "40558d8baf5306086913941531ce17b1f42c20a8ec51b51d15148080dac7a1db", 0x6, 0x400, 0x1, 0x4, 0xb8, 0x5, 0x890, 0x1, [0xdf, 0x7f, 0x1, 0x9]}) 22:48:20 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101d0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x6, 0x5}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x4, 0x200000) 22:48:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x10000000) 22:48:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x5, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6800000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 22:48:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x4) accept$packet(r0, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000014c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000001500)={@mcast2, 0x1a, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x100) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000040)=0x9) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x5, 0x8000) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) [ 3313.550211] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3313.590076] netlink: 'syz-executor1': attribute type 15 has an invalid length. 22:48:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff7f, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x3f000000) 22:48:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x0, 0x8}) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22:48:21 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:21 executing program 1 (fault-call:0 fault-nth:0): get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) [ 3313.692615] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 3313.730055] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3313.751182] syz-executor0 cpuset=syz0 mems_allowed=0 22:48:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x3, 0x0, 0x753, 0x7ff, 'syz0\x00', 0x3}, 0x2, 0x4, 0xa90, r2, 0xa, 0x0, 'syz1\x00', &(0x7f0000000040)=['eth1loeth1@\x00', '/trusteduser$}\x00', '(\x00', '\x00', '[eth1selinux^-%}self\x00', '\x00', '\x00', 'vmnet1eth1,\x00', '/\x00', '/\x00'], 0x45, [], [0x1ff, 0x6, 0xac, 0x5]}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3313.778429] CPU: 0 PID: 2480 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3313.785771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3313.795154] Call Trace: [ 3313.797775] dump_stack+0x244/0x39d [ 3313.801452] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3313.806661] ? mark_held_locks+0x130/0x130 [ 3313.810916] ? mark_held_locks+0x130/0x130 [ 3313.815190] dump_header+0x27b/0xf72 [ 3313.818935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:48:21 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x3f00) 22:48:21 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x6, 0x3, 0x4}, 0x2, 0x6}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3313.824495] ? check_preemption_disabled+0x48/0x280 [ 3313.829533] ? pagefault_out_of_memory+0x197/0x197 [ 3313.834478] ? debug_smp_processor_id+0x1c/0x20 [ 3313.839162] ? perf_trace_lock+0x14d/0x7a0 [ 3313.843424] ? lock_is_held_type+0x210/0x210 [ 3313.847849] ? __lock_is_held+0xb5/0x140 [ 3313.851934] ? debug_smp_processor_id+0x1c/0x20 [ 3313.856618] ? perf_trace_lock+0x14d/0x7a0 [ 3313.860868] ? zap_class+0x640/0x640 [ 3313.864599] ? print_usage_bug+0xc0/0xc0 [ 3313.868674] ? lock_is_held_type+0x210/0x210 [ 3313.873104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3313.878677] ? find_held_lock+0x36/0x1c0 [ 3313.882773] ? mark_held_locks+0xc7/0x130 [ 3313.886959] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3313.892084] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3313.897240] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3313.901849] ? trace_hardirqs_on+0xbd/0x310 [ 3313.906198] ? kasan_check_read+0x11/0x20 [ 3313.910374] ? ___ratelimit+0x3b4/0x672 [ 3313.914386] ? trace_hardirqs_off_caller+0x310/0x310 [ 3313.919520] ? trace_hardirqs_on+0x310/0x310 [ 3313.923960] ? lock_downgrade+0x900/0x900 [ 3313.928128] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3313.933254] ? ___ratelimit+0x3b9/0x672 [ 3313.937250] ? idr_get_free+0xf70/0xf70 [ 3313.941236] ? _raw_spin_unlock_irq+0x27/0x80 [ 3313.945754] ? _raw_spin_unlock_irq+0x27/0x80 [ 3313.950273] oom_kill_process.cold.27+0x10/0x903 [ 3313.955047] ? _raw_spin_unlock_irq+0x27/0x80 [ 3313.959592] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3313.964208] ? oom_evaluate_task+0x540/0x540 [ 3313.968638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3313.974189] ? cgroup_procs_next+0x70/0x70 22:48:21 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x10) 22:48:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(r2, &(0x7f0000000380), 0xfffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0x188, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3313.978453] ? _raw_spin_unlock_irq+0x60/0x80 [ 3313.982966] ? oom_badness+0xaa0/0xaa0 [ 3313.986871] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3313.991640] ? mem_cgroup_iter_break+0x30/0x30 [ 3313.996253] ? mark_held_locks+0xc7/0x130 [ 3314.000422] out_of_memory+0xa84/0x1430 [ 3314.004409] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3314.009010] ? kasan_check_read+0x11/0x20 [ 3314.013180] ? oom_killer_disable+0x3a0/0x3a0 [ 3314.017717] mem_cgroup_out_of_memory+0x15e/0x210 [ 3314.022599] ? memory_oom_group_write+0x160/0x160 [ 3314.027459] ? mem_cgroup_try_charge+0x627/0xe20 [ 3314.032240] ? page_counter_try_charge+0x1c1/0x220 [ 3314.037186] try_charge+0xda9/0x1700 [ 3314.040933] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3314.045879] ? kasan_check_read+0x11/0x20 [ 3314.050046] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3314.054752] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3314.060314] ? lock_page_memcg+0x350/0x350 [ 3314.064590] ? lock_acquire+0x1ed/0x520 [ 3314.068613] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3314.073989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:48:21 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x1000000000000000) [ 3314.079542] ? check_preemption_disabled+0x48/0x280 [ 3314.084583] ? kasan_check_read+0x11/0x20 [ 3314.088757] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3314.094054] ? rcu_softirq_qs+0x20/0x20 [ 3314.098082] mem_cgroup_try_charge+0x627/0xe20 [ 3314.102688] ? mem_cgroup_protected+0xa60/0xa60 [ 3314.107388] ? __lock_acquire+0x62f/0x4c20 [ 3314.111641] ? update_load_avg+0x2470/0x2470 [ 3314.116102] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3314.121663] ? mark_held_locks+0x130/0x130 [ 3314.125916] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3314.131488] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 3314.136451] wp_page_copy+0x520/0x2500 [ 3314.140361] ? print_usage_bug+0xc0/0xc0 [ 3314.144447] ? follow_pfn+0x2e0/0x2e0 [ 3314.148273] ? find_held_lock+0x36/0x1c0 [ 3314.152363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3314.157922] ? check_preemption_disabled+0x48/0x280 [ 3314.162950] ? __lock_acquire+0x62f/0x4c20 [ 3314.167203] ? debug_smp_processor_id+0x1c/0x20 [ 3314.171886] ? perf_trace_lock+0x14d/0x7a0 [ 3314.176147] ? lock_is_held_type+0x210/0x210 [ 3314.180172] device lo left promiscuous mode [ 3314.180578] ? debug_smp_processor_id+0x1c/0x20 [ 3314.180594] ? perf_trace_lock+0x14d/0x7a0 [ 3314.180615] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3314.198935] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3314.204052] ? zap_class+0x640/0x640 [ 3314.207781] ? check_preemption_disabled+0x48/0x280 [ 3314.212844] ? debug_smp_processor_id+0x1c/0x20 [ 3314.217542] ? find_held_lock+0x36/0x1c0 [ 3314.221632] ? do_wp_page+0x518/0x2920 [ 3314.225534] ? lock_downgrade+0x900/0x900 [ 3314.229724] ? kasan_check_read+0x11/0x20 [ 3314.233915] ? do_raw_spin_unlock+0xa7/0x330 [ 3314.238340] ? do_raw_spin_trylock+0x270/0x270 [ 3314.242937] ? __pte_alloc_kernel+0x220/0x220 [ 3314.247485] ? check_preemption_disabled+0x48/0x280 [ 3314.252539] do_wp_page+0x520/0x2920 [ 3314.256295] ? finish_mkwrite_fault+0x650/0x650 [ 3314.260991] ? print_usage_bug+0xc0/0xc0 [ 3314.265073] ? __lock_acquire+0x62f/0x4c20 [ 3314.269333] ? __lock_acquire+0x62f/0x4c20 [ 3314.273605] ? mark_held_locks+0x130/0x130 [ 3314.277866] ? mark_held_locks+0x130/0x130 [ 3314.282119] ? debug_smp_processor_id+0x1c/0x20 [ 3314.286811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3314.292365] ? check_preemption_disabled+0x48/0x280 [ 3314.297399] ? debug_smp_processor_id+0x1c/0x20 [ 3314.302079] ? perf_trace_lock+0x14d/0x7a0 [ 3314.306331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3314.311889] ? check_preemption_disabled+0x48/0x280 [ 3314.316936] ? lock_is_held_type+0x210/0x210 [ 3314.321359] ? debug_smp_processor_id+0x1c/0x20 [ 3314.321377] ? perf_trace_lock+0x14d/0x7a0 [ 3314.321396] ? check_preemption_disabled+0x48/0x280 [ 3314.321413] ? print_usage_bug+0xc0/0xc0 [ 3314.321434] ? print_usage_bug+0xc0/0xc0 [ 3314.330353] ? zap_class+0x640/0x640 [ 3314.330370] ? perf_trace_lock+0x14d/0x7a0 [ 3314.330395] ? print_usage_bug+0xc0/0xc0 [ 3314.330409] ? zap_class+0x640/0x640 [ 3314.330435] ? __lock_acquire+0x62f/0x4c20 [ 3314.330457] ? lock_acquire+0x1ed/0x520 [ 3314.330477] ? __handle_mm_fault+0x1fac/0x5be0 [ 3314.372077] ? kasan_check_read+0x11/0x20 [ 3314.376218] ? do_raw_spin_lock+0x14f/0x350 [ 3314.380530] ? rwlock_bug.part.2+0x90/0x90 [ 3314.384773] ? do_raw_spin_trylock+0x270/0x270 [ 3314.389379] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 3314.395010] __handle_mm_fault+0x3bef/0x5be0 [ 3314.399427] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3314.404302] ? lock_is_held_type+0x210/0x210 [ 3314.408729] ? perf_trace_lock+0x14d/0x7a0 [ 3314.413010] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3314.418547] ? zap_class+0x640/0x640 [ 3314.422275] ? zap_class+0x640/0x640 [ 3314.425986] ? find_held_lock+0x36/0x1c0 [ 3314.430060] ? handle_mm_fault+0x42a/0xc70 [ 3314.434313] ? lock_downgrade+0x900/0x900 [ 3314.438515] ? check_preemption_disabled+0x48/0x280 [ 3314.443537] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3314.448476] ? kasan_check_read+0x11/0x20 [ 3314.452634] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3314.457925] ? rcu_softirq_qs+0x20/0x20 [ 3314.461917] ? trace_hardirqs_off_caller+0x310/0x310 [ 3314.467070] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3314.472613] ? check_preemption_disabled+0x48/0x280 [ 3314.477642] handle_mm_fault+0x54f/0xc70 [ 3314.481709] ? __handle_mm_fault+0x5be0/0x5be0 [ 3314.486329] ? find_vma+0x34/0x190 [ 3314.489879] __do_page_fault+0x5e8/0xe60 [ 3314.493941] do_page_fault+0xf2/0x7e0 [ 3314.497759] ? vmalloc_sync_all+0x30/0x30 [ 3314.501903] ? error_entry+0x70/0xd0 [ 3314.505630] ? trace_hardirqs_off_caller+0xbb/0x310 [ 3314.510658] ? trace_hardirqs_on_caller+0xc0/0x310 [ 3314.515584] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3314.520510] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3314.525361] ? trace_hardirqs_on_caller+0x310/0x310 [ 3314.530372] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 3314.535823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3314.541373] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3314.546380] ? page_fault+0x8/0x30 [ 3314.549914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3314.554756] ? page_fault+0x8/0x30 [ 3314.558289] page_fault+0x1e/0x30 [ 3314.561765] RIP: 0033:0x40c5c0 [ 3314.564953] Code: 89 f8 49 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 74 ff ff ff bf 38 cf 4b 00 31 c0 e8 38 54 ff ff 31 ff e8 71 50 ff ff 90 <89> 3c b5 00 00 72 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 42 3a 63 00 [ 3314.583977] RSP: 002b:0000000000a3fb30 EFLAGS: 00010246 [ 3314.589334] RAX: 000000004ccfc2d4 RBX: 00000000929544c0 RCX: 0000001b2cf20000 [ 3314.596598] RDX: 0000000000000000 RSI: 00000000000002d4 RDI: ffffffff4ccfc2d4 [ 3314.603874] RBP: 0000000000000009 R08: 000000004ccfc2d4 R09: 000000004ccfc2d8 [ 3314.611153] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 000000000072bf00 [ 3314.618429] R13: 0000000080000000 R14: 00007f010730d008 R15: 0000000000000009 [ 3314.631000] Task in /syz0 killed as a result of limit of /syz0 [ 3314.637428] memory: usage 307164kB, limit 307200kB, failcnt 1007310 [ 3314.644383] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3314.654130] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3314.660351] Memory cgroup stats for /syz0: cache:200KB rss:137264KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:137332KB inactive_file:0KB active_file:0KB unevictable:0KB 22:48:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x1940, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = accept(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000080)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x3c, @mcast1, 0xfffffffffffffffd}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x8}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x6, @empty, 0xffff}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0xe}, 0x9}, @in6={0xa, 0x4e20, 0x100000001, @dev={0xfe, 0x80, [], 0x1d}}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0xfffffffffffffffb, @loopback, 0x5d429684}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x2, @empty, 0x7}], 0xf4) 22:48:22 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x57dc, 0x400) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000180)=""/37) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000100)=0x4) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:22 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3314.681766] Memory cgroup out of memory: Kill process 964 (syz-executor0) score 1106 or sacrifice child [ 3314.691475] Killed process 964 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33560kB, shmem-rss:0kB [ 3314.703424] oom_reaper: reaped process 964 (syz-executor0), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB 22:48:22 executing program 1: get_mempolicy(0x0, 0x0, 0x10, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x8040) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) clock_nanosleep(0x0, 0x1, &(0x7f0000000100), &(0x7f00000001c0)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400, 0x0) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/87, 0x57) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0xfffffffffffffffe) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r3, r4+30000000}, &(0x7f0000000280)) 22:48:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x48, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:22 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x100000b, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x450800) mq_getsetattr(r2, &(0x7f00000000c0)={0x2, 0x4, 0x2, 0x400, 0x0, 0x1, 0xa, 0x1750}, 0x0) 22:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80000000, 0x440042) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x318, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x81) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:22 executing program 1: get_mempolicy(0x0, 0x0, 0x1000000000000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x600000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x5}, {0x306, @remote}, 0x20, {0x2, 0x4e20, @local}, 'bond_slave_0\x00'}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x10f000, 0xf000, 0xffffffff, 0xffffffffffffffff, 0x5}) 22:48:22 executing program 1: get_mempolicy(0x0, 0x0, 0x10000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:22 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x200100, 0x40) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f3020000", @ANYRES16=r1, @ANYBLOB="00002abd7000fbdbdf250d000000100001000c0007001400000012000000080006000800000038000300080008006200000008000500ac14140a1400020073797a6b616c6c65723000000000000008000800080000000800010000000000480001000800050004000000080009001c0000000800010002000000080001000a00000008000b007369700008000600666f00000c0007000400000020000000080004004e200000080005000800000038000300080007004e24000008000400e7f8000008000500e00000011400020076657468315f746f5f627269646765000800010001000000"], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x80c5) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xc7a, 0x200) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) times(&(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x1800}) 22:48:22 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x2000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x5, 0x0, 0x10001}, 0xa) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) sendfile(r2, r1, &(0x7f0000000040)=0x55, 0x3) mmap(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x2, 0x1010, r1, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[0x9]}) ioctl$sock_bt(r3, 0x0, &(0x7f0000000140)) 22:48:23 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4) 22:48:23 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$unix(0x1, 0x5, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000003c0)={0x0, 0x5000}) readahead(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cd6f"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000080)=""/93) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000e8) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:23 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ff2000/0xd000)=nil, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in=@empty, 0x4e22, 0x3, 0x4e20, 0x6, 0xa, 0xa0, 0x20, 0xff, r1, r2}, {0x1000, 0x4, 0x5, 0x4, 0xe00000000000, 0x7, 0x9, 0x8}, {0x31d, 0x5, 0x200, 0x8000}, 0x6, 0x0, 0x3, 0x1, 0x3, 0x3}, {{@in=@loopback, 0x4d4, 0x3f}, 0x0, @in6=@local, 0x0, 0x4, 0x1, 0x3ff, 0x9, 0x0, 0x7fffffff}}, 0xe8) 22:48:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4019, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3315.839580] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 3315.898576] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3315.904103] CPU: 0 PID: 2625 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3315.911409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3315.920773] Call Trace: [ 3315.923393] dump_stack+0x244/0x39d [ 3315.927037] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3315.932268] ? mark_held_locks+0x130/0x130 [ 3315.936576] ? mark_held_locks+0x130/0x130 [ 3315.940839] dump_header+0x27b/0xf72 [ 3315.944577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3315.950148] ? check_preemption_disabled+0x48/0x280 [ 3315.955187] ? pagefault_out_of_memory+0x197/0x197 [ 3315.960132] ? debug_smp_processor_id+0x1c/0x20 [ 3315.964826] ? perf_trace_lock+0x14d/0x7a0 [ 3315.969113] ? lock_is_held_type+0x210/0x210 [ 3315.973579] ? __lock_is_held+0xb5/0x140 [ 3315.977668] ? debug_smp_processor_id+0x1c/0x20 [ 3315.982351] ? perf_trace_lock+0x14d/0x7a0 [ 3315.986596] ? zap_class+0x640/0x640 [ 3315.990326] ? print_usage_bug+0xc0/0xc0 [ 3315.994407] ? lock_is_held_type+0x210/0x210 [ 3315.998844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.004405] ? find_held_lock+0x36/0x1c0 [ 3316.008508] ? mark_held_locks+0xc7/0x130 [ 3316.012701] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3316.017833] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3316.022952] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3316.027549] ? trace_hardirqs_on+0xbd/0x310 [ 3316.031884] ? kasan_check_read+0x11/0x20 [ 3316.036048] ? ___ratelimit+0x3b4/0x672 [ 3316.040053] ? trace_hardirqs_off_caller+0x310/0x310 [ 3316.045175] ? trace_hardirqs_on+0x310/0x310 [ 3316.049603] ? lock_downgrade+0x900/0x900 [ 3316.053784] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3316.058916] ? ___ratelimit+0x3b9/0x672 [ 3316.062911] ? idr_get_free+0xf70/0xf70 [ 3316.066899] ? _raw_spin_unlock_irq+0x27/0x80 [ 3316.071411] ? _raw_spin_unlock_irq+0x27/0x80 [ 3316.075932] oom_kill_process.cold.27+0x10/0x903 [ 3316.080706] ? _raw_spin_unlock_irq+0x27/0x80 [ 3316.085236] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3316.089848] ? oom_evaluate_task+0x540/0x540 [ 3316.094267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.099835] ? cgroup_procs_next+0x70/0x70 [ 3316.104089] ? _raw_spin_unlock_irq+0x60/0x80 [ 3316.108594] ? oom_badness+0xaa0/0xaa0 [ 3316.108613] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3316.108631] ? mem_cgroup_iter_break+0x30/0x30 [ 3316.108665] ? mark_held_locks+0xc7/0x130 [ 3316.108684] out_of_memory+0xa84/0x1430 [ 3316.130022] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3316.134623] ? kasan_check_read+0x11/0x20 [ 3316.138795] ? oom_killer_disable+0x3a0/0x3a0 [ 3316.143339] mem_cgroup_out_of_memory+0x15e/0x210 22:48:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:23 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3316.148202] ? memory_oom_group_write+0x160/0x160 [ 3316.153067] ? mem_cgroup_try_charge+0x627/0xe20 [ 3316.157858] ? page_counter_try_charge+0x1c1/0x220 [ 3316.162818] try_charge+0xda9/0x1700 [ 3316.166549] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3316.171496] ? kasan_check_read+0x11/0x20 [ 3316.175666] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3316.180357] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3316.185915] ? lock_page_memcg+0x350/0x350 [ 3316.190170] ? lock_acquire+0x1ed/0x520 [ 3316.194156] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3316.199625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.205202] ? check_preemption_disabled+0x48/0x280 [ 3316.210264] ? kasan_check_read+0x11/0x20 [ 3316.214429] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3316.219726] ? rcu_softirq_qs+0x20/0x20 [ 3316.223758] mem_cgroup_try_charge+0x627/0xe20 [ 3316.228366] ? mem_cgroup_protected+0xa60/0xa60 [ 3316.233075] ? __lock_acquire+0x62f/0x4c20 [ 3316.237330] ? update_load_avg+0x2470/0x2470 [ 3316.241764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:48:23 executing program 1: get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffc000/0x1000)=nil, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x0) ioctl$sock_ifreq(r0, 0x89b7, &(0x7f0000000080)={'bridge0\x00', @ifru_names='ip6_vti0\x00'}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x7f, 0x4) acct(&(0x7f0000000100)='./file0\x00') ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x6a4a) [ 3316.247330] ? mark_held_locks+0x130/0x130 [ 3316.251588] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3316.257163] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 3316.262128] wp_page_copy+0x520/0x2500 [ 3316.266036] ? print_usage_bug+0xc0/0xc0 [ 3316.270154] ? follow_pfn+0x2e0/0x2e0 [ 3316.273981] ? find_held_lock+0x36/0x1c0 [ 3316.278073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.283627] ? check_preemption_disabled+0x48/0x280 [ 3316.288666] ? __lock_acquire+0x62f/0x4c20 [ 3316.292921] ? debug_smp_processor_id+0x1c/0x20 22:48:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x1940000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3316.297600] ? perf_trace_lock+0x14d/0x7a0 [ 3316.301858] ? lock_is_held_type+0x210/0x210 [ 3316.306285] ? debug_smp_processor_id+0x1c/0x20 [ 3316.310965] ? perf_trace_lock+0x14d/0x7a0 [ 3316.315213] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3316.320326] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3316.325451] ? zap_class+0x640/0x640 [ 3316.329187] ? check_preemption_disabled+0x48/0x280 [ 3316.334238] ? debug_smp_processor_id+0x1c/0x20 [ 3316.338967] ? find_held_lock+0x36/0x1c0 [ 3316.343056] ? do_wp_page+0x518/0x2920 22:48:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffff000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3316.346963] ? lock_downgrade+0x900/0x900 [ 3316.351136] ? kasan_check_read+0x11/0x20 [ 3316.355299] ? do_raw_spin_unlock+0xa7/0x330 [ 3316.359745] ? do_raw_spin_trylock+0x270/0x270 [ 3316.364361] ? __pte_alloc_kernel+0x220/0x220 [ 3316.368869] ? check_preemption_disabled+0x48/0x280 [ 3316.373925] do_wp_page+0x520/0x2920 [ 3316.377663] ? finish_mkwrite_fault+0x650/0x650 [ 3316.382388] ? print_usage_bug+0xc0/0xc0 [ 3316.386480] ? __lock_acquire+0x62f/0x4c20 [ 3316.390751] ? __lock_acquire+0x62f/0x4c20 [ 3316.395051] ? mark_held_locks+0x130/0x130 [ 3316.399330] ? mark_held_locks+0x130/0x130 [ 3316.403583] ? debug_smp_processor_id+0x1c/0x20 [ 3316.408270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.413828] ? check_preemption_disabled+0x48/0x280 [ 3316.418868] ? debug_smp_processor_id+0x1c/0x20 [ 3316.423552] ? perf_trace_lock+0x14d/0x7a0 [ 3316.427809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.433363] ? check_preemption_disabled+0x48/0x280 [ 3316.438400] ? lock_is_held_type+0x210/0x210 [ 3316.442831] ? debug_smp_processor_id+0x1c/0x20 [ 3316.447516] ? perf_trace_lock+0x14d/0x7a0 [ 3316.451777] ? check_preemption_disabled+0x48/0x280 [ 3316.456825] ? print_usage_bug+0xc0/0xc0 [ 3316.460911] ? print_usage_bug+0xc0/0xc0 [ 3316.464982] ? zap_class+0x640/0x640 [ 3316.468723] ? perf_trace_lock+0x14d/0x7a0 [ 3316.472991] ? print_usage_bug+0xc0/0xc0 [ 3316.477066] ? zap_class+0x640/0x640 [ 3316.480813] ? __lock_acquire+0x62f/0x4c20 [ 3316.485071] ? lock_acquire+0x1ed/0x520 [ 3316.489063] ? __handle_mm_fault+0x1fac/0x5be0 [ 3316.493675] ? kasan_check_read+0x11/0x20 [ 3316.497847] ? do_raw_spin_lock+0x14f/0x350 [ 3316.502192] ? rwlock_bug.part.2+0x90/0x90 [ 3316.506441] ? do_raw_spin_trylock+0x270/0x270 [ 3316.511052] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 3316.516700] __handle_mm_fault+0x3bef/0x5be0 [ 3316.521142] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3316.526001] ? lock_is_held_type+0x210/0x210 [ 3316.530429] ? perf_trace_lock+0x14d/0x7a0 [ 3316.534682] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3316.540250] ? zap_class+0x640/0x640 [ 3316.543978] ? zap_class+0x640/0x640 [ 3316.547722] ? find_held_lock+0x36/0x1c0 [ 3316.551828] ? handle_mm_fault+0x42a/0xc70 [ 3316.556070] ? lock_downgrade+0x900/0x900 [ 3316.560225] ? check_preemption_disabled+0x48/0x280 [ 3316.565240] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3316.570162] ? kasan_check_read+0x11/0x20 [ 3316.574301] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3316.579576] ? rcu_softirq_qs+0x20/0x20 [ 3316.583542] ? trace_hardirqs_off_caller+0x310/0x310 [ 3316.588665] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3316.594247] ? check_preemption_disabled+0x48/0x280 [ 3316.599262] handle_mm_fault+0x54f/0xc70 [ 3316.603318] ? __handle_mm_fault+0x5be0/0x5be0 [ 3316.607899] ? find_vma+0x34/0x190 [ 3316.611432] __do_page_fault+0x5e8/0xe60 [ 3316.615499] do_page_fault+0xf2/0x7e0 [ 3316.619294] ? vmalloc_sync_all+0x30/0x30 [ 3316.623472] ? error_entry+0x70/0xd0 [ 3316.627186] ? trace_hardirqs_off_caller+0xbb/0x310 [ 3316.632232] ? trace_hardirqs_on_caller+0xc0/0x310 [ 3316.637153] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3316.642087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3316.646931] ? trace_hardirqs_on_caller+0x310/0x310 [ 3316.651950] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 3316.657412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.662972] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3316.667980] ? page_fault+0x8/0x30 [ 3316.671511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3316.676344] ? page_fault+0x8/0x30 [ 3316.679874] page_fault+0x1e/0x30 [ 3316.683316] RIP: 0033:0x40c5c0 [ 3316.687218] Code: 89 f8 49 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 74 ff ff ff bf 38 cf 4b 00 31 c0 e8 38 54 ff ff 31 ff e8 71 50 ff ff 90 <89> 3c b5 00 00 72 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 42 3a 63 00 [ 3316.706112] RSP: 002b:0000000000a3fb30 EFLAGS: 00010246 [ 3316.711464] RAX: 00000000dc101001 RBX: 00000000f371c3d2 RCX: 0000001b2cf20000 [ 3316.718755] RDX: 0000000000000000 RSI: 0000000000001001 RDI: ffffffffdc101001 [ 3316.726030] RBP: 0000000000000007 R08: 00000000dc101001 R09: 00000000dc101005 [ 3316.733305] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 000000000072bf00 [ 3316.740567] R13: 0000000080000000 R14: 00007f010730d008 R15: 0000000000000007 [ 3316.752547] Task in /syz0 killed as a result of limit of /syz0 [ 3316.758675] memory: usage 307200kB, limit 307200kB, failcnt 1007343 [ 3316.765116] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3316.771946] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3316.778117] Memory cgroup stats for /syz0: cache:200KB rss:137228KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:137324KB inactive_file:0KB active_file:0KB unevictable:0KB 22:48:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r3, &(0x7f0000000180)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '', 0x20, 0x6}, 0x2b, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x100, 0x8000}) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x2001) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x100408, 0x4) 22:48:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x1000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:24 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2001, 0x0) r1 = getuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r9 = getuid() fstat(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000780)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) r14 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="98040000ffffffff08000000000000000100000000000000030000000000000007000000000000000100000000000000ff0000000100000006000000000000004000000000000000ff0f0000000000000180000000000000ffffffffffffffff00000000000000000200000008000000000000000400000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500000004000000000000000500000000000000010000000000000020000000000000006b657972696e67656d3176626f786e6574302b25656d30215e266d643573756d0500000000000000020000000000000005000000000000000000000000000000c730000003000000000000000000000010050000000000000800000000000000020000000000000081000000000000000900000000000000010001008d080000060000000900000009000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000010001040000000000000300000000000000000000000000000000000000ffffff7f000000000000000000000000000000000800000000000000060000000000000000000000ff010000050000000000000001000000000000000000000000000000030000000000000040000000000000004000000000000000080000000100008017ed0000ffffff7f06000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0101000009000000000000000100000000000000af04000000000000000000000900000004000000000000000100000000000000ff0700000000000000000080ffffffff0700000000080000010000000000000007000000000000000004000000000000010000000000000001000100000000000400000000000000030000003f000000010400000000000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="4016000088040000000000000400000000000000030000000000000004000000080000007573657200000000050000000000000001000000000000001800000000000000400000000000000000000000fe00000002000000000000007f00000000000000ff010000000000009d0d000000000000ffffff7f000000001af70000000000000700000001000000050000000000000020000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="040000000900000000000000000000000000000002000000000000000500000000100000707070305c00000001000000000000000000000000000000020000000000000040000000000000000104000009000000000000000000000000000000000000008c0200000000000003000000000000000300000000000000020000000000000001000000200000006d2000000000008007000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0600000007000000000000000400000000000000050000000000000009000000000000006d696d655f7479706500000000000000"], 0x498) 22:48:24 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3316.799583] Memory cgroup out of memory: Kill process 981 (syz-executor0) score 1106 or sacrifice child [ 3316.809245] Killed process 981 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33560kB, shmem-rss:0kB [ 3316.821268] oom_reaper: reaped process 981 (syz-executor0), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB [ 3316.831506] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3316.883255] syz-executor2 cpuset=syz2 mems_allowed=0 [ 3316.889132] CPU: 1 PID: 2632 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #374 [ 3316.896425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3316.905785] Call Trace: [ 3316.908390] dump_stack+0x244/0x39d [ 3316.912054] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3316.917271] dump_header+0x27b/0xf72 [ 3316.921018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.926574] ? check_preemption_disabled+0x48/0x280 [ 3316.931629] ? pagefault_out_of_memory+0x197/0x197 [ 3316.936577] ? debug_smp_processor_id+0x1c/0x20 [ 3316.941264] ? perf_trace_lock+0x14d/0x7a0 [ 3316.941290] ? lock_is_held_type+0x210/0x210 [ 3316.941314] ? __lock_is_held+0xb5/0x140 [ 3316.949967] ? debug_smp_processor_id+0x1c/0x20 [ 3316.958693] ? perf_trace_lock+0x14d/0x7a0 [ 3316.962969] ? zap_class+0x640/0x640 [ 3316.966710] ? print_usage_bug+0xc0/0xc0 [ 3316.970805] ? lock_is_held_type+0x210/0x210 [ 3316.975239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3316.980801] ? find_held_lock+0x36/0x1c0 [ 3316.984893] ? mark_held_locks+0xc7/0x130 [ 3316.989064] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3316.994188] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3316.999316] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3317.003919] ? trace_hardirqs_on+0xbd/0x310 [ 3317.008258] ? kasan_check_read+0x11/0x20 [ 3317.012422] ? ___ratelimit+0x3b4/0x672 [ 3317.016406] ? trace_hardirqs_off_caller+0x310/0x310 [ 3317.021522] ? trace_hardirqs_on+0x310/0x310 [ 3317.025944] ? lock_downgrade+0x900/0x900 [ 3317.030117] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3317.035243] ? ___ratelimit+0x3b9/0x672 [ 3317.035262] ? idr_get_free+0xf70/0xf70 [ 3317.035280] ? _raw_spin_unlock_irq+0x27/0x80 [ 3317.047731] ? _raw_spin_unlock_irq+0x27/0x80 [ 3317.047771] oom_kill_process.cold.27+0x10/0x903 [ 3317.047789] ? _raw_spin_unlock_irq+0x27/0x80 [ 3317.061547] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3317.066155] ? oom_evaluate_task+0x540/0x540 [ 3317.070603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.076159] ? cgroup_procs_next+0x70/0x70 [ 3317.080422] ? _raw_spin_unlock_irq+0x60/0x80 [ 3317.084954] ? oom_badness+0xaa0/0xaa0 [ 3317.088857] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3317.093638] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3317.099227] ? mem_cgroup_iter_break+0x30/0x30 [ 3317.103836] ? cgroup_file_notify+0x226/0x2f0 [ 3317.108416] out_of_memory+0xa84/0x1430 [ 3317.112381] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3317.116954] ? kasan_check_read+0x11/0x20 [ 3317.121141] ? oom_killer_disable+0x3a0/0x3a0 [ 3317.125639] mem_cgroup_out_of_memory+0x15e/0x210 [ 3317.130474] ? memory_oom_group_write+0x160/0x160 [ 3317.135309] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3317.140147] ? page_counter_try_charge+0x1c1/0x220 [ 3317.145102] try_charge+0xda9/0x1700 [ 3317.148811] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3317.153483] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3317.158402] ? kasan_check_read+0x11/0x20 [ 3317.162576] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3317.167841] ? rcu_softirq_qs+0x20/0x20 [ 3317.171831] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3317.177359] ? __kernel_text_address+0xd/0x40 [ 3317.181843] ? lock_page_memcg+0x350/0x350 [ 3317.186090] ? lock_acquire+0x1ed/0x520 [ 3317.190052] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3317.195406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.200933] ? check_preemption_disabled+0x48/0x280 [ 3317.205943] memcg_kmem_charge_memcg+0x7c/0x120 [ 3317.210611] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3317.215100] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3317.220454] memcg_kmem_charge+0x149/0x350 [ 3317.224684] __alloc_pages_nodemask+0x75e/0xea0 [ 3317.229342] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3317.234630] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3317.239636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.245162] ? check_preemption_disabled+0x48/0x280 [ 3317.250174] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3317.255698] ? rcu_pm_notify+0xc0/0xc0 [ 3317.259587] ? copy_process+0x2026/0x87a0 [ 3317.263726] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3317.268758] ? kmem_cache_alloc_node+0x349/0x730 [ 3317.273516] copy_process+0xa09/0x87a0 [ 3317.277396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.282927] ? __lock_acquire+0x62f/0x4c20 [ 3317.287167] ? find_held_lock+0x36/0x1c0 [ 3317.291225] ? __cleanup_sighand+0x70/0x70 [ 3317.295469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.300997] ? print_usage_bug+0xc0/0xc0 [ 3317.305054] ? debug_smp_processor_id+0x1c/0x20 [ 3317.309711] ? perf_trace_lock+0x14d/0x7a0 [ 3317.313941] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3317.319032] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3317.324142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.329673] ? check_preemption_disabled+0x48/0x280 [ 3317.334701] ? debug_smp_processor_id+0x1c/0x20 [ 3317.339375] ? __lock_acquire+0x62f/0x4c20 [ 3317.343617] ? lock_is_held_type+0x210/0x210 [ 3317.348020] ? mark_held_locks+0x130/0x130 [ 3317.352242] ? print_usage_bug+0xc0/0xc0 [ 3317.356306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.361841] ? check_preemption_disabled+0x48/0x280 [ 3317.366847] ? print_usage_bug+0xc0/0xc0 [ 3317.370901] ? __lock_acquire+0x62f/0x4c20 [ 3317.375136] ? lock_is_held_type+0x210/0x210 [ 3317.379557] ? print_usage_bug+0xc0/0xc0 [ 3317.383629] ? __lock_acquire+0x62f/0x4c20 [ 3317.387855] ? print_usage_bug+0xc0/0xc0 [ 3317.391910] ? __lock_acquire+0x62f/0x4c20 [ 3317.396145] ? mark_held_locks+0x130/0x130 [ 3317.400368] ? debug_smp_processor_id+0x1c/0x20 [ 3317.405042] ? mark_held_locks+0x130/0x130 [ 3317.409267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.414812] ? check_preemption_disabled+0x48/0x280 [ 3317.419839] ? debug_smp_processor_id+0x1c/0x20 [ 3317.424510] ? perf_trace_lock+0x14d/0x7a0 [ 3317.428731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.434279] ? check_preemption_disabled+0x48/0x280 [ 3317.439309] ? debug_smp_processor_id+0x1c/0x20 [ 3317.443983] ? perf_trace_lock+0x14d/0x7a0 [ 3317.448215] ? print_usage_bug+0xc0/0xc0 [ 3317.452280] ? zap_class+0x640/0x640 [ 3317.456006] ? delayacct_end+0xc5/0x100 [ 3317.459969] ? zap_class+0x640/0x640 [ 3317.463680] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3317.468776] ? __lock_acquire+0x62f/0x4c20 [ 3317.473018] ? find_held_lock+0x36/0x1c0 [ 3317.477076] ? mark_held_locks+0x130/0x130 [ 3317.481297] ? _raw_spin_unlock_irq+0x27/0x80 [ 3317.485782] ? _raw_spin_unlock_irq+0x27/0x80 [ 3317.490266] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3317.494840] ? trace_hardirqs_on+0xbd/0x310 [ 3317.499153] ? kasan_check_read+0x11/0x20 [ 3317.503287] ? psi_memstall_leave+0x202/0x260 [ 3317.507788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.513320] ? check_preemption_disabled+0x48/0x280 [ 3317.518377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.523923] ? debug_smp_processor_id+0x1c/0x20 [ 3317.528577] ? perf_trace_lock+0x14d/0x7a0 [ 3317.532811] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3317.538343] ? lock_is_held_type+0x210/0x210 [ 3317.542765] ? zap_class+0x640/0x640 [ 3317.546466] ? cgroup_file_notify+0x226/0x2f0 [ 3317.550971] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3317.556501] ? check_preemption_disabled+0x48/0x280 [ 3317.561511] _do_fork+0x1cb/0x11d0 [ 3317.565065] ? fork_idle+0x1d0/0x1d0 [ 3317.568775] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3317.574306] ? syscall_trace_enter+0x68c/0x1260 [ 3317.578971] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3317.584518] ? rcu_softirq_qs+0x20/0x20 [ 3317.588484] ? check_preemption_disabled+0x48/0x280 [ 3317.593511] ? do_syscall_64+0x9a/0x820 [ 3317.597472] ? do_syscall_64+0x9a/0x820 [ 3317.601437] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3317.606011] ? trace_hardirqs_on+0xbd/0x310 [ 3317.610323] ? trace_hardirqs_on+0x310/0x310 [ 3317.614722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3317.620101] ? trace_hardirqs_off_caller+0x310/0x310 [ 3317.625220] __x64_sys_clone+0xbf/0x150 [ 3317.629189] do_syscall_64+0x1b9/0x820 [ 3317.633065] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3317.638417] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3317.643340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3317.648179] ? trace_hardirqs_on_caller+0x310/0x310 [ 3317.653196] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3317.658227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3317.663065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3317.668244] RIP: 0033:0x45a039 [ 3317.671429] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3317.690319] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3317.698026] RAX: ffffffffffffffda RBX: 00007f88c6e43700 RCX: 000000000045a039 [ 3317.705288] RDX: 00007f88c6e439d0 RSI: 00007f88c6e42db0 RDI: 00000000003d0f00 [ 3317.712564] RBP: 0000000000a3fcd0 R08: 00007f88c6e43700 R09: 00007f88c6e43700 [ 3317.719822] R10: 00007f88c6e439d0 R11: 0000000000000202 R12: 0000000000000000 [ 3317.727099] R13: 0000000000a3fb7f R14: 00007f88c6e439c0 R15: 000000000072c0ec [ 3317.737105] Task in /syz2 killed as a result of limit of /syz2 [ 3317.743337] memory: usage 307164kB, limit 307200kB, failcnt 469 [ 3317.749608] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3317.756408] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3317.762633] Memory cgroup stats for /syz2: cache:2956KB rss:259232KB rss_huge:237568KB shmem:3136KB mapped_file:528KB dirty:132KB writeback:0KB swap:0KB inactive_anon:2548KB active_anon:259720KB inactive_file:0KB active_file:0KB unevictable:0KB 22:48:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x80000001, 0x4, 0x80000001, 0x101, 0xabf, 0x8, 0x7]}, &(0x7f0000000080)=0x12) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, r0, 0x80000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0xff, @empty, 0x4e24, 0x4, 'wrr\x00', 0x24, 0x0, 0x60}, {@multicast2, 0x4e21, 0x2003, 0x7, 0x5dec521c, 0x2}}, 0x44) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) setrlimit(0x0, &(0x7f00000001c0)={0x2, 0x1f}) 22:48:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7400, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:25 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3317.784550] Memory cgroup out of memory: Kill process 21719 (syz-executor2) score 1110 or sacrifice child [ 3317.794382] Killed process 21719 (syz-executor2) total-vm:70604kB, anon-rss:4276kB, file-rss:32768kB, shmem-rss:0kB [ 3317.806542] oom_reaper: reaped process 21719 (syz-executor2), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 22:48:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x60300, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) dup3(r1, r1, 0x80000) [ 3317.881468] validate_nla: 13 callbacks suppressed [ 3317.881479] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000f7710fbb545e26262a49b6ed88", @ANYRES16=r1, @ANYBLOB="000226bd7000fcdbdf25010000000000000009410000004c00180000003f62726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x13, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x90000000000000) 22:48:25 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:25 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x6, {0x0, 0x4}}, 0x20) [ 3318.060854] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x11ffd) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) 22:48:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x74}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:25 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x84000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xba, "295f7a871fe47de238e8b28c8b8d44f5675a1eaa67e0a0990718fe1a4db1395e42df7d7a145459dd3251a7113a86a5e3fc318daef2c07e01e5696f75ebbc642d7b8b2847219b73dc131c336bb40f1a869263f7633a7520def2055b14fb3656011305eb6bfc5cc667e5650cf1f52cc5d9320795b97683c9700cc100b73869ca9bdb7c256f2ae6d247c0620832796c0cc75faf74a95a1bcb68b74c98a1b31ab6ffc62285aa8f2b491146847fda6608ab04a033e6cac11b021645e4"}, &(0x7f0000000140)=0xc2) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x8000000000000000}, &(0x7f00000001c0)=0x8) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3318.102032] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3318.182206] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3318.188963] CPU: 0 PID: 2715 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3318.196263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3318.205613] Call Trace: [ 3318.208221] dump_stack+0x244/0x39d [ 3318.211869] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3318.217091] dump_header+0x27b/0xf72 [ 3318.220839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.226392] ? check_preemption_disabled+0x48/0x280 22:48:25 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/18) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x4}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x1f}}, 0x9, 0x6, 0x401, 0x1, 0xa1}, &(0x7f0000000180)=0x98) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 3318.231430] ? pagefault_out_of_memory+0x197/0x197 [ 3318.236377] ? debug_smp_processor_id+0x1c/0x20 [ 3318.241060] ? perf_trace_lock+0x14d/0x7a0 [ 3318.245321] ? lock_is_held_type+0x210/0x210 [ 3318.249755] ? __lock_is_held+0xb5/0x140 [ 3318.253837] ? debug_smp_processor_id+0x1c/0x20 [ 3318.258527] ? perf_trace_lock+0x14d/0x7a0 [ 3318.262784] ? zap_class+0x640/0x640 [ 3318.266524] ? print_usage_bug+0xc0/0xc0 [ 3318.270606] ? lock_is_held_type+0x210/0x210 [ 3318.275041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:48:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x6, 0x63000000]) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x4) [ 3318.280601] ? find_held_lock+0x36/0x1c0 [ 3318.284694] ? mark_held_locks+0xc7/0x130 [ 3318.288862] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3318.293988] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3318.299110] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3318.303709] ? trace_hardirqs_on+0xbd/0x310 [ 3318.308047] ? kasan_check_read+0x11/0x20 [ 3318.312213] ? ___ratelimit+0x3b4/0x672 [ 3318.316210] ? trace_hardirqs_off_caller+0x310/0x310 [ 3318.321334] ? trace_hardirqs_on+0x310/0x310 [ 3318.325790] ? lock_downgrade+0x900/0x900 [ 3318.329996] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3318.335127] ? ___ratelimit+0x3b9/0x672 [ 3318.339122] ? idr_get_free+0xf70/0xf70 [ 3318.343112] ? _raw_spin_unlock_irq+0x27/0x80 [ 3318.347622] ? _raw_spin_unlock_irq+0x27/0x80 [ 3318.352145] oom_kill_process.cold.27+0x10/0x903 [ 3318.356919] ? _raw_spin_unlock_irq+0x27/0x80 [ 3318.361442] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3318.366051] ? oom_evaluate_task+0x540/0x540 [ 3318.370484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.376053] ? cgroup_procs_next+0x70/0x70 22:48:25 executing program 1: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80000, 0x0) [ 3318.380332] ? _raw_spin_unlock_irq+0x60/0x80 [ 3318.384867] ? oom_badness+0xaa0/0xaa0 [ 3318.388794] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3318.393573] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3318.399158] ? mem_cgroup_iter_break+0x30/0x30 [ 3318.403783] ? cgroup_file_notify+0x226/0x2f0 [ 3318.408304] out_of_memory+0xa84/0x1430 [ 3318.412297] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3318.416902] ? kasan_check_read+0x11/0x20 [ 3318.421070] ? oom_killer_disable+0x3a0/0x3a0 [ 3318.425603] mem_cgroup_out_of_memory+0x15e/0x210 [ 3318.430459] ? memory_oom_group_write+0x160/0x160 [ 3318.435319] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3318.440187] ? page_counter_try_charge+0x1c1/0x220 [ 3318.445148] try_charge+0xda9/0x1700 [ 3318.448904] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3318.453589] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3318.458545] ? kasan_check_read+0x11/0x20 [ 3318.462704] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3318.468007] ? rcu_softirq_qs+0x20/0x20 [ 3318.472005] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3318.477561] ? __kernel_text_address+0xd/0x40 [ 3318.482073] ? lock_page_memcg+0x350/0x350 [ 3318.486328] ? lock_acquire+0x1ed/0x520 [ 3318.490321] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3318.495925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.501490] ? check_preemption_disabled+0x48/0x280 [ 3318.506534] memcg_kmem_charge_memcg+0x7c/0x120 [ 3318.511218] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3318.515727] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3318.515763] memcg_kmem_charge+0x149/0x350 [ 3318.525403] __alloc_pages_nodemask+0x75e/0xea0 [ 3318.530086] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3318.530109] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3318.530126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.530144] ? check_preemption_disabled+0x48/0x280 [ 3318.530171] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3318.530187] ? rcu_pm_notify+0xc0/0xc0 [ 3318.530215] ? copy_process+0x2026/0x87a0 [ 3318.530235] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3318.569627] ? kmem_cache_alloc_node+0x349/0x730 [ 3318.574412] ? check_preemption_disabled+0x48/0x280 [ 3318.579454] copy_process+0xa09/0x87a0 [ 3318.583775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.589355] ? __lock_acquire+0x62f/0x4c20 [ 3318.593608] ? find_held_lock+0x36/0x1c0 [ 3318.597700] ? __cleanup_sighand+0x70/0x70 [ 3318.601966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.607519] ? print_usage_bug+0xc0/0xc0 [ 3318.611608] ? debug_smp_processor_id+0x1c/0x20 [ 3318.616295] ? perf_trace_lock+0x14d/0x7a0 [ 3318.620545] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3318.625652] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3318.630756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.636286] ? check_preemption_disabled+0x48/0x280 [ 3318.641326] ? debug_smp_processor_id+0x1c/0x20 [ 3318.645992] ? __lock_acquire+0x62f/0x4c20 [ 3318.650219] ? lock_is_held_type+0x210/0x210 [ 3318.654623] ? mark_held_locks+0x130/0x130 [ 3318.658850] ? print_usage_bug+0xc0/0xc0 [ 3318.662916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.668444] ? check_preemption_disabled+0x48/0x280 [ 3318.673454] ? print_usage_bug+0xc0/0xc0 [ 3318.677506] ? __lock_acquire+0x62f/0x4c20 [ 3318.681730] ? lock_is_held_type+0x210/0x210 [ 3318.686141] ? print_usage_bug+0xc0/0xc0 [ 3318.690194] ? __lock_acquire+0x62f/0x4c20 [ 3318.694419] ? print_usage_bug+0xc0/0xc0 [ 3318.698481] ? __lock_acquire+0x62f/0x4c20 [ 3318.702712] ? mark_held_locks+0x130/0x130 [ 3318.706941] ? debug_smp_processor_id+0x1c/0x20 [ 3318.711865] ? mark_held_locks+0x130/0x130 [ 3318.716092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.721618] ? check_preemption_disabled+0x48/0x280 [ 3318.726626] ? debug_smp_processor_id+0x1c/0x20 [ 3318.731282] ? perf_trace_lock+0x14d/0x7a0 [ 3318.735506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.741032] ? check_preemption_disabled+0x48/0x280 [ 3318.746036] ? debug_smp_processor_id+0x1c/0x20 [ 3318.750696] ? perf_trace_lock+0x14d/0x7a0 [ 3318.754922] ? print_usage_bug+0xc0/0xc0 [ 3318.758969] ? zap_class+0x640/0x640 [ 3318.762676] ? delayacct_end+0xc5/0x100 [ 3318.766658] ? zap_class+0x640/0x640 [ 3318.770365] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3318.775463] ? __lock_acquire+0x62f/0x4c20 [ 3318.779690] ? find_held_lock+0x36/0x1c0 [ 3318.783750] ? mark_held_locks+0x130/0x130 [ 3318.787970] ? _raw_spin_unlock_irq+0x27/0x80 [ 3318.792452] ? _raw_spin_unlock_irq+0x27/0x80 [ 3318.796934] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3318.801506] ? trace_hardirqs_on+0xbd/0x310 [ 3318.805841] ? kasan_check_read+0x11/0x20 [ 3318.809982] ? psi_memstall_leave+0x202/0x260 [ 3318.814487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.820018] ? check_preemption_disabled+0x48/0x280 [ 3318.825021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.830548] ? debug_smp_processor_id+0x1c/0x20 [ 3318.835202] ? perf_trace_lock+0x14d/0x7a0 [ 3318.839431] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3318.844974] ? lock_is_held_type+0x210/0x210 [ 3318.849376] ? zap_class+0x640/0x640 [ 3318.853081] ? cgroup_file_notify+0x226/0x2f0 [ 3318.857565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3318.863088] ? check_preemption_disabled+0x48/0x280 [ 3318.868095] _do_fork+0x1cb/0x11d0 [ 3318.871627] ? fork_idle+0x1d0/0x1d0 [ 3318.875334] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3318.880862] ? syscall_trace_enter+0x68c/0x1260 [ 3318.885521] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3318.891046] ? rcu_softirq_qs+0x20/0x20 [ 3318.895012] ? check_preemption_disabled+0x48/0x280 [ 3318.900022] ? do_syscall_64+0x9a/0x820 [ 3318.903981] ? do_syscall_64+0x9a/0x820 [ 3318.907942] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3318.912516] ? trace_hardirqs_on+0xbd/0x310 [ 3318.916829] ? trace_hardirqs_on+0x310/0x310 [ 3318.921223] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3318.926574] ? trace_hardirqs_off_caller+0x310/0x310 [ 3318.931668] __x64_sys_clone+0xbf/0x150 [ 3318.935636] do_syscall_64+0x1b9/0x820 [ 3318.939510] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3318.944862] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3318.949818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3318.954651] ? trace_hardirqs_on_caller+0x310/0x310 [ 3318.959661] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3318.964668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3318.969504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3318.974683] RIP: 0033:0x45a039 [ 3318.977867] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3318.996774] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3319.004480] RAX: ffffffffffffffda RBX: 00007f010550c700 RCX: 000000000045a039 [ 3319.011744] RDX: 00007f010550c9d0 RSI: 00007f010550bdb0 RDI: 00000000003d0f00 [ 3319.019002] RBP: 0000000000a3fcd0 R08: 00007f010550c700 R09: 00007f010550c700 [ 3319.026271] R10: 00007f010550c9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3319.033553] R13: 0000000000a3fb7f R14: 00007f010550c9c0 R15: 000000000072bf0c [ 3319.041788] Task in /syz0 killed as a result of limit of /syz0 [ 3319.047832] memory: usage 307192kB, limit 307200kB, failcnt 1007375 [ 3319.054436] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3319.061269] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 22:48:26 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0x5, 0x6, {0x57, 0x1, 0x0, {0x200, 0x7}, {0x5, 0x5}, @ramp={0x8001, 0x8, {0x200, 0xfff, 0xb2b2, 0x81}}}, {0x56, 0x5, 0x40, {0x6d9, 0x1f}, {0xfffffffffffffffa, 0xdb0}, @const={0x6, {0x8, 0x1ff, 0x100, 0x6}}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigpending(&(0x7f0000000200), 0x8) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getitimer(0x0, &(0x7f0000000140)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x0, 0x14000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800dd3d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:26 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfff, 0x1ff, 0x3], 0x3, 0x0, 0x7, 0x100, 0x7, 0x7f, {0x1, 0x0, 0x1000100000000, 0x0, 0x9cc, 0x44a, 0x1ff, 0x3, 0x8001, 0x80, 0x1, 0x400, 0x80, 0x10000, "f8caa8030f53af0fcf5b352a8326338f20a5d2d2c20bba450a852a419256af10"}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x0, 0x100}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}}}, 0x84) mq_unlink(&(0x7f0000000040)='*\x00') mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x80000) 22:48:26 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:26 executing program 1: get_mempolicy(0x0, 0x0, 0x1a, &(0x7f0000ffa000/0x4000)=nil, 0x1) 22:48:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:26 executing program 4: socketpair$unix(0x1, 0x8090001ffffffffe, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000300)='vet\x9b\x03\xfd\x10\xa1\xc6\x8e\x19\f\x7f\xff\x00', 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)=0x1) socket$unix(0x1, 0x1, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x2, 0x800}, @sack_perm, @timestamp, @window={0x3, 0x101, 0x8}, @window={0x3, 0xd05, 0x9}, @mss={0x2, 0xa73}, @window={0x3, 0x0, 0x8}, @timestamp, @timestamp, @window={0x3, 0x80000001, 0xffffffffffffffff}], 0xa) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) [ 3319.067414] Memory cgroup stats for /syz0: cache:200KB rss:137240KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:137300KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3319.088823] Memory cgroup out of memory: Kill process 2599 (syz-executor0) score 1106 or sacrifice child [ 3319.098715] Killed process 2599 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33560kB, shmem-rss:0kB [ 3319.110806] oom_reaper: reaped process 2599 (syz-executor0), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB [ 3319.177577] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000002240)={"93b2af01af60a0562b909caf248f69c7ff755b85f3e75aa4554764bcc0856edc08a05463cc4a6261dbebfaf50ff126ed6f7fc6eaee2ce790f5662d0432a427a49ac4e5254a5cac5ff1ef6f68538d18dd4ef454df067ec1b647eb84f6eb1a5a1b8830dc43636775969871901f037134625beaa56eb88a42175c40d4b8ccb30f8b929a8a46c373e38795ff7247451807df3c64f023f42d2dd1f5dbc2a5e48e15a9ae29f5353f8168ccb0bd74a3448bda942a884f92d765625148c6c7ee31ec19b5d45b1a3c90f8df410de4a5a250dc32688ded6ea2fff772128413561ae229c64bbd08d2bfbc64a9f27d064fa56fa46538ec30f003ffa3240688dbbf14d1b50a4a0a6910ac407999978fc472c3aefa807a8ed05b485b0fcbe466c93b654f29349e41d112d2b7846c874fdeecf79d6504919aeca13a5851a06406155fd1b69e943ee560ff612f64df07efdd4d26ddb4121e5b3ffca99faf279f4315b796f10a22b46a1f13eda89896e94380bf7ccbb86c93a1e31f1bab805609b8efe4ea61a082e597baa610a950d9898e26d393fd573e85e1f33e6b5feebb93e92b524ec44c1a82e8c8c6cdbff7d89a0b83b1dd7246b65e39f8a0eccc4f232e5acac9f4a94ff035db87c2ba734194f2c3e3a4aceeab518db5a08f47ac5048e4089a0d5c35aac664a9737c319afc1243ecccc7771f84f7bf73bbf11ff8258ff52c21f40e802e34c9fc2b2788993fd2bf794582a1cfe8d2e978f10945bb911bbdd32f934e72650d4ddd7826f08d2c3afac712881ebc65be217e6a6b0b7ca4bf16f38daf84211c402e4b2ee3c63a67bebdd15230736acde8e2e477423e23453a8844cbf360b07798a6d00b41ac0a3f06532fdfc5dc255ad22229c6a507d5023ceb31a73c7f0139947534f546eb650de131f4b2e4f4db888df1655ea5953d90e1cef0bc2a053825fbd94ac71888c80c4dac835893a6dcdc2a69763ca7cc4c80ad20868f799df7cc613f8e163c045441e6bb9febe9cc65ddb14b1f81f57a45b559f132989c7060fd37e4273fe652bb90d7dee47be152753c8903c99a96705ec7cd081eaf71ac06342ea5e969f130a060f240b2a0c538995bc25f514bbdffedfc901a854034b48de99ea745932d9a3d9bd329a278d1e32aa5ce9a3b4b1b25e7ff3fbf0d1d2c6a4883b17b2a502a287025963d1c42331e2987542c5e3c32e2695e6e4698916601287418f34cf42482b8bddcca4db68fa15a31f126762b549cbbd5246c1c6b45140659f813f33b985c8b428a8bca1e9edae505ca2f61d5309f3c0572e84654839a9370c6735164c0d4f91c97d0ac3de208ba4a4357184771b738f0ab90c23bee85b1ff9094888a2a5065e26af1a0460c445564600323ae31e884aa4a9eaa84d54b6de8c34906c6929eca1e3fe818062b9ac79e8319d865ab46417624c00937c9a69f90be72"}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3012}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x310, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000003240)=""/4096) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000240)) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101800) 22:48:26 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8000, 0x8000) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:48:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) open_by_handle_at(r0, &(0x7f0000000080)={0x1008, 0x4, "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"}, 0x200) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r1, 0x50, &(0x7f00000010c0)}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xffffff7f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:26 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0010100}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3319.323628] syz-executor0 invoked oom-killer: gfp_mask=0x7000c0(GFP_KERNEL_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 3319.355394] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3319.362376] CPU: 0 PID: 2760 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3319.369674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3319.379039] Call Trace: [ 3319.381650] dump_stack+0x244/0x39d [ 3319.385303] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3319.390524] dump_header+0x27b/0xf72 [ 3319.394265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3319.399831] ? check_preemption_disabled+0x48/0x280 [ 3319.404877] ? pagefault_out_of_memory+0x197/0x197 [ 3319.409829] ? debug_smp_processor_id+0x1c/0x20 [ 3319.414515] ? perf_trace_lock+0x14d/0x7a0 [ 3319.418781] ? lock_is_held_type+0x210/0x210 [ 3319.423210] ? __lock_is_held+0xb5/0x140 [ 3319.427289] ? debug_smp_processor_id+0x1c/0x20 [ 3319.431974] ? perf_trace_lock+0x14d/0x7a0 [ 3319.436226] ? zap_class+0x640/0x640 [ 3319.439963] ? print_usage_bug+0xc0/0xc0 [ 3319.444046] ? lock_is_held_type+0x210/0x210 [ 3319.445091] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3319.448480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3319.461504] ? find_held_lock+0x36/0x1c0 [ 3319.465591] ? mark_held_locks+0xc7/0x130 [ 3319.469764] ? _raw_spin_unlock_irqrestore+0x82/0xd0 22:48:26 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3319.474886] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3319.479994] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3319.484572] ? trace_hardirqs_on+0xbd/0x310 [ 3319.488898] ? kasan_check_read+0x11/0x20 [ 3319.493055] ? ___ratelimit+0x3b4/0x672 [ 3319.497046] ? trace_hardirqs_off_caller+0x310/0x310 [ 3319.502164] ? trace_hardirqs_on+0x310/0x310 [ 3319.506586] ? lock_downgrade+0x900/0x900 [ 3319.510760] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3319.515875] ? ___ratelimit+0x3b9/0x672 [ 3319.519866] ? idr_get_free+0xf70/0xf70 [ 3319.523860] ? _raw_spin_unlock_irq+0x27/0x80 [ 3319.528367] ? _raw_spin_unlock_irq+0x27/0x80 [ 3319.532894] oom_kill_process.cold.27+0x10/0x903 [ 3319.537658] ? _raw_spin_unlock_irq+0x27/0x80 [ 3319.542159] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3319.546793] ? oom_evaluate_task+0x540/0x540 [ 3319.551210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3319.556797] ? cgroup_procs_next+0x70/0x70 [ 3319.561030] ? _raw_spin_unlock_irq+0x60/0x80 [ 3319.565516] ? oom_badness+0xaa0/0xaa0 [ 3319.569412] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3319.574169] ? mem_cgroup_iter_break+0x30/0x30 [ 3319.578769] ? mark_held_locks+0xc7/0x130 [ 3319.583338] out_of_memory+0xa84/0x1430 [ 3319.587327] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3319.591928] ? kasan_check_read+0x11/0x20 [ 3319.596093] ? oom_killer_disable+0x3a0/0x3a0 [ 3319.600622] mem_cgroup_out_of_memory+0x15e/0x210 [ 3319.605490] ? memory_oom_group_write+0x160/0x160 [ 3319.610340] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3319.615177] ? page_counter_try_charge+0x1c1/0x220 [ 3319.620099] try_charge+0xda9/0x1700 [ 3319.623823] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3319.628494] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3319.633413] ? kasan_check_read+0x11/0x20 [ 3319.637551] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3319.642820] ? rcu_softirq_qs+0x20/0x20 [ 3319.646789] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3319.652324] ? lock_page_memcg+0x350/0x350 [ 3319.656555] ? lock_acquire+0x1ed/0x520 [ 3319.660520] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3319.665873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3319.671401] ? check_preemption_disabled+0x48/0x280 [ 3319.676412] memcg_kmem_charge_memcg+0x7c/0x120 [ 3319.681074] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3319.685568] ? __lock_is_held+0xb5/0x140 [ 3319.689621] memcg_kmem_charge+0x149/0x350 [ 3319.693849] __alloc_pages_nodemask+0x75e/0xea0 [ 3319.698523] ? lock_downgrade+0x900/0x900 [ 3319.702686] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3319.707714] ? zap_class+0x640/0x640 [ 3319.711423] ? rcu_softirq_qs+0x20/0x20 [ 3319.715726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3319.721259] ? check_preemption_disabled+0x48/0x280 [ 3319.726271] ? __lock_is_held+0xb5/0x140 [ 3319.730329] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3319.735866] alloc_pages_current+0x173/0x350 [ 3319.740267] __get_free_pages+0xc/0x40 [ 3319.744251] mmu_topup_memory_caches+0x217/0x470 [ 3319.749033] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 3319.754483] kvm_mmu_load+0x21/0x1290 [ 3319.758279] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 3319.763210] ? perf_trace_lock+0x14d/0x7a0 [ 3319.767433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3319.772963] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 3319.777199] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 3319.782031] ? zap_class+0x640/0x640 [ 3319.785733] ? __lock_acquire+0x62f/0x4c20 [ 3319.789965] ? futex_wait+0x5ec/0xa50 [ 3319.793763] ? find_held_lock+0x36/0x1c0 [ 3319.797846] ? get_task_pid+0x1ea/0x3b0 [ 3319.801815] ? lock_downgrade+0x900/0x900 [ 3319.805956] ? check_preemption_disabled+0x48/0x280 [ 3319.810963] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3319.815905] ? kasan_check_read+0x11/0x20 [ 3319.820063] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3319.825330] ? rcu_softirq_qs+0x20/0x20 [ 3319.829379] ? get_task_pid+0x211/0x3b0 [ 3319.833365] ? find_get_pid+0x270/0x270 [ 3319.837331] ? mark_held_locks+0x130/0x130 [ 3319.841562] kvm_vcpu_ioctl+0x5c8/0x1150 [ 3319.845676] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 3319.849904] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 3319.855610] ? find_held_lock+0x36/0x1c0 [ 3319.859668] ? __fget+0x4aa/0x740 [ 3319.863115] ? check_preemption_disabled+0x48/0x280 [ 3319.868123] ? kasan_check_read+0x11/0x20 [ 3319.872260] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3319.877525] ? rcu_softirq_qs+0x20/0x20 [ 3319.881532] ? __fget+0x4d1/0x740 [ 3319.884977] ? ksys_dup3+0x680/0x680 [ 3319.888688] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3319.894213] ? rcu_pm_notify+0xc0/0xc0 [ 3319.898093] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 3319.903796] do_vfs_ioctl+0x1de/0x1790 [ 3319.907689] ? ioctl_preallocate+0x300/0x300 [ 3319.912085] ? __fget_light+0x2e9/0x430 [ 3319.916070] ? fget_raw+0x20/0x20 [ 3319.919538] ? do_syscall_64+0x9a/0x820 [ 3319.923499] ? do_syscall_64+0x9a/0x820 [ 3319.927476] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3319.932050] ? security_file_ioctl+0x94/0xc0 [ 3319.936469] ksys_ioctl+0xa9/0xd0 [ 3319.939917] __x64_sys_ioctl+0x73/0xb0 [ 3319.943797] do_syscall_64+0x1b9/0x820 [ 3319.947676] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3319.953029] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3319.957943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3319.962777] ? trace_hardirqs_on_caller+0x310/0x310 [ 3319.967784] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3319.972799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3319.977638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3319.982840] RIP: 0033:0x457669 [ 3319.986036] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3320.004925] RSP: 002b:00007f010550bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3320.012622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 3320.019880] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 3320.027175] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3320.034479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f010550c6d4 [ 3320.041734] R13: 00000000004c0505 R14: 00000000004d1580 R15: 00000000ffffffff [ 3320.064405] Task in /syz0 killed as a result of limit of /syz0 [ 3320.070824] memory: usage 305640kB, limit 307200kB, failcnt 1007394 [ 3320.077294] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3320.085118] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3320.091381] Memory cgroup stats for /syz0: cache:200KB rss:137292KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:137264KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3320.113186] Memory cgroup out of memory: Kill process 566 (syz-executor0) score 1106 or sacrifice child [ 3320.124380] Killed process 566 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33556kB, shmem-rss:0kB [ 3320.143115] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 3320.154386] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3320.159621] CPU: 0 PID: 2759 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3320.166910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3320.176286] Call Trace: [ 3320.178875] dump_stack+0x244/0x39d [ 3320.182499] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3320.187687] dump_header+0x27b/0xf72 [ 3320.191396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3320.196927] ? check_preemption_disabled+0x48/0x280 [ 3320.201936] ? pagefault_out_of_memory+0x197/0x197 [ 3320.206856] ? debug_smp_processor_id+0x1c/0x20 [ 3320.211529] ? perf_trace_lock+0x14d/0x7a0 [ 3320.215776] ? lock_is_held_type+0x210/0x210 [ 3320.220176] ? __lock_is_held+0xb5/0x140 [ 3320.224231] ? debug_smp_processor_id+0x1c/0x20 [ 3320.228890] ? perf_trace_lock+0x14d/0x7a0 [ 3320.233130] ? zap_class+0x640/0x640 [ 3320.236864] ? print_usage_bug+0xc0/0xc0 [ 3320.240934] ? lock_is_held_type+0x210/0x210 [ 3320.245343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3320.250872] ? find_held_lock+0x36/0x1c0 [ 3320.254928] ? mark_held_locks+0xc7/0x130 [ 3320.259096] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3320.264198] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3320.269296] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3320.273908] ? trace_hardirqs_on+0xbd/0x310 [ 3320.278237] ? kasan_check_read+0x11/0x20 [ 3320.282391] ? ___ratelimit+0x3b4/0x672 [ 3320.286357] ? trace_hardirqs_off_caller+0x310/0x310 [ 3320.291452] ? trace_hardirqs_on+0x310/0x310 [ 3320.295870] ? lock_downgrade+0x900/0x900 [ 3320.300025] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3320.305118] ? ___ratelimit+0x3b9/0x672 [ 3320.309082] ? idr_get_free+0xf70/0xf70 [ 3320.313045] ? _raw_spin_unlock_irq+0x27/0x80 [ 3320.317559] ? _raw_spin_unlock_irq+0x27/0x80 [ 3320.322070] oom_kill_process.cold.27+0x10/0x903 [ 3320.326823] ? _raw_spin_unlock_irq+0x27/0x80 [ 3320.331357] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3320.335962] ? oom_evaluate_task+0x540/0x540 [ 3320.340490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3320.346037] ? cgroup_procs_next+0x70/0x70 [ 3320.350267] ? _raw_spin_unlock_irq+0x60/0x80 [ 3320.354759] ? oom_badness+0xaa0/0xaa0 [ 3320.358651] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3320.363409] ? mem_cgroup_iter_break+0x30/0x30 [ 3320.368019] ? mark_held_locks+0xc7/0x130 [ 3320.372224] out_of_memory+0xa84/0x1430 [ 3320.376222] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3320.380815] ? kasan_check_read+0x11/0x20 [ 3320.384966] ? oom_killer_disable+0x3a0/0x3a0 [ 3320.389498] mem_cgroup_out_of_memory+0x15e/0x210 [ 3320.394343] ? memory_oom_group_write+0x160/0x160 [ 3320.399190] ? mem_cgroup_try_charge+0x627/0xe20 [ 3320.403950] ? page_counter_try_charge+0x1c1/0x220 [ 3320.408871] try_charge+0xda9/0x1700 [ 3320.412578] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3320.417494] ? kasan_check_read+0x11/0x20 [ 3320.421650] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3320.426316] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3320.431860] ? lock_page_memcg+0x350/0x350 [ 3320.436111] ? lock_acquire+0x1ed/0x520 [ 3320.440081] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3320.445451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3320.450984] ? check_preemption_disabled+0x48/0x280 [ 3320.455994] ? kasan_check_read+0x11/0x20 [ 3320.460134] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3320.465403] ? rcu_softirq_qs+0x20/0x20 [ 3320.469376] mem_cgroup_try_charge+0x627/0xe20 [ 3320.473987] ? __anon_vma_prepare+0x325/0x6c0 [ 3320.478594] ? mem_cgroup_protected+0xa60/0xa60 [ 3320.483340] ? up_write+0x7b/0x220 [ 3320.486895] ? down_write_nested+0x130/0x130 [ 3320.491303] ? __anon_vma_prepare+0x353/0x6c0 [ 3320.495799] ? anon_vma_fork+0x820/0x820 [ 3320.499858] ? mark_held_locks+0x130/0x130 [ 3320.504118] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3320.509654] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 3320.514578] __handle_mm_fault+0x2854/0x5be0 [ 3320.518987] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3320.523826] ? lock_is_held_type+0x210/0x210 [ 3320.528259] ? vm_mmap_pgoff+0x222/0x2c0 [ 3320.532325] ? lock_downgrade+0x900/0x900 [ 3320.536469] ? zap_class+0x640/0x640 [ 3320.540197] ? zap_class+0x640/0x640 [ 3320.543904] ? userfaultfd_unmap_prep+0x660/0x660 [ 3320.548763] ? find_held_lock+0x36/0x1c0 [ 3320.552836] ? handle_mm_fault+0x42a/0xc70 [ 3320.557074] ? lock_downgrade+0x900/0x900 [ 3320.561215] ? check_preemption_disabled+0x48/0x280 [ 3320.566236] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3320.571157] ? kasan_check_read+0x11/0x20 [ 3320.575299] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3320.580620] ? rcu_softirq_qs+0x20/0x20 [ 3320.584612] ? trace_hardirqs_off_caller+0x310/0x310 [ 3320.589715] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3320.595252] ? check_preemption_disabled+0x48/0x280 [ 3320.600264] handle_mm_fault+0x54f/0xc70 [ 3320.604323] ? __handle_mm_fault+0x5be0/0x5be0 [ 3320.609008] ? find_vma+0x34/0x190 [ 3320.612555] __do_page_fault+0x5e8/0xe60 [ 3320.616605] ? trace_hardirqs_off+0xb8/0x310 [ 3320.621027] do_page_fault+0xf2/0x7e0 [ 3320.624850] ? vmalloc_sync_all+0x30/0x30 [ 3320.628993] ? error_entry+0x70/0xd0 [ 3320.632699] ? trace_hardirqs_off_caller+0xbb/0x310 [ 3320.637712] ? trace_hardirqs_on_caller+0xc0/0x310 [ 3320.642647] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3320.647579] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3320.652442] ? trace_hardirqs_on_caller+0x310/0x310 [ 3320.657479] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 3320.662940] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3320.667963] ? page_fault+0x8/0x30 [ 3320.671506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3320.676365] ? page_fault+0x8/0x30 [ 3320.679901] page_fault+0x1e/0x30 [ 3320.683350] RIP: 0033:0x40ed7f [ 3320.686551] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 3320.705442] RSP: 002b:0000000000a3fb10 EFLAGS: 00010206 [ 3320.710803] RAX: 00007f01054cb000 RBX: 0000000000020000 RCX: 00000000004576ba [ 3320.718072] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 3320.725438] RBP: 0000000000a3fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 3320.732707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a3fcd0 [ 3320.739965] R13: 00007f01054eb700 R14: 000000000072bfac R15: 000000000072bfac [ 3320.747816] Task in /syz0 killed as a result of limit of /syz0 [ 3320.753923] memory: usage 303580kB, limit 307200kB, failcnt 1007394 [ 3320.760412] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3320.767179] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3320.773380] Memory cgroup stats for /syz0: cache:200KB rss:135080KB rss_huge:57344KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:135104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3320.794804] Memory cgroup out of memory: Kill process 716 (syz-executor0) score 1106 or sacrifice child [ 3320.804506] Killed process 716 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33556kB, shmem-rss:0kB [ 3320.816625] oom_reaper: reaped process 716 (syz-executor0), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 22:48:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x20000000}, 0xdcd6eb3c516783fa) 22:48:28 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:28 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffffff) 22:48:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x8, "eb7fa589017ac47b777e5f4714004b587e1979a2c0f62533165e459b6b06fac2", 0x4, 0x4, 0x46, 0x6, 0x7}) [ 3320.922922] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:28 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r1 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) setresuid(r0, r1, r2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:28 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:28 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3321.040932] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1940}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) getitimer(0x0, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400000, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) 22:48:28 executing program 1: get_mempolicy(0x0, 0x0, 0x43, &(0x7f0000ff8000/0x4000)=nil, 0x0) 22:48:28 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000240)={0x6, "913f15701e72126c5113248cb8c66853bc611ce68a015da1c3042db74d0e54be", 0x1, 0x20, 0x40, 0x8, 0x4, 0x4, 0xf4, 0xf0a}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x18}}}, 0x40, 0xfffffffffffffffc, 0x0, 0x1f, 0x1}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="810000c4346082d5a4153a2a0462c07d6ed6244a61b61b9ac0772bccc2f96cce37bc13c3812e1f320389f65629dfdeba246e5195b3ef68eb7372501aceabab2259ba23d71cf1f36fa2bb50081d68aa9bfe060c56f6c2678244c507099739e9450e63b7448c9b8ed80b1a9c990d95e9b27fc87e370000000000000000"], &(0x7f0000000200)=0x89) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3321.203458] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:28 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 22:48:28 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x400000000000803, 0x4) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x8}}, 0x18) 22:48:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xff, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3321.250269] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @dev}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', r3}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1940000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:28 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:28 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:28 executing program 1: get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000ffa000/0x4000)=nil, 0x2) [ 3321.455769] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'ovf\x00', 0x1, 0x7fff}, 0x2c) 22:48:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x101) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = dup3(r0, r0, 0x80000) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@get={0x118, 0x13, 0x700, 0x70bd27, 0x25dfdbfd, {{'cbc(serpent)\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0xfffffffffffffff9}, {0x8, 0x1, 0x855}, {0x8, 0x1, 0x7f}, {0x8, 0x1, 0x100}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0xefa}, {0x8, 0x1, 0x3ff}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 22:48:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0xc0) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:28 executing program 1: get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x240800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:29 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3321.657597] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:29 executing program 1: lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, r1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2) 22:48:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0xf162964c5467660f) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10001, 0x800}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000001c0)={0x40, r3}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/232, &(0x7f0000000300)=0xe8) 22:48:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:29 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x302, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) 22:48:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000003c0)={0x9, 0x1, 0x5, 0x4, 0x3f}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xf0, 0xf0, 0xf0, 0xf0, 0xf0, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@time={0x38, 'time\x00', 0x0, {0x8000, 0x1, 0xa160, 0x5c8a, 0x0, 0x1, 0x3}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@local, @remote, 0xffffffff, 0xff, 'vlan0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0x3, 0x20}, 0x0, 0xf0, 0x128, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xd}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x100, 0x4, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x7, 0x1, 0xffffffffffffff81}, {0xb04, 0x80, 0x8000}, {0x8, 0x0, 0x7}, 0x400, 0x7ff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:29 executing program 0: socket$inet(0x2, 0xb, 0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(r2, &(0x7f0000000040), 0x30, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000000)='./file0\x00', 0x104) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x407) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:29 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x500000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0xfffffffffffffffa, 0x8, 0x89, 0x18, 0x7, 0x80000001, 0x9479, 0x0}, &(0x7f0000000100)=0x20) fsetxattr$security_smack_entry(r1, &(0x7f00000001c0)='security.SMACK64MMAP\x00', &(0x7f0000000200)='/dev/sequencer2\x00', 0x10, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x2}, 0x8) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x3, 0x1f}) 22:48:29 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) 22:48:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x62c, 0x1) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7f, 0x8000, 0x2b91, 0x10000}, &(0x7f0000000080)=0x14) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000140)="1465f11239dbc75d7ca4544194a9bd5851c779ff7b46e96989697b98be9c9f6cd9a144e9882b7b152795940b4a6b72e8396c1b273e7a4ffc49d2379036e18572ed81c58de84b69d73d8e82df327bf1fad2b46c38dbfaab247f840afb2d4d84cd700c54dc31a9c949cae06d13ad8453e60f2b8d4e29e42091f2f22ef11d8eddc218372cb1c3d0eadf5b3e6c0d49c421877354d169ece420e7adc12afd0d40839ad405704efaec6e0d3b0458622f7e7f01dd4fe83ddd0031708388ac40ba961720a36e8592b62a51fcb2c786bcabe99973b5c4d0e5bb8e94f91335b186cc4329d43d5dd864e06478ed7fa2887babfdec3ed3f194d38f7da05e51") getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x100}, &(0x7f0000000100)=0x8) syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) 22:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000240)={0x4, 0x4, 0x0, 0x100, 0x7, 0xb0a, 0x8}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x4, 0xfffffffffffffffc, 0x48, 0xd99, 0x8001, 0xfffffffffffffffe, {0x0, @in6={{0xa, 0x4e22, 0x7ff, @loopback, 0x9}}, 0x100000000, 0x3bc0, 0x400, 0x2}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0xc5fc}, &(0x7f0000000200)=0x8) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:29 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:29 executing program 4: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000000)={0x9, 0x6, [{0x4, 0x0, 0x40}, {0x7}, {0x6, 0x0, 0xfffffffffffffff7}, {0x8, 0x0, 0x6}, {0x4, 0x0, 0xb88}, {0xfcc, 0x0, 0x2}, {0x17dfe2f3, 0x0, 0x7b431fa3}, {0xffffffff, 0x0, 0x6}, {0x6, 0x0, 0x3}]}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 22:48:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x200000000003, &(0x7f0000ffc000/0x3000)=nil) 22:48:29 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x180000000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) umount2(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={r4, r5, r6}, 0xc) sched_rr_get_interval(r4, &(0x7f0000000340)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500db44c7450000bf7c2276b30007040000f0fff8ffffff79a4dcff08000000b4060000ffffff311a25b7ecff2d020000000000e556b35eb8006504040001000000043580179dc61d000014000000009500000000000000000000000000000000000000000000"], 0x0}, 0x48) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x20000010001, &(0x7f00000004c0)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000240)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r7 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r7, 0xffffffffffffff00) munlockall() socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000400)={0x0, 0x8, {0x3, 0xfffffffffffffffe, 0x300f, 0x0, 0xf, 0x2, 0x1, 0x2}}) ioctl(r0, 0x20000000008912, &(0x7f00000003c0)="0a5c2d0240316285717070") r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x200000000006) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bafb2, &(0x7f0000000300)=[{}]}) ioctl$EVIOCGREP(r8, 0x40107447, &(0x7f0000000600)=""/174) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3f}, &(0x7f0000000280)=0x8) 22:48:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x4, 0x9, 0x9}, 'syz0\x00', 0x20}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:29 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000001380)='team\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xc0, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/172, 0xac}, {&(0x7f00000012c0)=""/42, 0x2a}, {&(0x7f0000001300)=""/97, 0x61}, {&(0x7f0000002bc0)=""/147, 0x93}], 0x5, &(0x7f00000014c0)=""/67, 0x43}, 0x2}, {{&(0x7f0000001540)=@alg, 0x80, &(0x7f0000002680)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/187, 0xbb}], 0x24a, &(0x7f00000026c0)=""/149, 0x95}, 0x2}, {{&(0x7f0000002780)=@ax25, 0x80, &(0x7f0000002940), 0x0, &(0x7f0000002c80)=""/128, 0x80}, 0x58}], 0x3, 0xffffffffffffffff, &(0x7f0000002ac0)) sendto(r0, &(0x7f0000000040)="4606c3b6b7a90acb47f230bbfe21a3fc912906675283424cabbe41217c380ac11fb3185f77f3e58a5042d28d62309bea9ae848907dbf7f480227e7bde7fb45cec522a51908d7d1cd254aab1e280b61fa960cec4ec2b633020622c7bccf53c0f4c0d5b21b3c7e19f2de8dc5a7bcd4374be87826aa1633d7fb56b07c02af0ad40cc3a859add4a3fa08e56c32cb053b64b933cf0db2b0d8f8d583", 0x99, 0x20040001, &(0x7f0000000100)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80) 22:48:29 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0xa5bb}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) 22:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x148, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @ipv4={[], [], @remote}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x1e}, 0x380}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc68}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x14}, 0xd0) 22:48:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x70000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x4, 0xffffffffffffff6b, 0xc9, 0x0, 0xf}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x52, 0x10000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'nr0\x00', 0x3}, 0x18) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x8, 0x400000080000) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x418802) 22:48:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) setresuid(r1, r2, r3) 22:48:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x0) r1 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x3, 0x2) r2 = syz_open_dev$rtc(&(0x7f0000000500)='/dev/rtc#\x00', 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x80000000, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) r5 = getpid() r6 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000640)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8) getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000940)={0x8000, 0x10, 0x1, 0xffffffffffffffff}) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x80, 0x0) r15 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000009c0)='cgroup.max.descendants\x00', 0x2, 0x0) r16 = socket$alg(0x26, 0x5, 0x0) r17 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000a00)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x00', 0x2, 0x0) r19 = syz_open_dev$sndpcmc(&(0x7f0000000a80)='/dev/snd/pcmC#D#c\x00', 0x40, 0x48003) r20 = timerfd_create(0x7, 0x80000) r21 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$unix(r0, &(0x7f0000000bc0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="fb11d98a4747e836bf47a821683aa0e71de2c9e8cb59cd81233bf6bd649c211fa361f8a068e863b93abb0d53d7ab7ac89cfeffbc934329297ea6748a20aa94e3cb96d236238bb16307142c6c4aeb06e55b4abf38", 0x54}, {&(0x7f0000000340)="2c89c09856f36ffc0b0462bcc488a9e2398e35798a03eb1a93ffd7fe81653429ba0d8c8cfc09c60ab15cbbea69c30aa48b7f106d718bf8b39319ed3a3685a532d0836e28797a81b131e0149e3529bb10359b9b7f54fa98c312f0325f8f595e1facf9a3c7b1d08ef334d9af409c3198f48bf2a0f71bed9cf528f28a3a967ca03bba6365c4577d85a1544ca6d8b975ad0882fe25d3b971e6a806635fa17bd2d35655d6326042e63922195f9ba2166f7a4442e3cbe0597d30038e7101d8", 0xbc}, {&(0x7f0000000400)="a6b2db4ed1ac0a2dac8181e143faaf86a5880b7368938e4a6480435e93880eb4a287e62899674113da7524dcabe08bdce6edcce820e442e957217b6b7d794cccfa96644a30cc9b16acbfa53d5078f343db6e8169fc55f7a6b6eb26b78bad307bf2e14eb639a4417760e2eaf10a00d21a0fac6277c17cf9dd0f717b5b121927fe571726cdd2de806c296d9af9ae86e00909d3c130474756315aca6b99130e14bc96469ef0603b563371258d49231ff495d77097fcc205c22ed8269decb25ce67fd3596948dcf20959c6a35726e13a", 0xce}], 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="8e9e0000000003010000020000009cb730a85b53ba08358045da8919210fd8fbe6dc10260ec18dcce4f153154c19a92ea014e6c070b545c8e9471c712b6552b4078b3a03b7c5c38f490e563d30caa32b4913f862fd17f2bc5b04b1163328e14f203e30ae2e5c49c3aa296b3f1356298228d6c879", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000ee5cd1d82ede9f5ce15d410464cdf4ae18745101b6df5367276a2b7edfdc856d915d3ff089864b387185d873c827118ce7467a5b38e0303a9976279449586b946bc9f56fa6ebe616c657abbcfa1ea541d4fd0f6c29f355ed4c237963dcb0c5ec17fc323f03003839c6de83af540ba9469367e7de08cfba76c6b4be7eabe56ad5a2764ad072130cb5ab56a709b8e0a866a8381b1b5536c34b242a3264d98cca397a29e8107674bc44cb7faf3b4686c6dd029f6fc6a95b20d5327646f7c208d1265bc00bb8fc90af7ee16e3f6416b7d58e17a9d843dab6bbbcdb8653b163088b9da363cbb2", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="ff00000000100000ffffff0001df000000000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x1}, 0x1) r22 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r23, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80000) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3ff, 0x402000) r24 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r22, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:30 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xffffff9e}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:30 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}}) 22:48:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x10001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x8578, 0x1, 0x4}, 0x7, 0x100000001, 0x38000000}) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000003c0)={0x5, &(0x7f0000000100)=""/26, &(0x7f0000000340)=[{0x5, 0x15, 0x5, &(0x7f0000000140)=""/21}, {0x8, 0x3f, 0x9, &(0x7f00000001c0)=""/63}, {0x5, 0x4f, 0x5, &(0x7f0000000200)=""/79}, {0xffffffffffff8000, 0x23, 0x400, &(0x7f0000000280)=""/35}, {0x7, 0x51, 0x2b43, &(0x7f00000002c0)=""/81}]}) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000380)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2}) r2 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x0, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000000600)=[@in={0x2, 0x4e23, @rand_addr=0x7}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x7fffffff, @local, 0x200}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x3}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000003440)={0x0, 0x7, 0x9, 0x4}, &(0x7f0000003480)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3}, &(0x7f0000003580)=0x90) sendmmsg$inet_sctp(r2, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, &(0x7f0000003a80), 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796d9aa16b5d61608fb97743587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8855c2756c35842937b580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r4, 0x80000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:30 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000001540)='/dev/input/mouse#\x00', 0x7, 0x400500) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000001580)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/205, 0xcd}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/37, 0x25}], 0x5, &(0x7f00000013c0)=""/229, 0xe5}, 0x2002) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000001500)=0x5, 0x4) 22:48:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:30 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3322.877243] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 22:48:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x9, 0x10010, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = dup(r0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000016c0)={0x8, &(0x7f0000000000)=""/200, &(0x7f0000001600)=[{0x1ff, 0xf1, 0x0, &(0x7f00000001c0)=""/241}, {0xd0, 0xa, 0x0, &(0x7f0000000100)=""/10}, {0x8, 0xe3, 0xffffffff, &(0x7f00000002c0)=""/227}, {0x1, 0x3, 0x6, &(0x7f0000000140)=""/3}, {0x12b, 0x88, 0xffffffffffffff74, &(0x7f00000003c0)=""/136}, {0x100000001, 0x1000, 0x80000000, &(0x7f0000000480)=""/4096}, {0x3, 0xe2, 0x200000000000, &(0x7f0000001480)=""/226}, {0x7, 0x72, 0x2, &(0x7f0000001580)=""/114}]}) [ 3322.956071] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3322.976124] CPU: 1 PID: 3135 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3322.983436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3322.992797] Call Trace: [ 3322.995408] dump_stack+0x244/0x39d [ 3322.999059] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3323.004269] ? mark_held_locks+0x130/0x130 [ 3323.008523] ? mark_held_locks+0x130/0x130 [ 3323.012786] dump_header+0x27b/0xf72 [ 3323.016534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3323.022094] ? check_preemption_disabled+0x48/0x280 [ 3323.027158] ? pagefault_out_of_memory+0x197/0x197 [ 3323.032106] ? debug_smp_processor_id+0x1c/0x20 [ 3323.036796] ? perf_trace_lock+0x14d/0x7a0 [ 3323.041082] ? lock_is_held_type+0x210/0x210 [ 3323.045512] ? __lock_is_held+0xb5/0x140 [ 3323.049630] ? debug_smp_processor_id+0x1c/0x20 [ 3323.054333] ? perf_trace_lock+0x14d/0x7a0 [ 3323.058632] ? zap_class+0x640/0x640 [ 3323.062363] ? print_usage_bug+0xc0/0xc0 [ 3323.066439] ? lock_is_held_type+0x210/0x210 [ 3323.070872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3323.076432] ? find_held_lock+0x36/0x1c0 [ 3323.080519] ? mark_held_locks+0xc7/0x130 [ 3323.084687] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3323.089802] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3323.094921] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3323.099524] ? trace_hardirqs_on+0xbd/0x310 [ 3323.103960] ? kasan_check_read+0x11/0x20 [ 3323.108136] ? ___ratelimit+0x3b4/0x672 [ 3323.112138] ? trace_hardirqs_off_caller+0x310/0x310 [ 3323.117259] ? trace_hardirqs_on+0x310/0x310 [ 3323.121695] ? lock_downgrade+0x900/0x900 [ 3323.125868] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3323.130991] ? ___ratelimit+0x3b9/0x672 [ 3323.134987] ? idr_get_free+0xf70/0xf70 [ 3323.138980] ? _raw_spin_unlock_irq+0x27/0x80 [ 3323.143508] ? _raw_spin_unlock_irq+0x27/0x80 [ 3323.148032] oom_kill_process.cold.27+0x10/0x903 [ 3323.152825] ? _raw_spin_unlock_irq+0x27/0x80 [ 3323.157344] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3323.161949] ? oom_evaluate_task+0x540/0x540 [ 3323.166373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3323.172040] ? cgroup_procs_next+0x70/0x70 [ 3323.176296] ? _raw_spin_unlock_irq+0x60/0x80 [ 3323.180811] ? oom_badness+0xaa0/0xaa0 [ 3323.184712] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3323.189492] ? mem_cgroup_iter_break+0x30/0x30 [ 3323.194105] ? mark_held_locks+0xc7/0x130 [ 3323.198276] out_of_memory+0xa84/0x1430 [ 3323.202273] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3323.206878] ? kasan_check_read+0x11/0x20 [ 3323.211085] ? oom_killer_disable+0x3a0/0x3a0 [ 3323.215636] mem_cgroup_out_of_memory+0x15e/0x210 [ 3323.220501] ? memory_oom_group_write+0x160/0x160 [ 3323.225359] ? mem_cgroup_try_charge+0x627/0xe20 [ 3323.230145] ? page_counter_try_charge+0x1c1/0x220 [ 3323.235092] try_charge+0xda9/0x1700 [ 3323.238821] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3323.243774] ? kasan_check_read+0x11/0x20 [ 3323.247942] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3323.252641] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3323.258199] ? lock_page_memcg+0x350/0x350 [ 3323.262477] ? lock_acquire+0x1ed/0x520 [ 3323.266468] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3323.271849] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3323.277402] ? check_preemption_disabled+0x48/0x280 [ 3323.282448] ? kasan_check_read+0x11/0x20 [ 3323.286609] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3323.291897] ? rcu_softirq_qs+0x20/0x20 [ 3323.295901] mem_cgroup_try_charge+0x627/0xe20 [ 3323.300509] ? mem_cgroup_protected+0xa60/0xa60 [ 3323.305207] ? __lock_acquire+0x62f/0x4c20 [ 3323.309459] ? update_load_avg+0x2470/0x2470 [ 3323.313887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3323.319451] ? mark_held_locks+0x130/0x130 [ 3323.323700] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3323.329261] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 3323.334216] wp_page_copy+0x520/0x2500 [ 3323.338124] ? print_usage_bug+0xc0/0xc0 [ 3323.342227] ? follow_pfn+0x2e0/0x2e0 [ 3323.346051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3323.351603] ? reuse_swap_page+0x4bd/0x1520 [ 3323.355955] ? swp_swapcount+0x530/0x530 [ 3323.360035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3323.365607] ? check_preemption_disabled+0x48/0x280 [ 3323.370633] ? __lock_acquire+0x62f/0x4c20 [ 3323.374886] ? debug_smp_processor_id+0x1c/0x20 [ 3323.379606] ? perf_trace_lock+0x14d/0x7a0 [ 3323.383866] ? lock_is_held_type+0x210/0x210 [ 3323.388299] ? debug_smp_processor_id+0x1c/0x20 [ 3323.393000] ? perf_trace_lock+0x14d/0x7a0 [ 3323.397247] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3323.402365] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3323.407509] ? zap_class+0x640/0x640 [ 3323.411239] ? check_preemption_disabled+0x48/0x280 [ 3323.416354] ? debug_smp_processor_id+0x1c/0x20 [ 3323.421052] ? find_held_lock+0x36/0x1c0 [ 3323.425138] ? do_wp_page+0x518/0x2920 [ 3323.429041] ? lock_downgrade+0x900/0x900 [ 3323.433205] ? wake_up_page_bit+0x6f0/0x6f0 [ 3323.437554] ? kasan_check_read+0x11/0x20 [ 3323.441717] ? do_raw_spin_unlock+0xa7/0x330 [ 3323.446148] ? do_raw_spin_trylock+0x270/0x270 [ 3323.450757] ? __pte_alloc_kernel+0x220/0x220 [ 3323.455273] ? check_preemption_disabled+0x48/0x280 [ 3323.460324] do_wp_page+0x520/0x2920 [ 3323.464061] ? finish_mkwrite_fault+0x650/0x650 [ 3323.468771] ? print_usage_bug+0xc0/0xc0 [ 3323.472852] ? __lock_acquire+0x62f/0x4c20 [ 3323.477112] ? __lock_acquire+0x62f/0x4c20 [ 3323.481383] ? mark_held_locks+0x130/0x130 [ 3323.485643] ? debug_smp_processor_id+0x1c/0x20 [ 3323.490342] ? mark_held_locks+0x130/0x130 [ 3323.494596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3323.500151] ? check_preemption_disabled+0x48/0x280 [ 3323.505192] ? debug_smp_processor_id+0x1c/0x20 [ 3323.509884] ? perf_trace_lock+0x14d/0x7a0 [ 3323.514134] ? check_preemption_disabled+0x48/0x280 [ 3323.519164] ? print_usage_bug+0xc0/0xc0 [ 3323.523274] ? print_usage_bug+0xc0/0xc0 [ 3323.527359] ? debug_smp_processor_id+0x1c/0x20 [ 3323.532052] ? perf_trace_lock+0x14d/0x7a0 [ 3323.536309] ? print_usage_bug+0xc0/0xc0 [ 3323.540389] ? zap_class+0x640/0x640 [ 3323.544145] ? __lock_acquire+0x62f/0x4c20 [ 3323.548452] ? lock_acquire+0x1ed/0x520 [ 3323.552504] ? __handle_mm_fault+0x1fac/0x5be0 [ 3323.557110] ? kasan_check_read+0x11/0x20 [ 3323.561275] ? do_raw_spin_lock+0x14f/0x350 [ 3323.565620] ? rwlock_bug.part.2+0x90/0x90 [ 3323.569910] __handle_mm_fault+0x3bef/0x5be0 [ 3323.574348] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3323.579243] ? lock_is_held_type+0x210/0x210 [ 3323.583675] ? debug_smp_processor_id+0x1c/0x20 [ 3323.588363] ? perf_trace_lock+0x14d/0x7a0 [ 3323.592628] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3323.598195] ? zap_class+0x640/0x640 [ 3323.601924] ? zap_class+0x640/0x640 [ 3323.605670] ? find_held_lock+0x36/0x1c0 [ 3323.609766] ? handle_mm_fault+0x42a/0xc70 [ 3323.614035] ? lock_downgrade+0x900/0x900 [ 3323.618215] ? check_preemption_disabled+0x48/0x280 [ 3323.623246] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3323.628187] ? kasan_check_read+0x11/0x20 [ 3323.632351] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3323.637643] ? rcu_softirq_qs+0x20/0x20 [ 3323.641634] ? trace_hardirqs_off_caller+0x310/0x310 [ 3323.646809] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3323.652366] ? check_preemption_disabled+0x48/0x280 [ 3323.657413] handle_mm_fault+0x54f/0xc70 [ 3323.661499] ? __handle_mm_fault+0x5be0/0x5be0 [ 3323.666106] ? find_vma+0x34/0x190 [ 3323.669674] __do_page_fault+0x5e8/0xe60 [ 3323.673767] do_page_fault+0xf2/0x7e0 [ 3323.677605] ? vmalloc_sync_all+0x30/0x30 [ 3323.681777] ? error_entry+0x70/0xd0 [ 3323.685513] ? trace_hardirqs_off_caller+0xbb/0x310 [ 3323.690633] ? trace_hardirqs_on_caller+0xc0/0x310 [ 3323.695579] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3323.700537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3323.705391] ? trace_hardirqs_on_caller+0x310/0x310 [ 3323.710421] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 3323.716437] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3323.721474] ? page_fault+0x8/0x30 [ 3323.725036] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3323.729900] ? page_fault+0x8/0x30 [ 3323.733465] page_fault+0x1e/0x30 [ 3323.736963] RIP: 0033:0x40a3b4 [ 3323.740171] Code: 3d 10 dd 2f 00 00 48 89 ea 48 89 de 4c 89 f7 0f 85 e1 00 00 00 e8 5c 26 00 00 8b 05 56 dc 31 00 48 8b 15 7f 5c 63 00 83 c0 01 <89> 05 46 dc 31 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f 22:48:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1012c0, 0x40) getpeername$inet6(r1, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x9effffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3323.745140] validate_nla: 8 callbacks suppressed [ 3323.745152] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3323.759088] RSP: 002b:0000000000a3fb90 EFLAGS: 00010202 [ 3323.759102] RAX: 0000000000000001 RBX: 0000001b2bf20014 RCX: 0000001b2cf20000 [ 3323.759112] RDX: 0000001b2bf20000 RSI: 0000000000001d15 RDI: ffffffff81567d15 [ 3323.759122] RBP: 0000001b2bf20018 R08: 0000000081567d15 R09: 0000000081567d19 [ 3323.759132] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 0000001b2bf2001c [ 3323.759142] R13: 000000000032b3ec R14: 000000000072bf00 R15: 000000000072bf0c [ 3323.759176] ? get_nohz_timer_target+0x655/0x780 [ 3323.791382] Task in /syz0 killed as a result of limit of /syz0 [ 3323.838306] memory: usage 307200kB, limit 307200kB, failcnt 1007427 [ 3323.848012] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3323.866565] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3323.873049] Memory cgroup stats for /syz0: cache:200KB rss:137744KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:137812KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3323.896060] Memory cgroup out of memory: Kill process 2862 (syz-executor0) score 1106 or sacrifice child [ 3323.906009] Killed process 2862 (syz-executor0) total-vm:70604kB, anon-rss:2220kB, file-rss:33556kB, shmem-rss:0kB 22:48:31 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') fsync(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x8803, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x8, 0x7d7f5f73, 0x1, @discrete={0x7fff, 0x5c1}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x28) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x7, 0x3}, 0x8) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f00000001c0)={0x3, 0x7f}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@known='system.sockprotoname\x00', &(0x7f0000000140)='$\x00', 0x2, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:31 executing program 1: get_mempolicy(0x0, 0x0, 0x80000000, &(0x7f0000ffa000/0x4000)=nil, 0x6) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80, 0x101400) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x4, 0x3, 0x2, 0x3}}, 0x26) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3, &(0x7f0000ffa000/0x1000)=nil, 0x4) ioperm(0x1, 0x300000000000000, 0x9) 22:48:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x5a9540, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002600)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002700)=0xe8) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) fcntl$addseals(r0, 0x409, 0x8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000002740)={@mcast1, r2}, 0x14) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 22:48:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x3f, 0x401}]}) write$UHID_CREATE(r3, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000140), 0x0, 0xa127, 0x18000000000, 0x0, 0x7fffffff, 0x3ff}, 0x120) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 22:48:31 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3323.909117] oom_reaper: reaped process 2862 (syz-executor0), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 3323.994865] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10002, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="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"]) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000140)=0x67) 22:48:31 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x4, 0x400}, &(0x7f0000000080)=0x14) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/167, 0xa7}, {&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x3) pread64(r0, &(0x7f0000000440)=""/180, 0xb4, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x80000001, 0x2, 0x1000, 0xab, 0x3}, &(0x7f0000000400)=0x14) 22:48:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) [ 3324.039016] Unknown ioctl 9219 [ 3324.042700] Unknown ioctl 21531 [ 3324.048036] Unknown ioctl 9219 [ 3324.051878] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3324.063788] Unknown ioctl 21531 22:48:31 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x200, 0xffffffff, 0x5, 0x4, 0x0, 0xffffffff, 0x20, 0x4, 0x81, 0x10000, 0x1, 0xffffffffffffffff, 0x80000001, 0x5, 0x74, 0x4, 0xff, 0x2a546371, 0x7e, 0x5, 0x8, 0x3ff, 0x5, 0x3, 0x1ff, 0x26, 0x2, 0x81, 0x68, 0x8, 0xfff, 0x2, 0x9, 0x8, 0x1, 0x3, 0x0, 0x5, 0x0, @perf_config_ext={0x10001}, 0x280, 0x2, 0xb9ad, 0x5, 0x2, 0x8, 0xec}, r1, 0xd, 0xffffffffffffffff, 0x2) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x4, 0x80000000, "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", 0x32, 0x9, 0x400, 0x8, 0x9, 0x6, 0x8000, 0x1}, r3}}, 0x120) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0x9, 0x5, 0x5, 0x5}, {0x9, 0x1, 0x9, 0x9}, {0x1000, 0x3f, 0xa5d, 0x25}, {0x80000001, 0x3, 0x5, 0x9}, {0xffff, 0x0, 0x1, 0x3}, {0x24f9, 0x1f, 0x200, 0x7f}]}, 0x10) 22:48:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x14, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000180)={0x19980330, r2}, &(0x7f00000001c0)={0x10001, 0xbc, 0x1, 0x4, 0x80000000, 0x3}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000100)={0x19980330, r3}, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff, 0x26f, 0x200, 0x99}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) [ 3324.201764] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3324.248603] Unknown ioctl -1062710494 [ 3324.282878] Unknown ioctl -1062710494 22:48:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000220000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:31 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x7f, 0x7, 0x7, 0x4, 0x0, 0x2, 0x7}) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3324.332335] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3324.421660] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:32 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x70ba, 0xffffffffffffffff}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x2) 22:48:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x4, 0x4}}, 0x14) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xf9, 0x442000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5b362ea4773b06f1f9da3482291bc2a0", 0x10) 22:48:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="1c1bf2882b79d914689e2df6ffcb1b7438dc6c2c67ef386cedae2de2064d409f88bfceadcba8f998ea3585370c4e816973a23575d4c43a09ac5fa0038d241472ffc3ac9a45faf176d1b42e14cd5f572fe4f140241948b97901ac68d6ed5f7dc3c1f197fa3b8f4b4c6840875f58e3141f685912a715c7330c7b976efa81adeb79a56c013128e64990e34879792c5df279b2f57f684c5fb27b5a984d3310811c10e750055b55b167eee4dfea29d7aeb4217d340940e35d88834c3c2161c6ab658e7006142c39a8a8e3b51b74ae98a114e99574bb9fd6cc895db7dbbd76", 0xdc}, {&(0x7f0000000100)="245d02041f068fab65d0fdd8b7ba860e772f7f671968fa3e1e89d62083406720c7deb4714683e159", 0x28}, {&(0x7f00000001c0)="27b73c7f96bc091962304d734ccbb845d215f71ab401f7386de1033a15dca0a9e7e320923b63900ac96f04f16c033d792c1c99fc1faa66588ef5fafb076096ad0afe3077f35b4adb9b27688f37843f95349d0435b94cb5c827856214fe090d09ca0e5f5104d663c73905de07eef13c175df1105ee63ffee6cd0f98c4c5a59eba11aeceea67c191f7d23400c73729acaaab1e8f852ec3289ea8aa2282e312ed3d9ee1ed64d2548bd55502f47dcf7e57d812ab43a49a0d6f18c11c0919f3a66d7c8d94ccf4702dc0f60c54a4629630165bb43edd53657a39b5b45642e1f8e0f0e4e9c86b8345b19efba1d9f0a08bfba01fd6ed0107522c2cfd1fa929fbf7", 0xfd}, {&(0x7f00000002c0)="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", 0x1000}], 0x4, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vsock\x00', 0x80000, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) 22:48:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:32 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3324.971339] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3325.001332] Unknown ioctl 28688 22:48:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x10}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) mq_unlink(&(0x7f0000000000)='em1em0&$\x00') r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001380)={0x64, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000280)=[0x48, 0x68, 0x48, 0x28, 0x30, 0x78, 0x20]}, 0xa4b}}, @exit_looper, @increfs_done={0x40106308, r2, 0x2}], 0x1000, 0x0, &(0x7f0000000380)="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"}) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x7fffffff, 0x9}]}, 0xc, 0x3) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8080, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000080)={{0x58d0, 0xc777, 0x67, 0x7c, 0x20, 0x5}, 0xfffffffffffff1c3, 0x0, 0x80000000000000, 0x401, 0x3, "f8b9d3abeb6c308b80b6a200df76151dc16b835143cacd41d627df5ca6d68702400ba9c942eef54e3c2cb71267ab2933c3e0222e00558f1843c5c2e34f48142bf7ebd8b7aa2ff68977d6f16c98416c5b54b25f98f5bd4eae27672fa6ce4bff1ff8af4fa9167df552e65783e7480d19ab394104a5f15a37af20474fd3fcc85db7"}) 22:48:32 executing program 1: get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x2) 22:48:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) r2 = dup2(r1, r1) ioctl$TIOCSTI(r2, 0x5412, 0x3ff) 22:48:32 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3325.090395] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x9) pipe(&(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x400400) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x30000) 22:48:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="ea082bb504cf374d", 0x8}], 0x1, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000280)=""/246) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$EVIOCGREP(r3, 0x4010744d, &(0x7f0000001000)=""/174) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:32 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x200) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ftruncate(r0, 0x7) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x2, 0x4) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) 22:48:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:32 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, &(0x7f0000000100)=0x4) write$FUSE_POLL(r0, &(0x7f0000000140)={0x18, 0x0, 0x3, {0x1}}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0x6, 0xfffffffffffffffd, 0x3, 0x7, 0x7, 0x4, 0x10001, {r1, @in={{0x2, 0x4e20, @broadcast}}, 0x4, 0x2, 0x5, 0x3, 0xffff}}, &(0x7f0000000240)=0xb0) accept$alg(r0, 0x0, 0x0) 22:48:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 22:48:32 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x803) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000300)=0x8) socket$inet(0x2, 0x807, 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0xffffffff00000000, 0x6, 0xffffffffffffffe3, 0x7e, r1}, &(0x7f0000000380)=0x10) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x1, 0x5, 0x3ff}, 0x10) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040)) 22:48:32 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3325.296574] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3325.383775] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 22:48:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x842, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x8, "2e7a77193d611900b1ab2b4e88ee3043fdf8ce40d323df4c51e7dfe4210726c8", 0x2, 0x1}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x400}], 0x1, &(0x7f00000000c0)={r1, r2+30000000}, &(0x7f0000000100)={0x6}, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3325.442401] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3325.447580] CPU: 0 PID: 3356 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3325.454859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3325.464221] Call Trace: [ 3325.466838] dump_stack+0x244/0x39d [ 3325.470488] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3325.475707] dump_header+0x27b/0xf72 [ 3325.479443] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.484999] ? check_preemption_disabled+0x48/0x280 [ 3325.490029] ? pagefault_out_of_memory+0x197/0x197 [ 3325.494982] ? debug_smp_processor_id+0x1c/0x20 [ 3325.499667] ? perf_trace_lock+0x14d/0x7a0 [ 3325.503926] ? lock_is_held_type+0x210/0x210 [ 3325.508350] ? __lock_is_held+0xb5/0x140 [ 3325.512432] ? debug_smp_processor_id+0x1c/0x20 [ 3325.517119] ? perf_trace_lock+0x14d/0x7a0 [ 3325.521374] ? zap_class+0x640/0x640 [ 3325.525109] ? print_usage_bug+0xc0/0xc0 [ 3325.529187] ? lock_is_held_type+0x210/0x210 [ 3325.530303] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3325.533616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.533639] ? find_held_lock+0x36/0x1c0 [ 3325.533666] ? mark_held_locks+0xc7/0x130 [ 3325.533686] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3325.533705] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3325.565163] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3325.569777] ? trace_hardirqs_on+0xbd/0x310 [ 3325.574136] ? kasan_check_read+0x11/0x20 [ 3325.578324] ? ___ratelimit+0x3b4/0x672 [ 3325.582758] ? trace_hardirqs_off_caller+0x310/0x310 [ 3325.587884] ? trace_hardirqs_on+0x310/0x310 22:48:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3f00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3325.592311] ? lock_downgrade+0x900/0x900 [ 3325.596482] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3325.601598] ? ___ratelimit+0x3b9/0x672 [ 3325.605591] ? idr_get_free+0xf70/0xf70 [ 3325.609587] ? _raw_spin_unlock_irq+0x27/0x80 [ 3325.614113] ? _raw_spin_unlock_irq+0x27/0x80 [ 3325.618638] oom_kill_process.cold.27+0x10/0x903 [ 3325.623410] ? _raw_spin_unlock_irq+0x27/0x80 [ 3325.627927] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3325.632536] ? oom_evaluate_task+0x540/0x540 [ 3325.636961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.642518] ? cgroup_procs_next+0x70/0x70 [ 3325.646785] ? _raw_spin_unlock_irq+0x60/0x80 [ 3325.651291] ? oom_badness+0xaa0/0xaa0 [ 3325.651315] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3325.651332] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3325.651369] ? mem_cgroup_iter_break+0x30/0x30 [ 3325.651401] ? cgroup_file_notify+0x226/0x2f0 [ 3325.651420] out_of_memory+0xa84/0x1430 [ 3325.651435] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3325.651468] ? kasan_check_read+0x11/0x20 [ 3325.687475] ? oom_killer_disable+0x3a0/0x3a0 [ 3325.692013] mem_cgroup_out_of_memory+0x15e/0x210 [ 3325.696882] ? memory_oom_group_write+0x160/0x160 [ 3325.701738] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3325.706614] ? page_counter_try_charge+0x1c1/0x220 [ 3325.711562] try_charge+0xda9/0x1700 [ 3325.715520] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3325.720210] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3325.725158] ? kasan_check_read+0x11/0x20 [ 3325.729335] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3325.734628] ? rcu_softirq_qs+0x20/0x20 [ 3325.738631] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3325.744185] ? __kernel_text_address+0xd/0x40 [ 3325.748696] ? lock_page_memcg+0x350/0x350 [ 3325.752973] ? lock_acquire+0x1ed/0x520 [ 3325.756964] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3325.762350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.767910] ? check_preemption_disabled+0x48/0x280 [ 3325.773067] memcg_kmem_charge_memcg+0x7c/0x120 [ 3325.777763] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3325.782279] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3325.787673] memcg_kmem_charge+0x149/0x350 22:48:33 executing program 1: [ 3325.791932] __alloc_pages_nodemask+0x75e/0xea0 [ 3325.796624] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3325.801924] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3325.806959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.812516] ? check_preemption_disabled+0x48/0x280 [ 3325.817557] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3325.823112] ? rcu_pm_notify+0xc0/0xc0 [ 3325.827028] ? copy_process+0x2026/0x87a0 [ 3325.831200] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3325.836234] ? kmem_cache_alloc_node+0x349/0x730 [ 3325.841009] ? check_preemption_disabled+0x48/0x280 [ 3325.846049] copy_process+0xa09/0x87a0 [ 3325.849973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.855535] ? __lock_acquire+0x62f/0x4c20 [ 3325.859799] ? find_held_lock+0x36/0x1c0 [ 3325.863899] ? __cleanup_sighand+0x70/0x70 [ 3325.868155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.873721] ? print_usage_bug+0xc0/0xc0 [ 3325.877807] ? debug_smp_processor_id+0x1c/0x20 [ 3325.882508] ? perf_trace_lock+0x14d/0x7a0 [ 3325.886775] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3325.891903] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3325.897023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.902576] ? check_preemption_disabled+0x48/0x280 [ 3325.907612] ? debug_smp_processor_id+0x1c/0x20 [ 3325.912336] ? __lock_acquire+0x62f/0x4c20 [ 3325.916592] ? lock_is_held_type+0x210/0x210 [ 3325.921037] ? mark_held_locks+0x130/0x130 [ 3325.925289] ? print_usage_bug+0xc0/0xc0 [ 3325.929384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.934937] ? check_preemption_disabled+0x48/0x280 [ 3325.939985] ? print_usage_bug+0xc0/0xc0 [ 3325.944064] ? __lock_acquire+0x62f/0x4c20 [ 3325.948320] ? lock_is_held_type+0x210/0x210 [ 3325.952768] ? print_usage_bug+0xc0/0xc0 [ 3325.956848] ? __lock_acquire+0x62f/0x4c20 [ 3325.961111] ? print_usage_bug+0xc0/0xc0 [ 3325.965222] ? __lock_acquire+0x62f/0x4c20 [ 3325.969505] ? mark_held_locks+0x130/0x130 [ 3325.973821] ? debug_smp_processor_id+0x1c/0x20 [ 3325.978520] ? mark_held_locks+0x130/0x130 [ 3325.982787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.988360] ? check_preemption_disabled+0x48/0x280 [ 3325.993397] ? debug_smp_processor_id+0x1c/0x20 [ 3325.998086] ? perf_trace_lock+0x14d/0x7a0 [ 3326.002394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3326.007942] ? check_preemption_disabled+0x48/0x280 [ 3326.012983] ? debug_smp_processor_id+0x1c/0x20 [ 3326.017662] ? perf_trace_lock+0x14d/0x7a0 [ 3326.021917] ? print_usage_bug+0xc0/0xc0 [ 3326.026011] ? zap_class+0x640/0x640 [ 3326.029762] ? delayacct_end+0xc5/0x100 [ 3326.033767] ? zap_class+0x640/0x640 [ 3326.037493] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3326.042630] ? __lock_acquire+0x62f/0x4c20 [ 3326.046892] ? find_held_lock+0x36/0x1c0 [ 3326.050987] ? mark_held_locks+0x130/0x130 [ 3326.055237] ? _raw_spin_unlock_irq+0x27/0x80 [ 3326.059761] ? _raw_spin_unlock_irq+0x27/0x80 [ 3326.064277] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3326.068866] ? trace_hardirqs_on+0xbd/0x310 [ 3326.073187] ? kasan_check_read+0x11/0x20 [ 3326.077358] ? psi_memstall_leave+0x202/0x260 [ 3326.081858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3326.087390] ? check_preemption_disabled+0x48/0x280 [ 3326.092396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3326.097935] ? debug_smp_processor_id+0x1c/0x20 [ 3326.102611] ? perf_trace_lock+0x14d/0x7a0 [ 3326.106856] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3326.112395] ? lock_is_held_type+0x210/0x210 [ 3326.116835] ? zap_class+0x640/0x640 [ 3326.120552] ? cgroup_file_notify+0x226/0x2f0 [ 3326.125058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3326.130610] ? check_preemption_disabled+0x48/0x280 [ 3326.135637] _do_fork+0x1cb/0x11d0 [ 3326.139198] ? fork_idle+0x1d0/0x1d0 [ 3326.142926] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3326.148486] ? syscall_trace_enter+0x68c/0x1260 [ 3326.153203] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3326.158760] ? rcu_softirq_qs+0x20/0x20 [ 3326.162741] ? check_preemption_disabled+0x48/0x280 [ 3326.167782] ? do_syscall_64+0x9a/0x820 [ 3326.171786] ? do_syscall_64+0x9a/0x820 [ 3326.175797] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3326.180388] ? trace_hardirqs_on+0xbd/0x310 [ 3326.184699] ? trace_hardirqs_on+0x310/0x310 [ 3326.189109] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3326.194479] ? trace_hardirqs_off_caller+0x310/0x310 [ 3326.199598] __x64_sys_clone+0xbf/0x150 [ 3326.203592] do_syscall_64+0x1b9/0x820 [ 3326.207498] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3326.212877] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3326.217845] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3326.222698] ? trace_hardirqs_on_caller+0x310/0x310 [ 3326.227710] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3326.232722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3326.237596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3326.242807] RIP: 0033:0x45a039 [ 3326.246004] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3326.264903] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3326.272627] RAX: ffffffffffffffda RBX: 00007f01054eb700 RCX: 000000000045a039 [ 3326.279901] RDX: 00007f01054eb9d0 RSI: 00007f01054eadb0 RDI: 00000000003d0f00 [ 3326.287166] RBP: 0000000000a3fcd0 R08: 00007f01054eb700 R09: 00007f01054eb700 [ 3326.294444] R10: 00007f01054eb9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3326.301713] R13: 0000000000a3fb7f R14: 00007f01054eb9c0 R15: 000000000072bfac [ 3326.310444] Task in /syz0 killed as a result of limit of /syz0 [ 3326.316482] memory: usage 307108kB, limit 307200kB, failcnt 1007459 [ 3326.323103] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3326.329947] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 22:48:33 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) 22:48:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ioprio_set$pid(0x3, r1, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 22:48:33 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:33 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffffe) 22:48:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3326.336103] Memory cgroup stats for /syz0: cache:200KB rss:138036KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:138164KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3326.357457] Memory cgroup out of memory: Kill process 2884 (syz-executor0) score 1106 or sacrifice child [ 3326.367223] Killed process 2884 (syz-executor0) total-vm:70604kB, anon-rss:2220kB, file-rss:33556kB, shmem-rss:0kB [ 3326.381367] oom_reaper: reaped process 2884 (syz-executor0), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 22:48:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x200000000000202) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000200", @ANYRES16=r2, @ANYBLOB="04042dbd7000fbdbdf251100000064000100080006006468000014000300ffffffff00000000000000000000000008000900340000000800010002000000080002000000000008000200bc000000080004004e2000001400030000000000000000000000ffff0000000008000b00736970000800040005000000080006000080000008000400080000001400020008000b000a0000000800030005000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) [ 3326.443224] IPVS: length: 152 != 8 22:48:33 executing program 1: r0 = memfd_create(&(0x7f0000000000)='system\x00', 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) userfaultfd(0x800) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:33 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) clone(0x0, &(0x7f0000000000)="4773c4f2b8dc7e177932b430c030db245b357a39b871257280410a083bd701d96570fc7c4404bd9b1ceb5168156d959f11e4925714f65d7ecb27e68b8a4be20e66de72e4fd7a0598d85f83b81e443bce2dba873efbf58ba40fcb322976a4aa1f65ca71b10fd18c00e1ea45e46c790a271869f25bf2dc0e71f9a2617c9156f2163cda5e0589d71a610a7acd5ab7bca9cbac4dfd238f0771ecb884bf22a871e69d6c33dce270958d37b23cb2be8ea844e65075", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="eab7dbf004e899d956c64e0b088d0f9bbfffa51bd3a7c847af42dc678fd1290a6de356924da28848c1eb05b5bba812a223dc3d1a201b2108a07ab0c4d9adac689fd79e94059e40c4a014815a615772666af11442f6e03aab94778989e1e0eb265eba7f4bd71a8e9584ea82ccea3f771c8df175375ca971bc64a55e43b5731d95bb071ef2470743cb60a4f6980a92faae5c246ab59b81797c4d19565a2c1cb1a64d68c102f546c31f71b9cc390306f96fbd01fd68763cec7bf22a7097d917118a180b2ba4ea953c14e152fa2f") 22:48:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x9effffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fbf8017ed451925e56ba1b2f502d873a3ad9619a55651b87e82fee5419922ee48b40ee896a2afc9b27c01dd4c9320ddfb770fd07d91295ef49bbf934a1a948e4a94d7bf592d4ec9687f526da15a1ec93b3eae773f7c1fae69a9edddc741a12353718f71132401472db1dcc42ba38f087420f551bd47e9a8f9a0c2e7dbd5c8c73e64d8c30ac4d6fb5799c4f7be94bf0a33a2fb64f9c95f1cf8f41766c58416777e8923b93567c64ae34b3d2f0cc0f1ee7fe50d80d29a4a69f066d383ece1411eb688a7c591febd5f88f0c8db84b2fe1b24787130796b5382cd4869b5a32ec3a6c59620932a62322fe0532b24ba13c64ac0dc50000000000"], 0xf8, 0x1) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:34 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000280)='syz1\x00') r3 = semget(0x3, 0x4, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) semctl$IPC_INFO(r3, 0x0, 0x3, &(0x7f0000000340)=""/126) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7fff, 0x9, 0xfff, 0x7, 0x9, 0x5, 0x4}, &(0x7f0000000080)={0x1000, 0xfa, 0x2, 0x1000, 0x1000, 0x4, 0x6, 0x13}, &(0x7f00000000c0)={0x5808, 0x3495, 0x101, 0x4, 0x0, 0x4, 0x10001}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={0x1}, 0x8}) write$P9_RWSTAT(r2, &(0x7f0000000540)={0x7, 0x7f, 0x1}, 0x7) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3ae, 0x400) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000200)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)={0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f00000004c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vcan0\x00', r6}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000005c0)) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000002c0)={r5, 0x39}) 22:48:34 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40000000000040) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x400000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) 22:48:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x16, &(0x7f0000000000)='$vboxnet1vboxnet1bdev\x00', 0xffffffffffffffff}, 0x30) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=r1, 0x4) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) readv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/33, 0x21}], 0x4) 22:48:34 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:34 executing program 4: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xf5, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'bcsh0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r2, &(0x7f0000000000)="1da8fad48c4001802775b30c2321c66038d6d169cff68c126a6287ec74677e541662fabc81b912dcb7e8ee13c5190fb2eec9436533eb030ac126215e12522a8224e65e7fe6d570b237d0d1189e52c88b0b1c554fc813f5d3adb2da4b5fb4b5d9c60dc0c6d71def065320e9896aa67d4b18805d7d722db85f49cd4ba30e7b0f007eec3bf7fde93abead91c18231457b0669efbefcb37dd42edc46029c2812eec4d13b115154964d9a39dfc3ecdc2278e3960366da", 0xb4) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000440)={0x7fffffff, 0x3, 0x401}) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x100, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) fsetxattr$security_evm(r2, &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "95dd13fb5989e6c812cc405e42601106"}, 0x11, 0x1) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000600)={&(0x7f0000000480), 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0xf740ecad374064ed, 0x200, 0x5, {r5, r6/1000+10000}, {r7, r8/1000+10000}, {0x2, 0x3, 0xfffffffffffffe68, 0x3}, 0x1, @can={{0x1, 0x3, 0x6, 0xff}, 0x7, 0x1, 0x0, 0x0, "ac5262fbc7b862c7"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000180)={0x3a, @multicast1, 0x4e23, 0x3, 'lblc\x00', 0x9, 0x200, 0xd}, 0x2c) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[0x8, 0x7, 0x7ff, 0x4, 0x401]}) getpeername$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) bind$packet(r3, &(0x7f0000000340)={0x11, 0xf7, r9, 0x1, 0x2}, 0x14) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) write$P9_RWALK(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1600225455b3b5063a08c261edc5000000ff59f700"], 0x16) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000140)="99586637eb07aa5d448f89926595277b", 0x10) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:34 executing program 1: get_mempolicy(0x0, 0x0, 0xd4d4, &(0x7f0000ffd000/0x2000)=nil, 0x2) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) 22:48:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x511402, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x85) geteuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x80000c) 22:48:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x68}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:34 executing program 1: get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000ff9000/0x2000)=nil, 0x7) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x3fffd, 0x0) mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x80012, r0, 0x0) 22:48:34 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x40000}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:34 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x10001, 0x8000) timer_create(0x7, &(0x7f0000000140)={0x0, 0x6, 0x2, @thr={&(0x7f0000000080)="404805cf86dfbc8c83857d3b2a4e65a7592cb68edb605ab6f25be5463dc0edf84be24850586990eb9311460d31b303dcb4e9223a66b4a6447ae703d26d71087a01d06bf44e6887f1138ff3198739ce38590bb72029c9175f301fb29064388363942c87daf88795830f40039d9bb3d62b72bfb4d14514c4f4849173a262ba76804a3423704406ebb755ce19a75dcb839e21c2b0116a152d8e0d44a109a79265c340463eb3d111af55277e16de", &(0x7f00000001c0)="977e5d15504119427db709bf1958cbc9ecf83dc66f40611f6f55cb190635e1a7d8fb6de36261a75ecbd87aa4d374974867f843dc559830f7dc7793261a0ef2d7514d9ca81506e412d0a10b47769f149608c53e5b0aa3a465e10714c5d106b644f52a2c83fccd6f1a7b3a1547ff6d6fca6c1049eab24259348892395d826e4fafb1ca87f499a4efb72b2473d433e9532be672b750fd606af3de3f1b602373841a55a0232ca7564f7f2f0e549ad937f450a7ff93c40998f6ebe0226005947a3d3ed290eba07b4c6c148ca037eba6344b928e101b3fe3127c"}}, &(0x7f00000002c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3327.197637] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 3327.209837] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3327.215395] CPU: 1 PID: 3494 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3327.222691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3327.232045] Call Trace: [ 3327.234698] dump_stack+0x244/0x39d [ 3327.238338] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3327.243539] ? mark_held_locks+0x130/0x130 [ 3327.247771] ? mark_held_locks+0x130/0x130 [ 3327.252010] dump_header+0x27b/0xf72 [ 3327.255727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.261266] ? check_preemption_disabled+0x48/0x280 [ 3327.266272] ? pagefault_out_of_memory+0x197/0x197 [ 3327.271200] ? debug_smp_processor_id+0x1c/0x20 [ 3327.275859] ? perf_trace_lock+0x14d/0x7a0 [ 3327.280093] ? lock_is_held_type+0x210/0x210 [ 3327.284500] ? __lock_is_held+0xb5/0x140 [ 3327.288566] ? debug_smp_processor_id+0x1c/0x20 [ 3327.293225] ? perf_trace_lock+0x14d/0x7a0 [ 3327.297448] ? zap_class+0x640/0x640 [ 3327.301152] ? print_usage_bug+0xc0/0xc0 [ 3327.305210] ? lock_is_held_type+0x210/0x210 [ 3327.309612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.315175] ? find_held_lock+0x36/0x1c0 [ 3327.319251] ? mark_held_locks+0xc7/0x130 [ 3327.323407] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3327.328500] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3327.333593] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3327.338174] ? trace_hardirqs_on+0xbd/0x310 [ 3327.342525] ? kasan_check_read+0x11/0x20 [ 3327.346663] ? ___ratelimit+0x3b4/0x672 [ 3327.350629] ? trace_hardirqs_off_caller+0x310/0x310 [ 3327.355721] ? trace_hardirqs_on+0x310/0x310 [ 3327.360132] ? lock_downgrade+0x900/0x900 [ 3327.364295] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3327.369404] ? ___ratelimit+0x3b9/0x672 [ 3327.373372] ? idr_get_free+0xf70/0xf70 [ 3327.377335] ? _raw_spin_unlock_irq+0x27/0x80 [ 3327.381823] ? _raw_spin_unlock_irq+0x27/0x80 [ 3327.386333] oom_kill_process.cold.27+0x10/0x903 [ 3327.391115] ? _raw_spin_unlock_irq+0x27/0x80 [ 3327.395602] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3327.400181] ? oom_evaluate_task+0x540/0x540 [ 3327.404607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.410138] ? cgroup_procs_next+0x70/0x70 [ 3327.414382] ? _raw_spin_unlock_irq+0x60/0x80 [ 3327.418900] ? oom_badness+0xaa0/0xaa0 [ 3327.422791] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3327.427539] ? mem_cgroup_iter_break+0x30/0x30 [ 3327.432152] ? mark_held_locks+0xc7/0x130 [ 3327.436295] out_of_memory+0xa84/0x1430 [ 3327.440278] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3327.444862] ? kasan_check_read+0x11/0x20 [ 3327.449000] ? oom_killer_disable+0x3a0/0x3a0 [ 3327.453505] mem_cgroup_out_of_memory+0x15e/0x210 [ 3327.458355] ? memory_oom_group_write+0x160/0x160 [ 3327.463203] ? mem_cgroup_try_charge+0x627/0xe20 [ 3327.467954] ? page_counter_try_charge+0x1c1/0x220 [ 3327.472876] try_charge+0xda9/0x1700 [ 3327.476580] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3327.481497] ? kasan_check_read+0x11/0x20 [ 3327.485640] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3327.490300] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3327.495834] ? lock_page_memcg+0x350/0x350 [ 3327.500063] ? lock_acquire+0x1ed/0x520 [ 3327.504032] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3327.509391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.514932] ? check_preemption_disabled+0x48/0x280 [ 3327.519941] ? kasan_check_read+0x11/0x20 [ 3327.524077] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3327.529352] ? rcu_softirq_qs+0x20/0x20 [ 3327.533333] mem_cgroup_try_charge+0x627/0xe20 [ 3327.537910] ? mem_cgroup_protected+0xa60/0xa60 [ 3327.542571] ? update_load_avg+0x2470/0x2470 [ 3327.546976] ? __perf_event_task_sched_out+0x33a/0x1bf0 [ 3327.552339] ? print_usage_bug+0xc0/0xc0 [ 3327.556393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.561923] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3327.567475] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 3327.572412] wp_page_copy+0x520/0x2500 [ 3327.576306] ? __lock_acquire+0x62f/0x4c20 [ 3327.580542] ? follow_pfn+0x2e0/0x2e0 [ 3327.584339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.589867] ? reuse_swap_page+0x4bd/0x1520 [ 3327.594179] ? __lock_acquire+0x62f/0x4c20 [ 3327.598407] ? swp_swapcount+0x530/0x530 [ 3327.602467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.607997] ? check_preemption_disabled+0x48/0x280 [ 3327.613020] ? debug_smp_processor_id+0x1c/0x20 [ 3327.617695] ? perf_trace_lock+0x14d/0x7a0 [ 3327.621920] ? perf_trace_lock+0x14d/0x7a0 [ 3327.626155] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3327.631252] ? lock_is_held_type+0x210/0x210 [ 3327.635651] ? debug_smp_processor_id+0x1c/0x20 [ 3327.640310] ? zap_class+0x640/0x640 [ 3327.644039] ? __lock_acquire+0x62f/0x4c20 [ 3327.648281] ? lock_is_held_type+0x210/0x210 [ 3327.652688] ? find_held_lock+0x36/0x1c0 [ 3327.656770] ? do_wp_page+0x518/0x2920 [ 3327.660661] ? lock_downgrade+0x900/0x900 [ 3327.664828] ? wake_up_page_bit+0x6f0/0x6f0 [ 3327.669165] ? kasan_check_read+0x11/0x20 [ 3327.673330] ? do_raw_spin_unlock+0xa7/0x330 [ 3327.677800] ? do_raw_spin_trylock+0x270/0x270 [ 3327.682400] ? __pte_alloc_kernel+0x220/0x220 [ 3327.686885] ? lock_is_held_type+0x210/0x210 [ 3327.691288] do_wp_page+0x520/0x2920 [ 3327.694995] ? finish_mkwrite_fault+0x650/0x650 [ 3327.699657] ? print_usage_bug+0xc0/0xc0 [ 3327.703713] ? __lock_acquire+0x62f/0x4c20 [ 3327.707945] ? mark_held_locks+0x130/0x130 [ 3327.712169] ? mark_held_locks+0x130/0x130 [ 3327.716395] ? lock_is_held_type+0x210/0x210 [ 3327.720815] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.726353] ? check_preemption_disabled+0x48/0x280 [ 3327.731395] ? debug_smp_processor_id+0x1c/0x20 [ 3327.736067] ? perf_trace_lock+0x14d/0x7a0 [ 3327.740299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3327.745857] ? check_preemption_disabled+0x48/0x280 [ 3327.750875] ? debug_smp_processor_id+0x1c/0x20 [ 3327.755530] ? perf_trace_lock+0x14d/0x7a0 [ 3327.759761] ? print_usage_bug+0xc0/0xc0 [ 3327.763829] ? lock_is_held_type+0x210/0x210 [ 3327.768242] ? print_usage_bug+0xc0/0xc0 [ 3327.772294] ? delayacct_end+0xc5/0x100 [ 3327.776258] ? zap_class+0x640/0x640 [ 3327.779959] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3327.785055] ? __lock_acquire+0x62f/0x4c20 [ 3327.789281] ? lock_acquire+0x1ed/0x520 [ 3327.793262] ? __handle_mm_fault+0x1fac/0x5be0 [ 3327.797854] ? kasan_check_read+0x11/0x20 [ 3327.801989] ? do_raw_spin_lock+0x14f/0x350 [ 3327.806298] ? rwlock_bug.part.2+0x90/0x90 [ 3327.810528] ? kasan_check_read+0x11/0x20 [ 3327.814670] __handle_mm_fault+0x3bef/0x5be0 [ 3327.819072] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3327.823906] ? lock_is_held_type+0x210/0x210 [ 3327.828346] ? zap_class+0x640/0x640 [ 3327.832067] ? zap_class+0x640/0x640 [ 3327.835784] ? trace_hardirqs_on+0xbd/0x310 [ 3327.840095] ? kasan_check_read+0x11/0x20 [ 3327.844250] ? find_held_lock+0x36/0x1c0 [ 3327.848334] ? handle_mm_fault+0x42a/0xc70 [ 3327.852560] ? lock_downgrade+0x900/0x900 [ 3327.856696] ? check_preemption_disabled+0x48/0x280 [ 3327.861701] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3327.866615] ? kasan_check_read+0x11/0x20 [ 3327.870756] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3327.876020] ? rcu_softirq_qs+0x20/0x20 [ 3327.879984] ? trace_hardirqs_off_caller+0x310/0x310 [ 3327.885076] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3327.890602] ? check_preemption_disabled+0x48/0x280 [ 3327.895625] handle_mm_fault+0x54f/0xc70 [ 3327.899689] ? __handle_mm_fault+0x5be0/0x5be0 [ 3327.904261] ? find_vma+0x34/0x190 [ 3327.907792] __do_page_fault+0x5e8/0xe60 [ 3327.911852] do_page_fault+0xf2/0x7e0 [ 3327.915641] ? vmalloc_sync_all+0x30/0x30 [ 3327.919785] ? error_entry+0x70/0xd0 [ 3327.923488] ? trace_hardirqs_off_caller+0xbb/0x310 [ 3327.928507] ? trace_hardirqs_on_caller+0xc0/0x310 [ 3327.933424] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3327.938346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3327.943197] ? trace_hardirqs_on_caller+0x310/0x310 [ 3327.948208] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 3327.953651] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3327.958685] ? page_fault+0x8/0x30 [ 3327.962213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3327.967047] ? page_fault+0x8/0x30 [ 3327.970576] page_fault+0x1e/0x30 [ 3327.974017] RIP: 0033:0x40af42 [ 3327.977200] Code: 60 2c 48 89 58 10 8b 5c 24 54 88 48 20 48 8b 4c 24 58 48 89 2d af 0f 32 00 89 58 24 48 89 48 18 31 c0 48 8b 8c 04 10 01 00 00 <48> 89 8c 02 30 bf 72 00 48 83 c0 08 48 83 f8 48 75 e6 e8 c7 7e ff [ 3327.996087] RSP: 002b:0000000000a3fc00 EFLAGS: 00010297 [ 3328.001441] RAX: 0000000000000030 RBX: 0000000000000002 RCX: 0000000000000000 [ 3328.008695] RDX: 00000000000000a0 RSI: 00007f01054eadb0 RDI: 000000000072bfa8 [ 3328.015976] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 00007f01054eb700 [ 3328.023347] R10: 00007f01054eb9d0 R11: 0000000000000202 R12: 0000000000000003 [ 3328.030707] R13: 0000000000000009 R14: 000000000072bfac R15: 000000000072bfac [ 3328.040282] Task in /syz0 killed as a result of limit of /syz0 22:48:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180), 0x2000017a, &(0x7f0000000200)={r1, r2+30000000}, &(0x7f0000000240)={0x1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x5, 0x6342) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4019}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:35 executing program 1: get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f0000ffb000/0x2000)=nil, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs\x00') write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x2c, 0x4, 0x3}}}, 0x18) 22:48:35 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x400000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote, 0x4e22, 0x1, 'wrr\x00', 0x28, 0x5b, 0x2b}, 0x2c) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3328.046344] memory: usage 307136kB, limit 307200kB, failcnt 1007476 [ 3328.062655] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3328.086837] validate_nla: 5 callbacks suppressed [ 3328.086856] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r3}) 22:48:35 executing program 1: get_mempolicy(0x0, 0x0, 0x81, &(0x7f0000ff8000/0x3000)=nil, 0x0) 22:48:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x600000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3328.098512] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3328.114203] Memory cgroup stats for /syz0: cache:200KB rss:138112KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:138152KB inactive_file:0KB active_file:0KB unevictable:0KB 22:48:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:35 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3328.228738] Memory cgroup out of memory: Kill process 828 (syz-executor0) score 1106 or sacrifice child [ 3328.238739] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3328.257167] Killed process 828 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33556kB, shmem-rss:0kB 22:48:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x60082) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x6, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:35 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x2) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 22:48:35 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x100000001, 0x8a000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={r1, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={r2, 0x0, 0x10001, 0xfffffffffffffff7, 0x8}) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x40) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0xffffffffffffffb8, 0x2, 0x1ff, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000140)={0x51, "c656c65665ae879d9345a84f1aafa22e43c30308057f668481c7ba630ba6ccaef05e9b9dc5f0e52b768019af07c3d02fa2ca14abbac14ea2cf10332e4815ff17e9fe1d6e4951c1a8c90fc8caa6175f82f4"}) capset(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x1f}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40400, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0xdcd6eb3c516781eb) 22:48:35 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3328.398531] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400202) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000280)=0x7) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x3, 0x20040) clock_adjtime(0x0, &(0x7f0000000000)={0x2d, 0xffffffffffff0000, 0xfffffffffffff800, 0x7f, 0xbfd5, 0x7, 0x42, 0x80000000, 0x2, 0x4, 0xc00000000000000, 0x3f, 0x5, 0x7fff, 0x6ad, 0x3ff, 0xe000, 0x9, 0xffffffffffffffc1, 0x6, 0x200, 0x79d1, 0x8, 0xd9, 0xfffffffffffffc00, 0x8fe3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'gre0\x00', r4}) syz_execute_func(&(0x7f00000001c0)="3666460fefbb00000000f2460f2d34f20f2c2ac402452c3ec4c221383d02000000c4810dfbda460fe4b800000100dacb3e2664f30fbd4a0cc4817c285165") setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000200)=0x5, 0x4) 22:48:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @ipv4={[], [], @loopback}}}, 0x8000, 0x5845, 0x1, 0x3e, 0xbcc}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1, 0x2c, "1d2ffc0789858cba85fde704c6ee978d728f9d02534ce7d5c1841262ec81231aaaa5d887ac6f461131aeb70e"}, &(0x7f0000000180)=0x34) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:35 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) prctl$PR_SET_PDEATHSIG(0x1, 0x2c) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1f) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x2d, &(0x7f0000000080)={@multicast2, @multicast1, @remote}, 0xc) 22:48:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:35 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6b7184cc29070b782c7996572feb685632a5c5bb686bf9fc0bd4ef0ef025525b181db52b992a05fef7119149b4290ea36c8be934ce8ce64eccb7b951255409ea689ec864705689baf538e6865b39a43cdeadb638807602d6dda1f77949da3efd9f840a37e95b0dadac125b5847c10dad772ea621bb5451465756340e0c0fe72d833880230522ed8d0f16f8d18f58582e40944cd94c64c4c255d6074547523b3c6508268b8ce74017a06b74dd461a10eee73e72f72ceb00", 0xb7, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000500)='cigs.jpnego\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000540)='posix_acl_accessmime_type\x00', 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="6b7fef317830e6f1a2ed22464bd787fe8388b55654dd94e6aaba2650c5c15b4207b506987a5f1d95498c52f59c9d7607406397cfe562b9e27aad20328f166f7379513c85e68f1a43c8627a47283f8e1bbd6ef87d084dd3237be85d1eedb0ed2b90070ad0243023c0157d6ef0ab5cb2bce53062a00a86dc7c40f1accff6851b41a6aba011678efec820ca048289391f4894f32431a3db4262fd22a8", 0x9b, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/90, 0x5a, &(0x7f00000004c0)={&(0x7f0000000400)={'sha256-generic\x00'}, &(0x7f0000000440)="56440b635fa960733b7cb7d6a09774c611dc964c74557fccd27d260328b1928c07e916297b484addd63acb6d7031b03d5ea6897d67906bf391f9a7e90d287b64a5bb714727b4d64e842812bf6873b76110277fd0", 0x54}) 22:48:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000040)={{0x7, @addr=0x81}, "93dee71dbad0384985b3896acd7d5c297a7299f98af9285bb84760effda245be", 0x1}) 22:48:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3328.588632] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:36 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfffffffffffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000380)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2}) r2 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x0, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000000600)=[@in={0x2, 0x4e23, @rand_addr=0x7}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x7fffffff, @local, 0x200}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x3}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000003440)={0x0, 0x7, 0x9, 0x4}, &(0x7f0000003480)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3}, &(0x7f0000003580)=0x90) sendmmsg$inet_sctp(r2, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, &(0x7f0000003a80), 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796d9aa16b5d61608fb97743587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8855c2756c35842937b580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r4, 0x80000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3328.749887] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:36 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = dup(r0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000000)={0x2, 0x3}, 0x2) 22:48:36 executing program 1: get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffd000/0x3000)=nil, 0x0) 22:48:36 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101080, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xfffffdf5) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@remote, @local, r1}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = semget$private(0x0, 0x4, 0x80) getgroups(0x7, &(0x7f00000001c0)=[0x0, 0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000280)={{0x1, r2, r5, r2, r6, 0x20, 0x5}, 0x6, 0x815, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000300)="39328a43e392e6749b588ec60d2098b7e923b9b1a6dc713da9b334aa452a74549cb8adbaa0731b9f71cb2750f38175b667ef0b50fab24848cbddb9609e9deb4591d759") 22:48:36 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:36 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffffc, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) [ 3328.921360] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:36 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100, 0x80) mmap$binder(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0x0) [ 3328.975737] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3329.015113] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3329.029677] CPU: 1 PID: 3601 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3329.036977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3329.046348] Call Trace: [ 3329.048957] dump_stack+0x244/0x39d [ 3329.052603] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3329.057835] dump_header+0x27b/0xf72 [ 3329.061571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.067127] ? check_preemption_disabled+0x48/0x280 [ 3329.072163] ? pagefault_out_of_memory+0x197/0x197 [ 3329.077107] ? debug_smp_processor_id+0x1c/0x20 [ 3329.081795] ? perf_trace_lock+0x14d/0x7a0 [ 3329.086055] ? lock_is_held_type+0x210/0x210 [ 3329.090481] ? __lock_is_held+0xb5/0x140 [ 3329.094565] ? debug_smp_processor_id+0x1c/0x20 [ 3329.099246] ? perf_trace_lock+0x14d/0x7a0 [ 3329.103499] ? zap_class+0x640/0x640 [ 3329.107228] ? print_usage_bug+0xc0/0xc0 [ 3329.111303] ? lock_is_held_type+0x210/0x210 [ 3329.115737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.121308] ? find_held_lock+0x36/0x1c0 [ 3329.125398] ? mark_held_locks+0xc7/0x130 [ 3329.129566] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3329.134680] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3329.139808] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3329.144405] ? trace_hardirqs_on+0xbd/0x310 [ 3329.148739] ? kasan_check_read+0x11/0x20 [ 3329.152912] ? ___ratelimit+0x3b4/0x672 [ 3329.156910] ? trace_hardirqs_off_caller+0x310/0x310 [ 3329.162031] ? trace_hardirqs_on+0x310/0x310 [ 3329.166454] ? lock_downgrade+0x900/0x900 [ 3329.170622] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3329.175761] ? ___ratelimit+0x3b9/0x672 [ 3329.179775] ? idr_get_free+0xf70/0xf70 [ 3329.183774] ? _raw_spin_unlock_irq+0x27/0x80 [ 3329.188301] ? _raw_spin_unlock_irq+0x27/0x80 [ 3329.192859] oom_kill_process.cold.27+0x10/0x903 [ 3329.197629] ? _raw_spin_unlock_irq+0x27/0x80 [ 3329.202160] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3329.206864] ? oom_evaluate_task+0x540/0x540 [ 3329.211290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.216851] ? cgroup_procs_next+0x70/0x70 [ 3329.221106] ? _raw_spin_unlock_irq+0x60/0x80 [ 3329.225623] ? oom_badness+0xaa0/0xaa0 [ 3329.229524] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3329.234299] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3329.239891] ? mem_cgroup_iter_break+0x30/0x30 [ 3329.244517] ? cgroup_file_notify+0x226/0x2f0 [ 3329.249031] out_of_memory+0xa84/0x1430 [ 3329.253071] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3329.257669] ? kasan_check_read+0x11/0x20 [ 3329.261838] ? oom_killer_disable+0x3a0/0x3a0 [ 3329.266386] mem_cgroup_out_of_memory+0x15e/0x210 [ 3329.271245] ? memory_oom_group_write+0x160/0x160 [ 3329.276098] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3329.280961] ? page_counter_try_charge+0x1c1/0x220 [ 3329.285912] try_charge+0xda9/0x1700 [ 3329.289655] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3329.294343] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3329.299293] ? kasan_check_read+0x11/0x20 [ 3329.303462] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3329.308759] ? rcu_softirq_qs+0x20/0x20 [ 3329.312776] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3329.318339] ? __kernel_text_address+0xd/0x40 [ 3329.322851] ? lock_page_memcg+0x350/0x350 [ 3329.327112] ? lock_acquire+0x1ed/0x520 [ 3329.331106] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3329.336482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.342036] ? check_preemption_disabled+0x48/0x280 [ 3329.347076] memcg_kmem_charge_memcg+0x7c/0x120 [ 3329.351771] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3329.356306] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3329.361702] memcg_kmem_charge+0x149/0x350 [ 3329.365961] __alloc_pages_nodemask+0x75e/0xea0 [ 3329.370649] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3329.375949] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3329.380978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.386530] ? check_preemption_disabled+0x48/0x280 [ 3329.391575] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3329.397127] ? rcu_pm_notify+0xc0/0xc0 [ 3329.401042] ? copy_process+0x2026/0x87a0 [ 3329.405209] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3329.410242] ? kmem_cache_alloc_node+0x349/0x730 [ 3329.415022] copy_process+0xa09/0x87a0 [ 3329.418941] ? __lock_acquire+0x62f/0x4c20 [ 3329.423195] ? __lock_acquire+0x62f/0x4c20 [ 3329.427447] ? debug_smp_processor_id+0x1c/0x20 [ 3329.432128] ? perf_trace_lock+0x14d/0x7a0 [ 3329.436376] ? perf_trace_lock+0x14d/0x7a0 [ 3329.440646] ? __cleanup_sighand+0x70/0x70 [ 3329.444907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.450463] ? print_usage_bug+0xc0/0xc0 [ 3329.454589] ? debug_smp_processor_id+0x1c/0x20 [ 3329.459273] ? perf_trace_lock+0x14d/0x7a0 [ 3329.463528] ? print_usage_bug+0xc0/0xc0 [ 3329.467604] ? perf_trace_lock+0x14d/0x7a0 [ 3329.471860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.477418] ? check_preemption_disabled+0x48/0x280 [ 3329.482458] ? debug_smp_processor_id+0x1c/0x20 [ 3329.487142] ? __lock_acquire+0x62f/0x4c20 [ 3329.491389] ? lock_is_held_type+0x210/0x210 [ 3329.495822] ? mark_held_locks+0x130/0x130 [ 3329.500067] ? print_usage_bug+0xc0/0xc0 [ 3329.504160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.509712] ? check_preemption_disabled+0x48/0x280 [ 3329.514785] ? print_usage_bug+0xc0/0xc0 [ 3329.518864] ? __lock_acquire+0x62f/0x4c20 [ 3329.523123] ? lock_is_held_type+0x210/0x210 [ 3329.527562] ? print_usage_bug+0xc0/0xc0 [ 3329.531643] ? __lock_acquire+0x62f/0x4c20 [ 3329.535903] ? print_usage_bug+0xc0/0xc0 [ 3329.539999] ? __lock_acquire+0x62f/0x4c20 [ 3329.544272] ? mark_held_locks+0x130/0x130 [ 3329.548521] ? debug_smp_processor_id+0x1c/0x20 [ 3329.553210] ? mark_held_locks+0x130/0x130 [ 3329.557461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.563018] ? check_preemption_disabled+0x48/0x280 [ 3329.568058] ? debug_smp_processor_id+0x1c/0x20 [ 3329.572744] ? perf_trace_lock+0x14d/0x7a0 22:48:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x402000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002dbd7000fbdbdf25110000000800040000040000080004000100000008000500030000002400030008000100000000000800050000000000080007004e220000080007004e210000"], 0x50}, 0x1, 0x0, 0x0, 0x20008090}, 0x881) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x12000, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x5, 0x7, 0x0, 0x3, 0x600000, 0x6, 0x3, 0x5, 0x3, 0xfffffffffffffffb, 0x53a0, 0xfffffffffffff801, 0xfffffffffffffff9, 0x1, 0x10, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0xc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x8000, 0x0) [ 3329.577006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.577025] ? check_preemption_disabled+0x48/0x280 [ 3329.577050] ? debug_smp_processor_id+0x1c/0x20 [ 3329.577065] ? perf_trace_lock+0x14d/0x7a0 [ 3329.577087] ? print_usage_bug+0xc0/0xc0 [ 3329.596980] ? zap_class+0x640/0x640 [ 3329.597007] ? delayacct_end+0xc5/0x100 [ 3329.597027] ? zap_class+0x640/0x640 [ 3329.597043] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3329.597074] ? __lock_acquire+0x62f/0x4c20 [ 3329.597095] ? find_held_lock+0x36/0x1c0 [ 3329.597123] ? mark_held_locks+0x130/0x130 [ 3329.630205] ? _raw_spin_unlock_irq+0x27/0x80 [ 3329.634718] ? _raw_spin_unlock_irq+0x27/0x80 [ 3329.639239] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3329.643841] ? trace_hardirqs_on+0xbd/0x310 [ 3329.648190] ? kasan_check_read+0x11/0x20 [ 3329.652363] ? psi_memstall_leave+0x202/0x260 [ 3329.656876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.662434] ? check_preemption_disabled+0x48/0x280 [ 3329.667471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.673091] ? debug_smp_processor_id+0x1c/0x20 [ 3329.677784] ? perf_trace_lock+0x14d/0x7a0 22:48:37 executing program 1: get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) [ 3329.682038] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3329.687593] ? lock_is_held_type+0x210/0x210 [ 3329.692033] ? zap_class+0x640/0x640 [ 3329.695774] ? cgroup_file_notify+0x226/0x2f0 [ 3329.700291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3329.705854] ? check_preemption_disabled+0x48/0x280 [ 3329.710896] _do_fork+0x1cb/0x11d0 [ 3329.714938] ? fork_idle+0x1d0/0x1d0 [ 3329.718693] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3329.724283] ? syscall_trace_enter+0x68c/0x1260 [ 3329.728977] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3329.734532] ? rcu_softirq_qs+0x20/0x20 [ 3329.738538] ? check_preemption_disabled+0x48/0x280 [ 3329.743587] ? do_syscall_64+0x9a/0x820 [ 3329.747573] ? do_syscall_64+0x9a/0x820 [ 3329.751588] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3329.756197] ? trace_hardirqs_on+0xbd/0x310 [ 3329.760538] ? trace_hardirqs_on+0x310/0x310 [ 3329.764964] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3329.770349] ? trace_hardirqs_off_caller+0x310/0x310 [ 3329.775481] __x64_sys_clone+0xbf/0x150 [ 3329.779501] do_syscall_64+0x1b9/0x820 [ 3329.783409] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3329.788906] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3329.793865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3329.798761] ? trace_hardirqs_on_caller+0x310/0x310 [ 3329.803803] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3329.808851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3329.813719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3329.818926] RIP: 0033:0x45a039 [ 3329.822134] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3329.841043] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3329.848774] RAX: ffffffffffffffda RBX: 00007f01054ca700 RCX: 000000000045a039 [ 3329.856067] RDX: 00007f01054ca9d0 RSI: 00007f01054c9db0 RDI: 00000000003d0f00 [ 3329.863351] RBP: 0000000000a3fcd0 R08: 00007f01054ca700 R09: 00007f01054ca700 [ 3329.870631] R10: 00007f01054ca9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3329.877956] R13: 0000000000a3fb7f R14: 00007f01054ca9c0 R15: 000000000072c04c [ 3329.893709] Task in /syz0 killed as a result of limit of /syz0 [ 3329.931883] memory: usage 307180kB, limit 307200kB, failcnt 1007501 [ 3329.941051] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3329.947909] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3329.954523] Memory cgroup stats for /syz0: cache:200KB rss:138024KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:138168KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3329.976053] Memory cgroup out of memory: Kill process 3498 (syz-executor0) score 1106 or sacrifice child [ 3329.986177] Killed process 3498 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33560kB, shmem-rss:0kB 22:48:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:37 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x302, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) 22:48:37 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:37 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) select(0x40, &(0x7f0000000300)={0x8, 0x100000001, 0x8, 0x40, 0x1, 0x7, 0x8, 0x3}, &(0x7f0000000340)={0x6f1, 0x100, 0x8000, 0xfffffffffffffffc, 0x1, 0x7, 0x10000, 0x1000}, &(0x7f0000000380)={0x81, 0x8001, 0x62, 0xffff, 0x0, 0x8, 0x7fff, 0x1}, &(0x7f00000003c0)) mq_getsetattr(r1, &(0x7f0000000280)={0x9, 0x1, 0x6, 0x3, 0x4, 0x5, 0x1, 0x5}, &(0x7f00000002c0)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20100, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x8f, "b2e78a358dd3fd44760d33ed8e94f1a983a969a235d83a71d8591aa5cfd462afd3f8e516cb2cbe01c8d8b65e4b1cf5c3ad358b1ef7498605fe8e05ea63150b094c84379742a375fce85c66140bab0e90d1cc09dd3d824d2f29a0b689d3e299f841064167d5712dffed6c94b0bab5359df0c429af444f146606ed9c34bc7773cc02556da14f2e68878dff0e1bb1b965"}, &(0x7f0000000100)=0x97) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x3, @empty, 0xffffffff}}, 0x5, 0x10001, 0x5, 0x4, 0x2a0f}, &(0x7f0000000140)=0x98) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) 22:48:37 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ceb57c25e5559e0407cb4fccd1ce32fbb0b8700e5bd3b96132088fdec7b720f592251cd3da4f77a81a0b4b0c529bd8bfd82c013f71d5902ee3d0b5eb13c77c35c1e535b1ac4a3f8c78da4f9e3695c88cd0a14c08291b63baa9dfaa7a3bcc41b03578ac8cbb35e0df4ddcd906fbb89d7181f32cbaa1babc5006c6ed1ab26717a7c591ad85fc92e921cf9f89f2098d05c6fe279775dcf262a33be261a19adf481867e9be35343bea342b14c73d9f35700605", 0xb1, 0xfffffffffffffff8) keyctl$setperm(0x5, r0, 0x40000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:tmpreaper_exec_t:s0\x00', 0x26, 0x3) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, r2}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x80010, r1, 0x0) [ 3330.129032] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:37 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) 22:48:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:37 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10800, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x20201) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:37 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x72db, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="abce9b0dd227c3433659088667fcab5de6772c91e478524a8d128dc9af959036ada5f2f923e3deea4b0245ed2109567fe1633c1490248e87cc011311e5a8c5af3521d3898c5d0ab19c3b082baac7876680d2029dbf9919e5895fc7e2f1fde8a9be3c73eee0cfd6adc6", 0x3b}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x5}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000240)={0xa1, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0x2, 0x2, 'client1\x00', 0xffffffff80000000, "6d6f7d02c52db2bc", "b1d778be8014086f4ba007974918d4ee87d98b26bb2ddaddd94b4824ea4e7c35", 0x6, 0x1cf}) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write(r2, &(0x7f0000000380), 0xfffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0x188, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3330.266504] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:37 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x32000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) 22:48:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:37 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80001) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x4, 0x5941}, 0x8) 22:48:37 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3330.385816] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=1000 22:48:37 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3330.467980] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3330.480080] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3330.490386] CPU: 1 PID: 3691 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3330.497680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3330.507040] Call Trace: [ 3330.509649] dump_stack+0x244/0x39d [ 3330.513299] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3330.518520] ? mark_held_locks+0x130/0x130 [ 3330.522783] ? mark_held_locks+0x130/0x130 [ 3330.527041] dump_header+0x27b/0xf72 [ 3330.530793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3330.536355] ? check_preemption_disabled+0x48/0x280 [ 3330.541394] ? pagefault_out_of_memory+0x197/0x197 [ 3330.546351] ? debug_smp_processor_id+0x1c/0x20 [ 3330.551037] ? perf_trace_lock+0x14d/0x7a0 [ 3330.555293] ? lock_is_held_type+0x210/0x210 [ 3330.559726] ? __lock_is_held+0xb5/0x140 [ 3330.563832] ? debug_smp_processor_id+0x1c/0x20 [ 3330.568512] ? perf_trace_lock+0x14d/0x7a0 [ 3330.572788] ? zap_class+0x640/0x640 [ 3330.576525] ? print_usage_bug+0xc0/0xc0 [ 3330.580822] ? lock_is_held_type+0x210/0x210 [ 3330.585255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3330.590815] ? find_held_lock+0x36/0x1c0 [ 3330.594908] ? mark_held_locks+0xc7/0x130 [ 3330.599070] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3330.604197] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3330.609343] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3330.613974] ? trace_hardirqs_on+0xbd/0x310 [ 3330.618326] ? kasan_check_read+0x11/0x20 [ 3330.622489] ? ___ratelimit+0x3b4/0x672 [ 3330.626488] ? trace_hardirqs_off_caller+0x310/0x310 [ 3330.631610] ? trace_hardirqs_on+0x310/0x310 [ 3330.636039] ? lock_downgrade+0x900/0x900 [ 3330.640209] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3330.645342] ? ___ratelimit+0x3b9/0x672 [ 3330.649341] ? idr_get_free+0xf70/0xf70 [ 3330.649356] ? _raw_spin_unlock_irq+0x27/0x80 [ 3330.649371] ? _raw_spin_unlock_irq+0x27/0x80 [ 3330.649399] oom_kill_process.cold.27+0x10/0x903 [ 3330.649417] ? _raw_spin_unlock_irq+0x27/0x80 [ 3330.657901] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3330.676353] ? oom_evaluate_task+0x540/0x540 [ 3330.680799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3330.686362] ? cgroup_procs_next+0x70/0x70 [ 3330.690616] ? _raw_spin_unlock_irq+0x60/0x80 [ 3330.695151] ? oom_badness+0xaa0/0xaa0 [ 3330.699128] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3330.703908] ? mem_cgroup_iter_break+0x30/0x30 [ 3330.708548] ? mark_held_locks+0xc7/0x130 [ 3330.713191] out_of_memory+0xa84/0x1430 [ 3330.717041] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3330.717188] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3330.729138] ? kasan_check_read+0x11/0x20 [ 3330.733316] ? oom_killer_disable+0x3a0/0x3a0 [ 3330.737858] mem_cgroup_out_of_memory+0x15e/0x210 [ 3330.742722] ? memory_oom_group_write+0x160/0x160 [ 3330.747616] ? mem_cgroup_charge_skmem+0x216/0x410 [ 3330.752579] ? page_counter_try_charge+0x1c1/0x220 [ 3330.757525] try_charge+0xda9/0x1700 [ 3330.761268] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3330.765952] ? mark_held_locks+0x130/0x130 [ 3330.770205] ? sock_sendmsg+0xd5/0x120 [ 3330.774111] ? zap_class+0x640/0x640 [ 3330.777840] ? ksys_write+0x101/0x260 [ 3330.781654] ? __x64_sys_write+0x73/0xb0 [ 3330.785733] ? do_syscall_64+0x1b9/0x820 [ 3330.789829] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3330.795226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3330.800790] ? check_preemption_disabled+0x48/0x280 [ 3330.805835] ? mark_held_locks+0xc7/0x130 [ 3330.810003] ? mem_cgroup_charge_skmem+0x2d1/0x410 [ 3330.814946] ? mem_cgroup_charge_skmem+0x2d1/0x410 [ 3330.819894] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3330.819917] ? __sk_mem_raise_allocated+0x642/0x1800 [ 3330.819939] ? trace_hardirqs_off_caller+0x310/0x310 [ 3330.834727] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3330.834748] ? check_preemption_disabled+0x48/0x280 [ 3330.834790] mem_cgroup_charge_skmem+0x216/0x410 [ 3330.850113] ? mem_cgroup_sk_free+0x90/0x90 [ 3330.854468] __sk_mem_raise_allocated+0x642/0x1800 [ 3330.859422] ? __might_fault+0x12b/0x1e0 [ 3330.863540] ? sk_busy_loop_end+0x1c0/0x1c0 [ 3330.867880] ? iov_iter_advance+0x306/0x13f0 [ 3330.872311] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3330.877881] ? alloc_pages_current+0x17b/0x350 [ 3330.882491] ? skb_page_frag_refill+0x1eb/0x6a0 [ 3330.887176] ? skb_orphan_partial+0x280/0x280 [ 3330.891701] ? _copy_from_iter_full+0x2d8/0xce0 [ 3330.896396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3330.901963] ? __sk_flush_backlog+0x2f/0x40 [ 3330.906309] ? iov_iter_advance+0x13f0/0x13f0 [ 3330.910835] __sk_mem_schedule+0x6d/0xe0 [ 3330.914919] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3330.920487] tcp_sendmsg_locked+0x1c5f/0x3fa0 [ 3330.925002] ? debug_smp_processor_id+0x1c/0x20 [ 3330.929710] ? tcp_sendpage+0x60/0x60 [ 3330.933544] ? lock_is_held_type+0x210/0x210 [ 3330.937981] ? find_held_lock+0x36/0x1c0 [ 3330.942073] ? mark_held_locks+0xc7/0x130 [ 3330.946235] ? __local_bh_enable_ip+0x160/0x260 [ 3330.950921] ? __local_bh_enable_ip+0x160/0x260 [ 3330.955699] ? trace_hardirqs_on+0xbd/0x310 [ 3330.960034] ? lock_release+0xa00/0xa00 [ 3330.960049] ? lock_sock_nested+0xe2/0x120 [ 3330.960067] ? trace_hardirqs_off_caller+0x310/0x310 [ 3330.960088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3330.968296] ? check_preemption_disabled+0x48/0x280 [ 3330.968311] ? lock_sock_nested+0x9a/0x120 [ 3330.968333] ? lock_sock_nested+0x9a/0x120 [ 3330.992455] ? __local_bh_enable_ip+0x160/0x260 [ 3330.997150] tcp_sendmsg+0x2f/0x50 [ 3331.000713] inet_sendmsg+0x1a1/0x690 [ 3331.004550] ? ipip_gro_receive+0x100/0x100 [ 3331.008892] ? apparmor_socket_sendmsg+0x29/0x30 [ 3331.013667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:48:37 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x200000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000180)="1adf8508e8bb206a833a15c14f7371dca9fc62ed884ce2b4528ab6e5eaaaea4858a21f720b52cdf547b0c8c0a3b7148b8d0cb277f92b66901dac8263836248086413edd3a4afe238b4ac815f62d91cedf649b9bf456405a182e0c608c2c5ce4eb9d80f1e8cbc4edc89f3c957da04cd6e89b73febef88fbdece1a6e136632704922d1c1f60429360b98a36ed49b27201ed07532c52b2300351d3e9d1d1570d12b85aafd7f0e60f89e38609957b076eb21cf5a5874982beaf815091d0d4af7d0645b69fbe5001d4d417104d202689840f4531c7ed98b54fceb84862a8817301a52a419e7e42fbebe399f92635167503434a2af5d2b39a333") write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0x3}}, 0x30) 22:48:37 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2) 22:48:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x500}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:38 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000240)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x7fffffff, r1, r2, r3, r4, 0x10, 0xff}, 0xfffffffffffffffe, 0x2, 0x2, 0x0, r5, r6, 0x6}) 22:48:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:38 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x280804, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x29) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x10001, 0x9, 0x8000, 0x4000000000000}, 'syz0\x00', 0x4}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x5, 0x2, @raw_data=[0x3ff, 0xdd, 0x3, 0x10000, 0xffffffff, 0x302, 0xffffffffffff8910, 0x3, 0xff, 0x7, 0x200, 0x2, 0x200, 0x9, 0x100, 0x4]}) [ 3331.019224] ? security_socket_sendmsg+0x94/0xc0 [ 3331.023999] ? ipip_gro_receive+0x100/0x100 [ 3331.028354] sock_sendmsg+0xd5/0x120 [ 3331.032090] sock_write_iter+0x35e/0x5c0 [ 3331.036169] ? sock_sendmsg+0x120/0x120 [ 3331.040171] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3331.045726] ? iov_iter_init+0xe5/0x210 [ 3331.049737] __vfs_write+0x6b8/0x9f0 [ 3331.053488] ? kernel_read+0x120/0x120 [ 3331.057399] ? apparmor_path_rmdir+0x30/0x30 [ 3331.061837] ? apparmor_file_permission+0x24/0x30 [ 3331.066727] ? rw_verify_area+0x118/0x360 [ 3331.070902] vfs_write+0x1fc/0x560 [ 3331.074458] ksys_write+0x101/0x260 [ 3331.078101] ? __ia32_sys_read+0xb0/0xb0 [ 3331.082178] ? trace_hardirqs_off_caller+0x310/0x310 [ 3331.087353] __x64_sys_write+0x73/0xb0 [ 3331.091308] do_syscall_64+0x1b9/0x820 [ 3331.095215] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3331.100590] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3331.105510] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3331.110348] ? trace_hardirqs_on_caller+0x310/0x310 [ 3331.115354] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3331.120361] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3331.125374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3331.130233] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3331.135432] RIP: 0033:0x457669 [ 3331.138616] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3331.157506] RSP: 002b:00007f010550bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3331.165201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 3331.172458] RDX: 00000000fffffffe RSI: 0000000020000380 RDI: 0000000000000005 [ 3331.179723] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3331.187025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f010550c6d4 [ 3331.194288] R13: 00000000004c2d95 R14: 00000000004da328 R15: 00000000ffffffff [ 3331.207936] Task in /syz0 killed as a result of limit of /syz0 [ 3331.215713] memory: usage 307128kB, limit 307200kB, failcnt 1007519 [ 3331.222618] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3331.232735] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3331.240536] Memory cgroup stats for /syz0: cache:200KB rss:138020KB rss_huge:59392KB shmem:188KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:138056KB inactive_file:0KB active_file:0KB unevictable:0KB 22:48:38 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) 22:48:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x700000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:38 executing program 1: get_mempolicy(0x0, 0x0, 0x400000000039d, &(0x7f0000ffa000/0x1000)=nil, 0x1) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080), 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 22:48:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 22:48:38 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000004001fc) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0xffffffffffffffff) connect(r0, &(0x7f0000000000)=@ethernet={0x306, @remote}, 0x80) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x84041) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) [ 3331.262906] Memory cgroup out of memory: Kill process 3689 (syz-executor0) score 1110 or sacrifice child [ 3331.273055] Killed process 3691 (syz-executor0) total-vm:70472kB, anon-rss:4260kB, file-rss:33620kB, shmem-rss:0kB [ 3331.287036] oom_reaper: reaped process 3691 (syz-executor0), now anon-rss:0kB, file-rss:32852kB, shmem-rss:0kB 22:48:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/196) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000260007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001140)={0x2, 0x5, 0x3, 0x0, 0x0, [{r0, 0x0, 0x1ff}, {r0, 0x0, 0x3ff}, {r0, 0x0, 0x8}]}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dlm-monitor\x00', 0x2400, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000001200)={0x7, 0x4d, 0x1}, 0x7) recvmsg(r0, &(0x7f0000001100)={&(0x7f0000000000)=@pptp, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/49, 0x31}], 0x2}, 0x2120) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:38 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x3, {0x8000}}, 0x18) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x101100) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)) 22:48:38 executing program 0 (fault-call:0 fault-nth:0): get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:38 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:38 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x2, 0x0) 22:48:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x105000, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000040)={{0x0, 0x1, 0xb, 0x7, 0x6, 0x8, 0x2, 0x6, 0x0, 0x1, 0xffffffffffff7fff, 0x1f}, {0xf006, 0x0, 0xf, 0x0, 0x4, 0x4f, 0x7c187128, 0x1, 0x1, 0x100000001, 0x80000000, 0x1}, {0x6000, 0x0, 0xe, 0x0, 0x7fff, 0xffffffffffffff7f, 0x8, 0x4, 0x6, 0x10000, 0x3, 0x81}, {0x1, 0xd000, 0xb, 0x4, 0x0, 0x9, 0x4, 0x6, 0x0, 0x3, 0x100000000, 0x7ff}, {0xf001, 0x5000, 0xf, 0x932, 0x3, 0x86db, 0x1, 0x5dd9, 0x0, 0x474, 0x3, 0x8}, {0x5000, 0x2003, 0x14, 0x5, 0x0, 0x1ff, 0x1, 0x3f, 0xffffffffffffff00, 0x9, 0xc5}, {0x2000, 0x5001, 0x0, 0x6, 0x81, 0x100, 0x2, 0x9, 0x7, 0x4, 0x10000, 0x100000001}, {0x4, 0x5000, 0xf, 0x2, 0xfffffffffffffff8, 0x80000000, 0x6, 0x3800000000, 0xffffffffffffffc0, 0x1, 0x100000001, 0x1}, {0x0, 0x100000}, {0x2, 0x3000}, 0x40004, 0x0, 0xd000, 0x0, 0x1, 0xb100, 0x10f001, [0xfffffffffffffff7, 0xe0000000000, 0x7b0b6bb6, 0xfaa6]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) 22:48:38 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:39 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x800) 22:48:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x19400000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:39 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:39 executing program 0: get_mempolicy(0x0, 0x0, 0x10, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:39 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) 22:48:39 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000500)={r1, 0x0, 0x100000000, 0x100, 0xffff, 0x3f}, &(0x7f0000000440)=0x14) r3 = dup(0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r2, 0x6}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000480)={0x7, 0x4, 0x1}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000080)={r4, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x4, 0xfffffffffffffffd, 0x1, 0x7, 0x7fffffff}, &(0x7f0000000140)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0), 0xa) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) fcntl$setflags(r5, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000040)='net/mcfilter\x00kLDn\x03\xf0+\xb1k\x00\xac\x85u:\x88\x80') preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80880000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfffffff0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:39 executing program 0: get_mempolicy(0x0, 0x0, 0x1000000000000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r0, 0x5462, &(0x7f0000000280)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x7, 0x0, 0x2, &(0x7f0000ffb000/0x3000)=nil, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16, @ANYRES32=r1, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r0], @ANYBLOB="3ca4d59fb404d4c47467e0cfd675073c6654b4273c789ecbe0acc8f09deb6df1edc45b872cb7a59581699e50cf0d46e6d5650961e6c313f7dcd18c4500d6d7e21a84c62352e0de458e9e1ad1ccd61dd308378825568422939840d0ee4ec72ee26ac279562186d1d467a0cc322a48338aa69860c8fb8fb9af0043925ba7428c538313af2d6af44496c34ef6bcfa55d14f8b8a2d63375a3ef873406230dbe1bf192add6c7f7795e2489faf9040d2202777fa5aef29264ef478c7bc597599159261280eba5979cf8f1184ea8e1c7ceae9e66d4b02b6cfe67ed1061955e00786", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="9a49f13284e221d398d8c236c8d5c6099c", @ANYRESDEC=r2]], 0x3}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:39 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:39 executing program 0: get_mempolicy(0x0, 0x0, 0x10000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:39 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x109000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x92, 0xfffffffffffffff7}}, 0x30) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x3, 0x4) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6) 22:48:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x4, 0x6, 0x6, 0x0, 0x0, 0x5, 0x1, 0x0, 0x9, 0x7, 0x9, 0x6, 0x85, 0x2, 0x80000000, 0x8, 0x6, 0xfc35, 0x10001, 0x7, 0xfffffffffffffffc, 0x80000001, 0x1, 0x3f, 0x5, 0x5, 0x1, 0x10000, 0x20, 0x3, 0x7, 0x401, 0x5, 0x3, 0x4, 0x8, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x88, 0x2, 0x8, 0x7, 0x2, 0x100, 0x7}, 0x0, 0xc, 0xffffffffffffff9c, 0x2) r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:39 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4) 22:48:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xa01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:39 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x480000, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x8001, 0x7, 0x1}) 22:48:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:39 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:39 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() r4 = geteuid() stat(&(0x7f0000000300)='\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000004c0)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x4, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_gt={'fowner>', r3}}, {@smackfsdef={'smackfsdef', 0x3d, '$em1ppp0trusted{-[./,'}}, {@obj_role={'obj_role', 0x3d, 'selinux'}}, {@smackfsroot={'smackfsroot', 0x3d, '^\''}}, {@uid_gt={'uid>', r4}}, {@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, r5}}, {@fowner_eq={'fowner', 0x3d, r6}}]}}) 22:48:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 22:48:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:39 executing program 2: set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x4, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) 22:48:39 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x200000000002) msgget$private(0x0, 0x0) 22:48:39 executing program 4: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x0, {{0x2, 0x4e20, @local}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x10, 0x1, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x86, "67645c544cdecc5136e39ab15cddfbf9d658676189720f4197ab2c933cd7777df401115fd0b22b80537e70b6101d45d80dcf9acf6abb32c64be0f2b9a43e14ce9d48783ccfbdcb6ffe97b1e382611b865a0f390cc61f561e1c7586ba005bc89ab3d7766eb6bf6f82a7b5224e781ad0c06f4f9b72cf375a6fa9b999bfe0b9474b0170b195d4f3"}, &(0x7f0000000100)=0x8e) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r3, 0x3}, &(0x7f00000001c0)=0x8) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:39 executing program 0: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x840, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0x1], 0x2, 0x8, 0x1, 0x100000001, 0x58ba, 0x100000000, {0x5, 0x200, 0x9, 0x5d5f, 0x100000000, 0x4, 0x3ff, 0x9, 0x1ff, 0x400, 0x9, 0xd79d, 0xc5b, 0x0, "f1c9ff0c2e724bb0d461bcabf3fa16a46b678b7eb48b5147c68eaa811d706d1c"}}) 22:48:39 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:39 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x18000, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xc220, @mcast1, 0x100000001}, 0x1c) 22:48:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$addseals(r0, 0x409, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x505000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x8) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:39 executing program 1: mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:40 executing program 0: get_mempolicy(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000ffc000/0x4000)=nil, 0x2000000803) 22:48:40 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:40 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:40 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40000003) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:40 executing program 0: get_mempolicy(0x0, 0x0, 0xfffffffffffffffa, &(0x7f0000ff9000/0x4000)=nil, 0x2) prctl$PR_SET_FP_MODE(0x2d, 0x2) 22:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x68000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:40 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0xffffffff, 0x4, "96390984"}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:40 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x12580, 0x0) close(r0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = getpgid(0x0) capget(&(0x7f0000000000)={0x39980732, r1}, &(0x7f0000000040)={0x3ff, 0x40, 0x1, 0x1, 0x9cd0, 0x3ff}) 22:48:40 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x10000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x9, 0x1, "6fc9c57f201bdb1b088d64f5557574bde6473f13dae61622788dae408636e2870446ea15b8bda1c967f887ea0cc3471aeff1a7bc051b5de9b8e9650c7141296c", "5e630cad3d05f59087fe1625f9ff24202f131df97fe675b37cbf35c6dece3dd9f375bcfe5761d8148412385bf2fb0b8519f8e1e72d51495805fa2e83e06d9b79", "4d211f4982d63302d59d77f63686bc05ad4c981601a7ec8546ac16ede2faf750", [0x5, 0x76a]}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xc4, 0x80200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000054d1) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:40 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x18000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x0, 0x2, 0x1, 0x8, 0x6, 0x7fffffff}, 0x20) mq_getsetattr(r0, &(0x7f0000000100)={0x1, 0x8, 0x3f, 0xffffffff, 0x8d84, 0x1, 0x5, 0x9}, 0x0) finit_module(r0, &(0x7f0000000080)='#vboxnet0\x00', 0x0) 22:48:40 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000280)) remap_file_pages(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9, 0x1, 0x40) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x4], 0x1, 0x4, 0xffffffff, 0x6, 0x4, 0x2, {0x4, 0x1f, 0x324e, 0x9, 0x1, 0x8, 0xecb, 0x9, 0x7, 0x0, 0x5, 0xfffffffffffffffe, 0x2, 0x7, "f1caf4d5227a899725f3ccddbeffbe8af542cd6705cab74d770323db447679a3"}}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000140)={0x8, 0x1, 0x8}) 22:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100000000400000, 0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x4e, "eb814c7a468bf690876254c87a88775bfdab07fc91d307f638eb847b78da313593255f99fe6385c216a0548ea473a8013e5083ade5536097b78c98a4658fd32d7d814051597d1098cd7169a1e179"}, &(0x7f00000001c0)=0x56) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r3, 0x3, 0x0, 0xb5}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r2, 0x7, 0x3}, 0x10) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) fstat(r2, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) 22:48:40 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xbb000000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x5300000000000000, @ipv4={[], [], @rand_addr=0x1000}, 0x69e}}}, 0x84) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x200, @empty, 0xbb5}, 0x1c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 22:48:40 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:40 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x3, 0x2) r1 = accept(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) getuid() lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', r2, r3) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x100000001, @remote, 0x10000}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 22:48:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 3333.226142] validate_nla: 16 callbacks suppressed [ 3333.226153] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:40 executing program 0: select(0x40, &(0x7f0000000000)={0x0, 0x3, 0x4, 0x7fff, 0x4, 0x3, 0x2, 0x8}, &(0x7f0000000040)={0x4, 0x180000000000000, 0x0, 0xffffffffffff8000, 0x8, 0x4, 0x30a, 0x100}, &(0x7f0000000080)={0x1, 0x5, 0xf0, 0x31, 0x1000, 0x1ff, 0x40, 0x3}, &(0x7f00000000c0)={0x0, 0x2710}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x2eb0}, &(0x7f0000000200)=0x8) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:40 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x23d651cf}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0xfffffffffffffff7, 0x5, 0x1}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x6, 0x30, 0x5}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) ioctl$TIOCSBRK(r3, 0x5427) [ 3333.284324] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:40 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3f000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x111000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) 22:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:40 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 22:48:40 executing program 1: get_mempolicy(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000ffa000/0x4000)=nil, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x8, 0x401, 0xc00, 0x400, 0x2, 0xffffffffffffffff, 0x101}, 0x2c) [ 3333.438667] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:40 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) 22:48:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x2, 0x5, [], &(0x7f0000000200)={0x0, 0x100, [], @string=&(0x7f00000001c0)}}) r3 = fcntl$dupfd(r1, 0x406, r0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x2, @local, 0x2}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x36a0}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000280)={0x7ffffffc, 0x4, 0xfff, 'queue0\x00', 0x3ff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_POLL(r2, &(0x7f0000000340)={0x18, 0x0, 0x1, {0x9}}, 0x18) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:40 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x900000000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x10000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3, r2}) mremap(&(0x7f0000b10000/0x2000)=nil, 0x2000, 0x600000, 0x4, &(0x7f00009fd000/0x600000)=nil) 22:48:40 executing program 1: get_mempolicy(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000ffd000/0x1000)=nil, 0x1) 22:48:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3333.610371] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:41 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000000c0)) 22:48:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x200000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:41 executing program 1: get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffa000/0x4000)=nil, 0x404) 22:48:41 executing program 2 (fault-call:4 fault-nth:0): getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:41 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x200000000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:41 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x48, 0x638900) prctl$PR_SET_FPEMU(0xa, 0x200000000003) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1000) 22:48:41 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x400000) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/4096) [ 3333.808093] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:41 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)=""/83) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x300000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:41 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x8, 0x0, 'client1\x00', 0x1, "222c757fa6cdf634", "00ac3eeba31e7cd15fa6193967ef729da8dccbb6b16726fdefea878870133969", 0x7fffffff, 0x5}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000001c0)=0x2, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) 22:48:41 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:41 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x181d02, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0xfff, 0xffffff, "5666fa394616b668330b6784fc2f59add387188aba6e3a03", {0xd72, 0x693}, 0x80}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x5fcb, 0x4745504a, 0x4d9cf438, 0x8, 0x3, @stepwise={{0x3, 0x7}, {0xfffffffffffffff9, 0x80000001}, {0x4, 0x9}}}) r1 = add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="c5ea8d660c66529ce0b9fa736432899f253ae8b1985d201100ab53b9505024ed020efb3b36a3debf3ef3b50e16a4687fe6e45c251a51195cd4517feb9ffffea0d6e353f840f75f5d14e8d32e508ca489f62af620a54f3a75501dd7cfce93ad603f5cc718977241ec2b0c9b", 0x6b, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="99cb57306645bf53f10394bc4b3eafcc07a42c2189b14d6154533634fcfb01977635a09e47275e149bee8255e38e3338be23dcd2b352d7cc2692df86c982d4fa3dd001a12616385d246c39842ed9636c644e6e9cdbd44a96a60756522d120e5c2e16a5342224c753cb22831cc87606ffeb07403e06368ce54a45afd6241d158fe97d7dd3346f42bf1757d5dc4ad878f3113e6c29c521c52f45ccb85315a26d4365af6d75c5da2d61dacf04f9257da134382d6994a64f1c29e5d7d817e2df9d55e28434165adfeb", 0xc7, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x1}, r2) 22:48:41 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1000, 0x4) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10205, 0x0, &(0x7f0000ffc000/0x1000)=nil}) fcntl$getflags(r0, 0x401) [ 3333.977748] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x200000000000e) 22:48:41 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800000000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:41 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3, &(0x7f0000ffc000/0x3000)=nil, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 22:48:41 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10010) 22:48:41 executing program 1: 22:48:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3334.173191] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:41 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xffffff7f00000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:41 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000240)='lo', 0xffffffffffffffef, 0x0) acct(0x0) [ 3334.241810] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:41 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) unshare(0x10000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x6c00, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x1, 0x8}) accept(r0, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000380)=0x80) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x9) 22:48:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:41 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2000) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1) fcntl$addseals(r0, 0x409, 0x8) 22:48:41 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x10010, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/27) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000100)='./file0\x00', 0x8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) recvfrom$inet(r2, &(0x7f0000000040)=""/8, 0xffffffffffffff96, 0x40002000, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000000c0)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0xfffffffffffffffc) 22:48:41 executing program 2: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000480)=""/211) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000040)=0xdd) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(0x0, r0, 0x20000000000, r3, 0x1) unshare(0x10000) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x400100) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) [ 3334.389331] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3334.389920] QAT: Invalid ioctl 22:48:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x600}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:41 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x202200, 0xc) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xcb02, 0x2000) [ 3334.451572] QAT: Invalid ioctl 22:48:41 executing program 0: get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000280)={0x9, 0x9, 0x473, 0x80000001, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) [ 3334.499880] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xb00086f41a8f8e1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter6\x00') r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x103101) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000000) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:41 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:41 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x20, 0x5]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x48}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:42 executing program 1: get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000ffb000/0x2000)=nil, 0x2) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000ffb000/0x1000)=nil, 0x6) 22:48:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:42 executing program 0: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3166b194}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)='wlan0\x00', 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x4, 0x3, 0x831, 0x0, 0x1, 0x0, 0x5}, {0x0, 0x0, 0x8, 0x7ee}, 0x0, 0x6e6bbc, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3}, 0x0, @in6=@mcast2, 0x3503, 0x0, 0x0, 0x2, 0x0, 0x7}}, 0xe8) sync_file_range(r1, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in, 0x4e23, 0x1f, 0x4e20, 0x6, 0xa, 0xa0, 0x80, 0x2e}, {0x8, 0x6, 0x4, 0x93, 0x0, 0x8001, 0xba}, {0x7, 0x0, 0xffffffffffffff2d, 0x5}, 0x2, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0xff}, 0x0, @in=@rand_addr=0x80000000, 0x0, 0x3, 0x3, 0x80, 0x5, 0x3, 0x40}}, 0xe8) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) r4 = dup2(r2, r3) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\v\xcb\x98\xa3\xe1\xf4o\xd5\x1b\x13\x9du^\xfc\xe9v\x8b\x84\xeau\xc2\xffK<\x85\xca\xef7M\x12jV\xfaGC\xaf~\xf5\\\x84k\xfe}\xd1`r\xd2`\xff\xdd\xcc\x8am\"\xe0/D\xd6\xa3`RK\x86\xb5\x1aKX\xaf\xca5\xf1\"\x01\xad\xb0$\xbf\xb2\x0f\xbd6Nx\xa22\xfb\xef1YP)\xf7Ut\n\xb1^\x17=\xc7;\xa9d\xa4\x18\x90\a\xc7\xc4\r\xb8\xfbKd\xdd\x8e\xc4\xd3f') fcntl$setstatus(r5, 0x4, 0x4000) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) recvfrom(0xffffffffffffffff, &(0x7f0000000780)=""/89, 0x59, 0x40000001, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) msgget$private(0x0, 0x402) seccomp(0x1, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6, 0x20000000000, 0x6}, {0x8e1, 0x6, 0x5, 0x1}, {0x300000, 0x1, 0xbb1}, {0xe3, 0x4, 0x5, 0x101}]}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={r6, 0x80000, r1}) sendfile(r1, r5, &(0x7f0000000040)=0xe00, 0x1080005000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)={0x174, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x160, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x545}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1f, @ipv4={[], [], @multicast1}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @broadcast}, 0x967}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1b}, 0x6e}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf959, @loopback, 0x100000001}}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x401, 0x4) geteuid() 22:48:42 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) io_setup(0x6, &(0x7f0000000000)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002bc0), &(0x7f0000002c80)=0xc) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="a7ccdf88b6d2cabee9eda292bf315aa1b967fc9742288922adc9f079ae973480a67529afceda0a0a1ed20f677beef44570fdd4d42b28b25e145a8419bc98f333610e8edfd084de2c697e834054c2fa0e8d426a2a6a4f06dc921c5c54fae92ceec8f92871d7e9448a0ddd8ccd201394080f10c1452d3c0ce1aa6e0336aeff1233bacf67e1524d4cdc297a1b9c16060a17d06daf5e678a3d1863eb07b123e8e694ea8b02598cd8b4", 0xa7}], 0x2, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x158}, 0x4}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000013c0)="0e20b43febd39b250e168528089fb4f06c2003fcdb04bb16eb58641c040c1319c5ac2ac4", 0x24}, {&(0x7f0000001400)="376193c5ee6ff1d6d9ffe9d4d1b35cbccceae4850aee74a5693116f4e8ec47ff5e1bf9e81c3d7323f085979858831c1bb0b593b0f19633fc2c7cb393bf70d9e59274140e01ab160c3b37dc875a313e924b6a24f37594e6f6034b488ed3ad3a81548057cd2a21063b2d578a79c4410861deacfe9382568f2b560c2f664b60dfd695c1ff1910ae3398ba660b57dc8a41e9e8818d11880c48c7af5c34ce838b76ed888bf61f8b1cb6dcec701052cce54c2cbcc40faab3b3be86c4813eaa988e8644802178fca48e28527c", 0xc9}, {&(0x7f0000001500)}, {&(0x7f0000001540)="b9edd3cf2f64424c2bb4493b37b03c5b7f0d307d84368aa2ff652437a027818896c68b31818da53ad8b64ecb8c73b32cb8625a13cd30e714c22b509639882eaa9f9b1e57ad14d205ddea253902adf166910f280a0331", 0x56}, {&(0x7f00000015c0)="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", 0xfc}, {&(0x7f00000016c0)="688338497305a025e21144e531b677a7050b39c2287575a272f6fbc24071f8575e7d715b124b181ec3edb79a48212ff7062b2d89608d987b1c76486b901bde7503c7bf0bbf214b762b3c5903ffa8065b9205bdc34778238fc7cbb86d7b1a30f21538eb0951bfc477602b91c13c09c8460d9bebd6be308f5eb2fd41c8d7b3b46af447af0fb4713dbff98d1022a2c665c57baad8258e6694b7596c91050e2a", 0x9e}, {&(0x7f0000001780)="72ac6ffcbe8e6478f2cbcf6f37b04dc6e3b12f09708a74332b1749c451238040fb5a9dbf9f84352454f87ec78c6bf9b6d9a48a5829b2b3642ee13f692a24cf4fef18faad40f352bf06d3718393c8eb2f292250b080b8a96523cc32291581bfda9b94b17a2b899480132696fbd5954852b2bf6ff9af601f33128fc91bbb58760c2943d9e9a9fe0b69fe", 0x89}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="221cc4016d89600e18f11d646b3f29b22722211efcb8085e2394fae7cc8248863c9055db9a60f11406babe243b6d85309aaec35112676554925bca9137ff93dd026b5eab0d053fe8da8e58ea7d6057d378cde4d10a95deed59cbc6a03b4622df4e3198ed4b0c04855091344ea951a4e2a8ca1caf0ce343ff244a649acf112de44c9c01c939deb81d4f4d29de68863133d63901", 0x93}, {&(0x7f0000002900)="3b7c11d6e2fc", 0x6}], 0xa}, 0x3}, {{&(0x7f0000002a00)=@ax25={0x3, {"71ef085c552ba8"}, 0x909}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a80)="5528aebbba7a1cf89f4202ef9dd791ed632a0f9f00a4a13d9d1210a0285ae265c3dc7d63c021a669765a0a4675cccbfe78957bfb9ea31f8864c0b10bbd7bcca1f44cae6375422cdf40a1f12aa1625fc926f38878d5bbb3c6ddb00d7014051652e1b00bffcf610519b4cb60d3c1ab142ef65833ebba3826fca5213f89d9d4b8b506706cef0bea3b455229a3fa6ebdec288b605d1f328cf36d7570ae4bd1ddaf1c95020b6dc16c81861d1c4de2b2990db8ddb146c3769c070bda7331b58b49e5a1dac4e1b0c585b581cb8c6ece394bd2d104cf78e114ebefceaaf86a7ca0b2", 0xde}], 0x1, &(0x7f0000002bc0)}, 0x22}, {{&(0x7f0000002c00)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e24, 0x5, @loopback, 0x6}}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004f40)="fcb80565e1f8be106f8b2efc6535d427cb65cff3d35e5324f29e891c99ee6ad53faffca450656fdae4890b35cf73654e4b6ef44b415baf0afccc9bfe0f7da04c64d87e2635a2718c7c9a98790812cea0c682b154fc9a25495cf4347b6c15fd6f3b0f8150a1c0a8b2ce99e4eabf1a2d210fab71802b796f26838d19bdda0b575cd31ac49c14a7ae8194b255a9b86fe3f90e5ae9cecd8001423520e88fa3a419d55541d62e07a0aa348f4ab22d5de775d323ca9103a3c5163267e05f3478d3ddf3d423cba79c623cce0bbf17574e7ab8fea9647b402297134692f56ab34ca90ba442e05466b764d4037999d53d0b", 0xed}, {&(0x7f0000002d80)="3f7d980ef89bda462e2118ebcfe384b950e2735722576f9d70d0760291b24f6ea61a07528ebf614441a26268fd9866da624776a6d6d0deab8d7e59d4623fb68cb0b09f0500a691189f19e09fe6b84a1290f661d3a06a0a6ac477e9939e528090e93b6a6c8a60b1118c203cd5171a236ec921641717d81889097e9a9ef1c61f43e508db80c8363ba45072b96c4f80cb38df8b771374", 0x95}, {&(0x7f0000002e40)="9cc6baf8fd7cfd82fe357a8ec3083026574f661b87687c540e14703cb07d8c0111962602446e04ed960156052560d395eec770aed27e27ffacf78246091431053e511ba586a276d862910ff433fcc05c0198b384ccbe2804cf861397d625a28107ff77f0d169f6ee57dcee0c4468ab977915a1e1177e46e02088623ae8bd7c8a0cb3d699b75c5152f39cb4455cf2cf50b25bc044ad8a1ccc0f58e4b4e874fa8236280a3a690dfc59d5fd373b3e9327973398f180b3ea79afd52d74ec35f52fd088c0cc1416bcc52c619db41e722cadf6942a", 0xd2}, {&(0x7f0000002f40)="2e407c48eea14b654870209cbb1da10beb42eed4981437756afd0a28939a348c5c9c5ef3e1ad2be63811202d5ba789dfb4ce17a7d4d6b96f2482249e37c5ca769dc8615a7c5caf303494acc0efc86e2d550943d6bf686cd6d5c7e8f64611921841de40fc1851f8c6ce13a22fd2b230c9ffa037aa1e78aec0793ab593570ff6b0defe49f2262e249ce17e540f56416cf4afb8375eb954e018d767d7a2f08e1a94ea3e4c302e0bf6acee9c", 0xaa}, {&(0x7f0000003000)="42fec88d5269aab28c06fffff0e36a6ce74e6c954f2575bf4450a798c1db10c9b20ebe6689c5308a98064bfc", 0x2c}, {&(0x7f0000003040)="a0db57e375b23f3a2964ef9f1296a03108d5fd95dd80b82d6d3c6d880f3c5ef1a0ac9cf79b76160ed5f4d676e1ca1dc60a2d9884fa9de69750412f0bc68db2c3fe231b3972c6a5364b3eeb0753168a888168fc7343e94c0e92e7aed17750b03a0efa8d412ac75f0e08a77723798f479b88cb631cf62db1", 0x77}, {&(0x7f00000030c0)="e610e24621cdfcc5df8851c4d2643ad78045ee5ed06690e503593785c349d798192e02726314e93f02b094387fc22131ed26e94cd77b4d500c73ae60fc7f6cb5f12dcc08d5a47571c8d57103c64bcef5055ea4d9786dc8f3d38899d8d54d8734315780848b0251db157def8cfe612df9961a31042f3586116ef0e26db1b785b3774c68f5c273c44e7ecde76a584c44226f2bed7ec38cee91acc0da630a1c2836a8574aa910b6d2eaed7cdbbda14190a7252b049a4812c73a63f848ee6ab2c21a51c846327d78864fdb23a0c6ac3e7b0429a40649c3dacd388d2936cb9ba36e867d7e2feb49227a021c", 0xe9}, {&(0x7f00000031c0)="be7a837f1da40147d8710622114a075728fcc2271aa3d06f2372a25a75925d7376a03e104e2f8102e2dceb9ed0cbcb3f996b79724ceb42f9866401c5725ff59579a5f6037e514022a0bfbc721fb67eacdf5398daa011a80eeb0e4117c6aa3b10bb79db1ce526c179c9c46de39f1edeb4da86b33bccda258dcfbf7f5a0b1467dad4ed9f7ffaff6a23b35eb581a4151e27361cd9dbba0f55e79887447dc24def2c60d8e5aa4f59cabc0418b531432e851ec812a1243a4693c520b41b092597ff269438271ee296f4858b3cf9d1b27ace456854cd96a7241ce804b4f916a6f8476e6329f613c2ea892143462a950e41ac66f737d7", 0xf3}, {&(0x7f00000032c0)="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", 0x1000}], 0x9, &(0x7f0000004380)=[{0xe0, 0xd4c42df7a5368a, 0x7, "04215e6286d8a1c85363b7c9edbbb5d61f4ed7f48b37bab7f24a825d92e1ca43ea73836685f53affeef640777406023c886ff2ae0d64afa297c5aa6152e9eb3c02239db41b0f2780deb60e34a7b02e4e5bf6796d89b74e383f4083e3ba14cb9cb082b41c43fd742e6c0530e4217e17bbfdcb5ebd6b7452219b220467638c5b6335cd2712d064ac3554bc20119cb89695cfc2225dfb67927b1f591068966044126371a04e455f9f422371ba21b5b22ed337e3d1b1d23338e850d21b0e061e8db29108d93ccc106de7bd11f3e58a"}, {0x88, 0x10e, 0x2, "ba2f79f34e037280d9ca91cd4d61bc0bd60e0bd9019f9b583a6f2cd7019c8461f09123d63dcf9d0c581e835bf1fc7a548ccd30c89208dbbcf9a3f3c56c9452dfc9b0360bd57a76502c485cdd2f111451bb4abf438846c85eca159c178a5e274d9bd46bfa854641e78df7e07b702ddc89398baa37e639"}], 0x168}, 0x9}, {{&(0x7f0000004500)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x0, 0x1, {0xa, 0x4e20, 0x3, @remote, 0x6f6f}}}, 0x80, &(0x7f0000004780)=[{&(0x7f0000004580)="4d6ae6f285c0e58ddc9b7111c5d7317c36887274b81d57b08a1b058696dadf540d0ea75a1f3053882a6d01ba41f5b537b17caa0847bec24bc6b58136649be4c517570b035d9a7edb3e24f98d38ee9ff9aed2aefb3eefc1f945893483a5eefcc457de5c672b938613bdd0d6", 0x6b}, {&(0x7f0000004600)="39d249f7db33ea2fcb50662056a541f59d06be2aa713ce61c099e882919e1234a80e0b27c4721d722f3304710b3897bbecaff049ca50c8b57914542e5a8cf5e6a6b193ee24770eba6123501c5fa76a370ac81f797c7cb50774965857f390a66cfae3f4760abc465e64da4552bb440db4beb1c4cf18d8b5d112bce362c2811dd6a1ff736fb713e616862c95fe9dae0f97bf61cc841cc44dcd375f4c8f77fcb924e0617982129620d41bdc074924295ffd1771ff1a43863f54ced964a75f03fac447e5", 0xc2}, {&(0x7f0000004700)="2671db2e1fe7e7d8760c6291d83b18df3763abf48f72d885e5e399f0a1e528f4c499f36a40fe9b1f601fb30ef90917", 0x2f}, {&(0x7f0000004740)="5052329994ce9322e7116e7e79930f95ffcb69e56ea30a4d0c120bee57fdf9c19cc0d42aa3ed661228b2affaa3b54f8b75c9f34f42fc52b289eed788fe76c7", 0x3f}], 0x4, &(0x7f00000047c0)}, 0x7}, {{&(0x7f0000004800)=@ethernet={0x307, @local}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004880)="2ff71057d737d46a2bf4151a1380a6ac0e5c21bfc3d7f8e70c8457720018891dc388e38636aa19ff4b8532", 0x2b}, {&(0x7f00000048c0)="362382cc595f6f097007585ea0139b2858faec21a86b71766a6df4fe54cea37d0c116eca8a98d14b0c036a5634c2c72ccc04951ba338618d7f79139adbac41790c159d21f4c64089f8f604d2ae88b4ca17f08a35b703f73e2790d509242f7e7dae3147cd9ea984b4a2167b716c9f5aceec5f6b29e88e043d0bcc1a7a847f8146dc6face537512f44817b8b212c9700dc4e9f1a646e023b1f7c26d3b33fe987f5d6e628e4000343c387985f45", 0xac}, {&(0x7f0000004980)="868aabda5102f7eeca0705a712ea0951071749cf344052829daa37fab4b6a6979182f955655bf067e9d9173276fd7233acba174153b94929202fb09d1523e16b7aa0fd514f52bfc68102a0fadae6180ce89b1bbbd6bc8b9542d2de7269f862ca901e425b1a88460f60523b5820141a28f056b387e2074e1c04658fe502b9b5f1f49a6cb9d9019560f0c4887f205da9581f83bf953c889d1b55038a365af9408786ccc85aabd6b378045810cfb9a4c145972cd971a70b58026baedfa3bc1fab5b147c4ce057655e0b5139bfdbc83ea4fea65e635c244dc8f07ec01e623b4e9f5b899001980ce34e", 0xe7}, {&(0x7f0000004a80)="c502ca76fa716583ada31529b5e7c011ac4c458e6d086eddae5d354791dc7fdc67d0c3f0ac12595f0f91beebf298d4f3fbc94106544a4fa337a9efe74e4c8cb414453a0509d93126518d784c6c5ee6626d26c775c8db181b5d228f60cb5418", 0x5f}, {&(0x7f0000004e80)="5eb2e3b6951e8e636478046fc025b7f08650af0b5c2a976d6e60aa631e4148a55707445b8f62deaf50bd1a42ca2b9ca644410404691c86aa9739de86f16f9183fa1dcc3698a0a9c8db98c56d59d7d10dd7935ec1e23d474778c3bf4735554e1069f184edbea94e95b30a45bde90cb16f70cd40e99d9219fa19137ccf6dd9a2ddf78bc3296826ea166aef36a91855a4150f8b05d0caabf37fff5daf556ff8d4b83ee79019689e2e238dd3", 0xaa}, {&(0x7f0000004bc0)="256497b1532ac588550de25a1821f40e50e7b671740debb7a0257cfbdecc457f9557d83c624b7bffb9ca38794cf030a4a00d754dc0889b27bf4f1de1411793cd073f3571d106e628d141b6fc7a888bdb0d362065b1fcbeb1ff44422292a38fdcb0d77362e19a6a4040f9df665b66cf76c6cdcada90a1b723a5faccadc1e3480d553bfc5cfe9ed6de89b8430a4125041be25d12a3b674b1be815dda63e163feb5a10ca7a7dc8847d695f2f81a9a5e476ffad2abf4f09f475cfdf81e", 0xbb}], 0x6}, 0x401}], 0x6, 0x840) r3 = syz_open_dev$swradio(&(0x7f0000002cc0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002d00)={0x0, 0x3d, "6ef0c20249c4ed1b122c29575c00300445f2930a0aac6c436b69d57456e0b161489d885a7bafd3ba6b9c605c798ab36f226b43809a630ff4f4c94fd2b7"}, &(0x7f00000047c0)=0x45) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000004b00)={r4, 0x4, 0x9, [0x8, 0x8, 0xffffffffffffe004, 0x1, 0x5, 0x10001, 0xf11d, 0x200, 0x7]}, &(0x7f0000004b40)=0x1a) io_pgetevents(r2, 0x81, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={&(0x7f00000000c0)={0x7f}, 0x8}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000001500)={0x0, @speck128, 0x0, "fb02672f8134fcbe"}) 22:48:42 executing program 1: timer_create(0x1, &(0x7f0000000000)={0x0, 0x6, 0x7, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x800, 0x0) r2 = geteuid() getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x1, 0x1, 0x3, 0x10000, 0xffffffffffff9ad8, 0x1, {0x2, 0x800, 0x2, 0x5, 0x0, 0x2, 0x8, 0x0, 0x1766bf3, 0x20379aaf, 0x1000, r2, r3, 0x8, 0x8}}}, 0x90) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x103, 0x4, {0x1, 0x100000000, 0xffffffffffff76af, 0x9}}) 22:48:42 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xffffff7f) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:42 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = dup3(r0, r1, 0x80000) membarrier(0x0, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000000)) 22:48:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:42 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x8368, 0x4002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0x9, 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80400, 0x0) getsockname(r2, &(0x7f0000000280)=@can={0x1d, 0x0}, &(0x7f0000000300)=0x80) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000340)={r3, 0x1, 0x6, @random="6b9d840c24e4"}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x608, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x20000000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req3={0x200, 0x2, 0x8, 0x9, 0x4, 0x1000, 0x32}, 0x1c) r5 = signalfd(r1, &(0x7f0000000140), 0x12a) fsync(r5) 22:48:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:42 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x80, 0x8, 0x1}) 22:48:42 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x900) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:42 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) unshare(0x10000) 22:48:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x5}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3335.378397] syz-executor0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 3335.390490] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3335.395604] CPU: 0 PID: 4243 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3335.402865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3335.412219] Call Trace: [ 3335.414811] dump_stack+0x244/0x39d [ 3335.418435] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3335.423622] ? mark_held_locks+0x130/0x130 [ 3335.427862] ? mark_held_locks+0x130/0x130 [ 3335.432102] dump_header+0x27b/0xf72 [ 3335.435813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3335.441380] ? check_preemption_disabled+0x48/0x280 [ 3335.446402] ? pagefault_out_of_memory+0x197/0x197 [ 3335.451324] ? debug_smp_processor_id+0x1c/0x20 [ 3335.456016] ? perf_trace_lock+0x14d/0x7a0 [ 3335.460246] ? lock_is_held_type+0x210/0x210 [ 3335.464656] ? __lock_is_held+0xb5/0x140 [ 3335.468722] ? debug_smp_processor_id+0x1c/0x20 [ 3335.473394] ? perf_trace_lock+0x14d/0x7a0 [ 3335.477626] ? zap_class+0x640/0x640 [ 3335.481344] ? print_usage_bug+0xc0/0xc0 [ 3335.485407] ? lock_is_held_type+0x210/0x210 [ 3335.489812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3335.495360] ? find_held_lock+0x36/0x1c0 [ 3335.499431] ? mark_held_locks+0xc7/0x130 [ 3335.503570] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3335.508676] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3335.513810] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3335.518408] ? trace_hardirqs_on+0xbd/0x310 [ 3335.522728] ? kasan_check_read+0x11/0x20 [ 3335.526887] ? ___ratelimit+0x3b4/0x672 [ 3335.530858] ? trace_hardirqs_off_caller+0x310/0x310 [ 3335.535956] ? trace_hardirqs_on+0x310/0x310 [ 3335.540369] ? lock_downgrade+0x900/0x900 [ 3335.544509] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3335.549603] ? ___ratelimit+0x3b9/0x672 [ 3335.553569] ? idr_get_free+0xf70/0xf70 [ 3335.557530] ? _raw_spin_unlock_irq+0x27/0x80 [ 3335.562022] ? _raw_spin_unlock_irq+0x27/0x80 [ 3335.566527] oom_kill_process.cold.27+0x10/0x903 [ 3335.571288] ? _raw_spin_unlock_irq+0x27/0x80 [ 3335.575780] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3335.580372] ? oom_evaluate_task+0x540/0x540 [ 3335.584799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3335.590357] ? cgroup_procs_next+0x70/0x70 [ 3335.594602] ? _raw_spin_unlock_irq+0x60/0x80 [ 3335.599112] ? oom_badness+0xaa0/0xaa0 [ 3335.602992] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3335.607739] ? mem_cgroup_iter_break+0x30/0x30 [ 3335.612350] ? mark_held_locks+0xc7/0x130 [ 3335.616507] out_of_memory+0xa84/0x1430 [ 3335.620471] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3335.625075] ? kasan_check_read+0x11/0x20 [ 3335.629250] ? oom_killer_disable+0x3a0/0x3a0 [ 3335.633748] mem_cgroup_out_of_memory+0x15e/0x210 [ 3335.638593] ? memory_oom_group_write+0x160/0x160 [ 3335.643427] ? mem_cgroup_try_charge+0x627/0xe20 [ 3335.648194] ? page_counter_try_charge+0x1c1/0x220 [ 3335.653142] try_charge+0xda9/0x1700 [ 3335.656884] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3335.661809] ? kasan_check_read+0x11/0x20 [ 3335.665991] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3335.670666] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3335.676213] ? lock_page_memcg+0x350/0x350 [ 3335.680474] ? lock_acquire+0x1ed/0x520 [ 3335.684468] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3335.689829] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3335.695384] ? check_preemption_disabled+0x48/0x280 [ 3335.700424] ? kasan_check_read+0x11/0x20 [ 3335.704580] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3335.709848] ? rcu_softirq_qs+0x20/0x20 [ 3335.714094] mem_cgroup_try_charge+0x627/0xe20 [ 3335.718673] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3335.724203] ? mem_cgroup_protected+0xa60/0xa60 [ 3335.728868] ? shmem_getattr+0x2c0/0x2c0 [ 3335.732948] ? mark_held_locks+0xc7/0x130 [ 3335.737111] ? _raw_spin_unlock_irq+0x27/0x80 [ 3335.741599] ? _raw_spin_unlock_irq+0x27/0x80 [ 3335.746087] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3335.750678] ? trace_hardirqs_on+0xbd/0x310 [ 3335.754993] ? kasan_check_read+0x11/0x20 [ 3335.759133] ? trace_hardirqs_off_caller+0x310/0x310 [ 3335.764243] ? filemap_map_pages+0x1a20/0x1a20 [ 3335.768876] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 3335.773830] shmem_getpage_gfp+0x186b/0x4840 [ 3335.778246] ? shmem_add_to_page_cache+0x1950/0x1950 [ 3335.783346] ? activate_page+0x1040/0x1040 [ 3335.787578] ? zap_class+0x640/0x640 [ 3335.791284] ? kasan_check_read+0x11/0x20 [ 3335.795442] ? print_usage_bug+0xc0/0xc0 [ 3335.799534] ? rcu_softirq_qs+0x20/0x20 [ 3335.803542] ? find_held_lock+0x36/0x1c0 [ 3335.807603] ? mark_held_locks+0xc7/0x130 [ 3335.811766] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 3335.816950] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 3335.822133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3335.827675] ? page_mapping+0x5a2/0xa50 [ 3335.831655] ? __page_mapcount+0x580/0x580 [ 3335.835882] ? current_time+0x72/0x1b0 [ 3335.839790] ? trace_hardirqs_off_caller+0x310/0x310 [ 3335.844887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3335.850457] ? __set_page_dirty_no_writeback+0x3c9/0x6c0 [ 3335.855928] ? do_writepages+0x1a0/0x1a0 [ 3335.859986] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 3335.865167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3335.870715] ? timespec64_trunc+0xea/0x180 [ 3335.874957] ? inode_init_owner+0x340/0x340 [ 3335.879316] ? debug_smp_processor_id+0x1c/0x20 [ 3335.884017] ? timespec64_trunc+0x180/0x180 [ 3335.888346] ? do_writepages+0x1a0/0x1a0 [ 3335.892397] ? set_page_dirty+0x639/0x1030 [ 3335.896637] ? __writepage+0xe0/0xe0 [ 3335.900372] ? mark_held_locks+0x130/0x130 [ 3335.904608] ? __lock_acquire+0x62f/0x4c20 [ 3335.908865] ? print_usage_bug+0xc0/0xc0 [ 3335.912924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3335.918456] ? check_preemption_disabled+0x48/0x280 [ 3335.923466] ? debug_smp_processor_id+0x1c/0x20 [ 3335.928151] ? perf_trace_lock+0x14d/0x7a0 [ 3335.932389] ? mark_held_locks+0x130/0x130 [ 3335.936619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3335.942150] ? balance_dirty_pages_ratelimited+0x1f7/0x2370 [ 3335.947857] ? __lock_acquire+0x62f/0x4c20 [ 3335.952082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3335.957633] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3335.963176] ? unlock_page+0x2c2/0x4c0 [ 3335.967057] ? balance_dirty_pages+0x3800/0x3800 [ 3335.971804] ? zap_class+0x640/0x640 [ 3335.975528] ? print_usage_bug+0xc0/0xc0 [ 3335.979590] ? mark_held_locks+0x130/0x130 [ 3335.983818] ? lock_is_held_type+0x210/0x210 [ 3335.988241] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3335.993790] ? shmem_write_end+0x377/0x9d0 [ 3335.998016] ? zap_class+0x640/0x640 [ 3336.001720] ? shmem_unused_huge_scan+0x180/0x180 [ 3336.006563] ? mark_held_locks+0xc7/0x130 [ 3336.010707] ? memcpy+0x45/0x50 [ 3336.013988] ? memcpy_from_page+0xe8/0x110 [ 3336.018228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3336.023777] ? iov_iter_advance+0x306/0x13f0 [ 3336.028217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3336.033747] ? iov_iter_fault_in_readable+0x22a/0x450 [ 3336.038939] ? _copy_from_iter_flushcache+0xfc0/0xfc0 [ 3336.044126] shmem_write_begin+0x10a/0x1e0 [ 3336.048364] generic_perform_write+0x3aa/0x6a0 [ 3336.052947] ? add_page_wait_queue+0x400/0x400 [ 3336.057551] ? current_time+0x1b0/0x1b0 [ 3336.061527] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3336.066537] ? generic_write_check_limits+0x28d/0x370 [ 3336.071725] __generic_file_write_iter+0x26e/0x630 [ 3336.076643] ? iter_file_splice_write+0x260/0x1050 [ 3336.081573] ? direct_splice_actor+0x128/0x190 [ 3336.086154] generic_file_write_iter+0x34d/0x6b0 [ 3336.090917] ? __generic_file_write_iter+0x630/0x630 [ 3336.096019] do_iter_readv_writev+0x8b0/0xa80 [ 3336.100523] ? vfs_dedupe_file_range+0x700/0x700 [ 3336.105283] ? apparmor_file_permission+0x24/0x30 [ 3336.110136] ? rw_verify_area+0x118/0x360 [ 3336.114278] do_iter_write+0x185/0x5f0 [ 3336.118170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3336.123734] vfs_iter_write+0x77/0xb0 [ 3336.127559] iter_file_splice_write+0x90d/0x1050 [ 3336.132336] ? page_cache_pipe_buf_release+0x310/0x310 [ 3336.137682] ? rw_verify_area+0x118/0x360 [ 3336.141823] ? page_cache_pipe_buf_release+0x310/0x310 [ 3336.147101] direct_splice_actor+0x128/0x190 [ 3336.151516] splice_direct_to_actor+0x3ad/0x9d0 [ 3336.156189] ? pipe_to_sendpage+0x400/0x400 [ 3336.160538] ? do_splice_to+0x190/0x190 [ 3336.164535] ? security_file_permission+0x1c2/0x220 [ 3336.169566] ? rw_verify_area+0x118/0x360 [ 3336.173713] do_splice_direct+0x2d4/0x420 [ 3336.177856] ? splice_direct_to_actor+0x9d0/0x9d0 [ 3336.182696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3336.188226] ? __sb_start_write+0x1b2/0x370 [ 3336.192547] do_sendfile+0x62a/0xe20 [ 3336.196276] ? do_compat_pwritev64+0x1c0/0x1c0 [ 3336.200893] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3336.206433] ? _copy_from_user+0xdf/0x150 [ 3336.210587] __x64_sys_sendfile64+0x15d/0x250 [ 3336.215075] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 3336.219667] do_syscall_64+0x1b9/0x820 [ 3336.223571] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3336.228926] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3336.233851] ? trace_hardirqs_on_caller+0x310/0x310 [ 3336.238860] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3336.243869] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 3336.250523] ? __switch_to_asm+0x40/0x70 [ 3336.254571] ? __switch_to_asm+0x34/0x70 [ 3336.258637] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3336.263488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3336.268667] RIP: 0033:0x457669 [ 3336.271854] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3336.290746] RSP: 002b:00007f01054c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3336.298454] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457669 [ 3336.305712] RDX: 0000000020000040 RSI: 000000000000000c RDI: 0000000000000009 [ 3336.312978] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 3336.320237] R10: 0000001080005000 R11: 0000000000000246 R12: 00007f01054ca6d4 [ 3336.327506] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 00000000ffffffff [ 3336.337139] Task in /syz0 killed as a result of limit of /syz0 [ 3336.343334] memory: usage 307200kB, limit 307200kB, failcnt 1007575 [ 3336.349872] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3336.356647] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3336.362877] Memory cgroup stats for /syz0: cache:2312KB rss:136024KB rss_huge:57344KB shmem:2300KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:2292KB active_anon:136068KB inactive_file:0KB active_file:0KB unevictable:0KB [ 3336.384796] Memory cgroup out of memory: Kill process 2703 (syz-executor0) score 1106 or sacrifice child [ 3336.394572] Killed process 2703 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33556kB, shmem-rss:0kB [ 3336.406932] oom_reaper: reaped process 2703 (syz-executor0), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 3336.422195] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 3336.433725] syz-executor0 cpuset=syz0 mems_allowed=0 [ 3336.439153] CPU: 1 PID: 4202 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #374 [ 3336.446451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3336.455794] Call Trace: [ 3336.458376] dump_stack+0x244/0x39d [ 3336.462011] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3336.467204] dump_header+0x27b/0xf72 [ 3336.470914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3336.476485] ? check_preemption_disabled+0x48/0x280 [ 3336.481527] ? pagefault_out_of_memory+0x197/0x197 [ 3336.486457] ? debug_smp_processor_id+0x1c/0x20 [ 3336.491166] ? perf_trace_lock+0x14d/0x7a0 [ 3336.495397] ? lock_is_held_type+0x210/0x210 [ 3336.499800] ? __lock_is_held+0xb5/0x140 [ 3336.503858] ? debug_smp_processor_id+0x1c/0x20 [ 3336.508531] ? perf_trace_lock+0x14d/0x7a0 [ 3336.512773] ? zap_class+0x640/0x640 [ 3336.516482] ? print_usage_bug+0xc0/0xc0 [ 3336.520537] ? lock_is_held_type+0x210/0x210 [ 3336.524955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3336.530496] ? find_held_lock+0x36/0x1c0 [ 3336.534555] ? mark_held_locks+0xc7/0x130 [ 3336.538714] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3336.543808] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3336.548909] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3336.553485] ? trace_hardirqs_on+0xbd/0x310 [ 3336.557797] ? kasan_check_read+0x11/0x20 [ 3336.561939] ? ___ratelimit+0x3b4/0x672 [ 3336.565905] ? trace_hardirqs_off_caller+0x310/0x310 [ 3336.570998] ? trace_hardirqs_on+0x310/0x310 [ 3336.575399] ? lock_downgrade+0x900/0x900 [ 3336.579557] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3336.584937] ? ___ratelimit+0x3b9/0x672 [ 3336.588903] ? idr_get_free+0xf70/0xf70 [ 3336.592867] ? _raw_spin_unlock_irq+0x27/0x80 [ 3336.597366] ? _raw_spin_unlock_irq+0x27/0x80 [ 3336.601875] oom_kill_process.cold.27+0x10/0x903 [ 3336.606625] ? _raw_spin_unlock_irq+0x27/0x80 [ 3336.611137] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3336.615713] ? oom_evaluate_task+0x540/0x540 [ 3336.620124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3336.625681] ? cgroup_procs_next+0x70/0x70 [ 3336.630216] ? _raw_spin_unlock_irq+0x60/0x80 [ 3336.634719] ? oom_badness+0xaa0/0xaa0 [ 3336.638601] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3336.643374] ? mem_cgroup_iter_break+0x30/0x30 [ 3336.647970] ? mark_held_locks+0xc7/0x130 [ 3336.652134] out_of_memory+0xa84/0x1430 [ 3336.656101] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3336.660688] ? kasan_check_read+0x11/0x20 [ 3336.664887] ? oom_killer_disable+0x3a0/0x3a0 [ 3336.669386] mem_cgroup_out_of_memory+0x15e/0x210 [ 3336.674233] ? memory_oom_group_write+0x160/0x160 [ 3336.679078] ? mem_cgroup_try_charge+0x627/0xe20 [ 3336.683830] ? page_counter_try_charge+0x1c1/0x220 [ 3336.688753] try_charge+0xda9/0x1700 [ 3336.692470] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3336.697389] ? kasan_check_read+0x11/0x20 [ 3336.701529] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3336.706207] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3336.711754] ? lock_page_memcg+0x350/0x350 [ 3336.715996] ? lock_acquire+0x1ed/0x520 [ 3336.719965] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3336.725341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3336.730885] ? check_preemption_disabled+0x48/0x280 [ 3336.735896] ? kasan_check_read+0x11/0x20 [ 3336.740036] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3336.745320] ? rcu_softirq_qs+0x20/0x20 [ 3336.749332] mem_cgroup_try_charge+0x627/0xe20 [ 3336.753911] ? __anon_vma_prepare+0x325/0x6c0 [ 3336.758432] ? mem_cgroup_protected+0xa60/0xa60 [ 3336.763130] ? up_write+0x7b/0x220 [ 3336.766660] ? down_write_nested+0x130/0x130 [ 3336.771078] ? __anon_vma_prepare+0x353/0x6c0 [ 3336.775570] ? anon_vma_fork+0x820/0x820 [ 3336.779644] ? mark_held_locks+0x130/0x130 [ 3336.783881] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3336.789444] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 3336.794391] __handle_mm_fault+0x2854/0x5be0 [ 3336.798819] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3336.803658] ? lock_is_held_type+0x210/0x210 [ 3336.808059] ? vm_mmap_pgoff+0x222/0x2c0 [ 3336.812112] ? lock_downgrade+0x900/0x900 [ 3336.816274] ? zap_class+0x640/0x640 [ 3336.819991] ? zap_class+0x640/0x640 [ 3336.823722] ? userfaultfd_unmap_prep+0x660/0x660 [ 3336.828617] ? find_held_lock+0x36/0x1c0 [ 3336.832692] ? handle_mm_fault+0x42a/0xc70 [ 3336.836931] ? lock_downgrade+0x900/0x900 [ 3336.841070] ? check_preemption_disabled+0x48/0x280 [ 3336.846076] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3336.851001] ? kasan_check_read+0x11/0x20 [ 3336.855137] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3336.860406] ? rcu_softirq_qs+0x20/0x20 [ 3336.864369] ? trace_hardirqs_off_caller+0x310/0x310 [ 3336.869466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3336.875013] ? check_preemption_disabled+0x48/0x280 [ 3336.880079] handle_mm_fault+0x54f/0xc70 [ 3336.884146] ? __handle_mm_fault+0x5be0/0x5be0 [ 3336.888721] ? find_vma+0x34/0x190 [ 3336.892275] __do_page_fault+0x5e8/0xe60 [ 3336.896351] ? trace_hardirqs_off+0xb8/0x310 [ 3336.900755] do_page_fault+0xf2/0x7e0 [ 3336.904558] ? vmalloc_sync_all+0x30/0x30 [ 3336.908883] ? error_entry+0x70/0xd0 [ 3336.912588] ? trace_hardirqs_off_caller+0xbb/0x310 [ 3336.917590] ? trace_hardirqs_on_caller+0xc0/0x310 [ 3336.922513] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3336.927446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3336.932287] ? trace_hardirqs_on_caller+0x310/0x310 [ 3336.937312] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 3336.942770] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3336.947796] ? page_fault+0x8/0x30 [ 3336.951356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3336.956193] ? page_fault+0x8/0x30 [ 3336.959723] page_fault+0x1e/0x30 [ 3336.963192] RIP: 0033:0x40ed7f [ 3336.966383] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 3336.985272] RSP: 002b:0000000000a3fb10 EFLAGS: 00010206 [ 3336.990621] RAX: 00007f0105489000 RBX: 0000000000020000 RCX: 00000000004576ba [ 3336.997885] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 3337.005151] RBP: 0000000000a3fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 3337.012443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a3fcd0 [ 3337.019703] R13: 00007f01054a9700 R14: 000000000072c0ec R15: 000000000072c0ec [ 3337.030859] Task in /syz0 killed as a result of limit of /syz0 [ 3337.036923] memory: usage 305760kB, limit 307200kB, failcnt 1007581 [ 3337.043739] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3337.051057] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3337.057227] Memory cgroup stats for /syz0: cache:3104KB rss:133848KB rss_huge:55296KB shmem:2696KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:2736KB active_anon:133940KB inactive_file:372KB active_file:0KB unevictable:0KB 22:48:44 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00') 22:48:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:44 executing program 2: r0 = getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x200000000000) unshare(0x10000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40, 0x0) 22:48:44 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:44 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40002801}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4090) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x8) [ 3337.079245] Memory cgroup out of memory: Kill process 2924 (syz-executor0) score 1106 or sacrifice child [ 3337.089101] Killed process 2924 (syz-executor0) total-vm:70472kB, anon-rss:2212kB, file-rss:33556kB, shmem-rss:0kB [ 3337.101332] oom_reaper: reaped process 2924 (syz-executor0), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 22:48:44 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x1, 0x0) openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000000c0)=""/139, &(0x7f0000000180)=0x8b) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xff, 0x200000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000200)=""/48) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000001c0)={0x8, 0x1, 0xffffffffffffff80, 0x126c, 0x40, 0x10001}) 22:48:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x400, 0x10040) 22:48:44 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x80000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r2, 0x26f}, &(0x7f0000000280)=0x8) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x50040, 0x2) ioctl$RTC_WIE_ON(r3, 0x700f) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) unshare(0x10000) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x25) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/192) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x5) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 22:48:44 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = dup(0xffffffffffffffff) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/102, 0x66}], 0x6, &(0x7f00000013c0)=""/252, 0xfc}, 0x10000) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) 22:48:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x700}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:44 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x300000000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:44 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1c6b, 0x400000) sendfile(r0, r0, &(0x7f00000000c0), 0x731) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) sendfile(r0, r1, &(0x7f0000000080), 0x2) 22:48:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x81000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 22:48:44 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3) 22:48:44 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1000000000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:44 executing program 0: get_mempolicy(0x0, 0x0, 0xfffffffffffffffc, &(0x7f0000ffa000/0x3000)=nil, 0x0) 22:48:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:44 executing program 1: get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x0) 22:48:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000040)='selinux)\x00', 0x9, 0x3) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), 0x4) get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000ffb000/0x3000)=nil, 0x0) 22:48:44 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x1000000000000000) unshare(0x10000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10400, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000100)="b5defdeab2c6", &(0x7f0000000140)=""/167}, 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1}) 22:48:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:45 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090c0000000000000000000000020013000200000000000000000000000fcb731b0000000002000000e00000010000000000000000020001000000000000000002000000000000ffffffff000000000000000000000000000000000000"], 0x60}}, 0x0) r2 = signalfd4(r0, &(0x7f0000000140)={0xfff}, 0x8, 0x800) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7, 0x50000) signalfd4(r2, &(0x7f00000002c0)={0x3}, 0x8, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000200)) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000000)={0x10001, 0x9, 0x8001, 0x2}) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000300)) 22:48:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x7) 22:48:45 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xf) 22:48:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xffffff7f00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:45 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={r2, 0x80000, r1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:45 executing program 1: r0 = getpgrp(0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x800, 0x101) ptrace$setopts(0x4206, r0, 0xe1, 0x76) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffe000/0x1000)=nil, 0x5) r1 = memfd_create(&(0x7f0000000000)='em0\x00', 0x1) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x20, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x8, 0xd00) 22:48:45 executing program 4: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000e3c000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000feb000/0x4000)=nil, &(0x7f0000000000)="6403b9e18fb43031c4914f072f492998e168e5b51eef14901fd7926c09e85c737093cdb164bdf520a2b46dda2b9ce961776a172538cdd93be5500e0a201a9f22b417b96089acdea97eb75e4bb004", 0x4e, r0}, 0x68) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x3b9a, 0x80) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000140)={0x4, 0x1000000, "1a4c94d72be6598e6cf0097823205b45a0e9f47d9ebb32c7", {0x24000000000000, 0x7}}) r3 = shmget$private(0x0, 0x200000, 0x78000004, &(0x7f0000e00000/0x200000)=nil) shmctl$SHM_LOCK(r3, 0xb) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000280)={0x3b, 0x2c, 0x14, 0x19, 0x7, 0x5, 0x3, 0xbb, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x4) 22:48:45 executing program 0: get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x8, 0x2}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x9b, "42eed458510f5134bced7d8f8f5c815c648c1bca96e2d1562e6c9d378643e61f775ac4d765869f6e6877a91366d55dc27c5c2bde8e85db934a0e80b5f17768c9116be5d04bec8e7e33a8ad5a8aea5cf331e9b16510d4b8e0ddd55583ceeaba111643b8ebe220a432ab730c70e7210facd35d1747d241ad73724c6252467e18097245e7f3541b42edaada858636640a3295cf9af12f641c3b918a15"}, &(0x7f00000002c0)=0xa3) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r1, 0x5, 0x1, 0x5, 0x2, 0x7fffffff, 0x9, 0x3, {r2, @in={{0x2, 0x4e21, @broadcast}}, 0x1f, 0x7, 0x1, 0xfff, 0x7}}, &(0x7f00000003c0)=0xb0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 22:48:45 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100000000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:45 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x200, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3, 0xfffffffffffffff8, 0x0, 0x8e, 0x0, 0x1ff800, 0x21, 0x1, 0x8, 0x10001, 0x3ff, 0x7, 0x4, 0x9c0b, 0xffff, 0x1f, 0x7, 0x80000000, 0x4, 0x4, 0x3, 0x7, 0xfffffffffffffffe, 0x2, 0x200, 0x80000001, 0x5, 0xfffffffffffffff8, 0x400, 0x8, 0x40, 0x8, 0x20, 0x60b, 0x1, 0x1f, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x1, 0xfffffffffffffeff, 0x4, 0x5, 0xffff, 0x9, 0x3}, r0, 0x3, r1, 0xa) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000240)={{0x2, 0x80}, 0x2}, 0x10) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000fff000/0x1000)=nil, 0x5) socket$can_raw(0x1d, 0x3, 0x1) 22:48:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:45 executing program 2: getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) socket$pptp(0x18, 0x1, 0x2) 22:48:45 executing program 0: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = memfd_create(&(0x7f00000002c0)='\x00\'P\xaa\x14Xt\x90\xf1J\xcb\x1d2S\x15\xa0\xa0\xf30@R!\x88=4\x97\xaeD\xf4(\x91\f\x12\xeeE?HR{\xf4<\x801\x8de\x83\xb6\x99r\xb1%\xbexXi8\x04\xe9\xcdH\xdc~\'Y\xd0\x84\xbf\xab\xcaz D\xca\xf2F\xc6f\x8c\xfc\'X\xec\xc7M\x84>\xd3\xcf%\xc7\n\x87\x86\xc0\x8cO|9A\x8e\t\x04\xe0W\x02\xb9\b\xe0E#Z\xe8\xb5', 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0x1, 0x8, 0x4, 0x0, 0x80000001, 0x1], 0x7, 0x7, 0x3, 0x0, 0x2d8, 0x2, {0x7fff, 0x9, 0x3ff, 0x5a5, 0x9, 0x200, 0x8001, 0xa9ce, 0xfff, 0x4, 0x971, 0x80000001, 0xb647, 0x1, "cdc258eb69ad2238a8b2cc647008e2a788d86542acad798cc2a2ba0dc74fad09"}}) write$FUSE_LSEEK(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x6, {0x80000001}}, 0x18) 22:48:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4019}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:45 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x9000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:45 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/185, 0xb9) unshare(0x10000) 22:48:45 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:45 executing program 0: get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffd000/0x3000)=nil, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffffffffff8, 0xffffffff, 0x4, 0x100000000, 0x2e0f, 0x7, 0x1000, 0x2, 0x10000, 0x101, 0x7, 0xf0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x100000080, 0x0) 22:48:45 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) prctl$PR_MCE_KILL_GET(0x22) 22:48:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x9effffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:45 executing program 2: getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8581, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:45 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:45 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) [ 3338.316417] validate_nla: 13 callbacks suppressed [ 3338.316429] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:45 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000080)=0x3) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x1, 0x3, {0xa, 0x4e20, 0x1000, @ipv4={[], [], @broadcast}, 0x4}}}, 0x3a) 22:48:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:45 executing program 2: getpid() r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x120, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) 22:48:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:45 executing program 1: get_mempolicy(0x0, 0x0, 0x400000000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:45 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6a, 0x101102) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) 22:48:45 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3338.534285] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:45 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) getpgrp(r0) getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x930, 0x4) 22:48:45 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x19400000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:46 executing program 1: get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffa000/0x4000)=nil, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0xffffffffffffff79, 0x4) 22:48:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 22:48:46 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1}, 0x8) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdd, 0x181000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) 22:48:46 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5ea, 0x200) r3 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x4, 0x0, 0x10000, 0x3}) 22:48:46 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:46 executing program 2: getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000080)={0x0, 0xc10a, 0x3, 0x0, 0x0, [], [], [], 0x3, 0x7}) 22:48:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x40000) socket$inet6(0xa, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) [ 3338.783241] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:46 executing program 0: get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffd000/0x3000)=nil, 0xffffe) 22:48:46 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/234) 22:48:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x9effffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:46 executing program 0: get_mempolicy(0x0, 0x0, 0x7fffffffffffffc, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) 22:48:46 executing program 2: getpid() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0xffffffff, 0x9}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:46 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xd001010000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3338.986920] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/198) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x1940}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:46 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8403, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x7f) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x40010, r1, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2) 22:48:46 executing program 0: r0 = accept4$tipc(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x3}, 0x10) get_mempolicy(0x0, 0x0, 0x3ffffffbf, &(0x7f0000ff8000/0x3000)=nil, 0x1) [ 3339.111897] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:46 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x10, &(0x7f00000000c0)={&(0x7f0000000000)=""/183, 0xb7, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfffffffffffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x402880) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x80) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:48:46 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xd0010100) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:46 executing program 0: get_mempolicy(0x0, 0x0, 0x8001, &(0x7f0000ffd000/0x2000)=nil, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1000, 0x100) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0x80000000, 0x10001, 0x0, 0x9, 0x9, 0xf}}) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x100000001, &(0x7f0000ffa000/0x2000)=nil, 0x1) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)) [ 3339.225413] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:46 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, r0) r1 = socket$inet(0x2, 0x535d25a187354b46, 0x8) sendmmsg(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)=@rc={0x1f, {0x2, 0xac43, 0x4, 0x8, 0xffffffffffffffff, 0x10000}, 0x8}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="85bca8449bde75c2865fe3d3c6b691090ab7cfa71dcc2e301082f382463ea28de60d51bc5980eab343791e6084ecfe603c4ecfcd81a1e1d7443705c2313f5dc5874ce52d94a75b7ff21b215b2f72b699ea022084b7ae080ba8658599bbdf066df1c5887f96ccc760455acb75d095c94c8845aad2c3aefd2c1d5b2eacf5adf1e271a5eef6d5e9d9a100edf392a2551a4e5708167d39ecbb69f93bc09beb2947c5ba3e94de", 0xa4}], 0x1, &(0x7f0000000180)=[{0xd0, 0x11f, 0x5, "b6e20bd22635c5187bca834714a97e330f23862e46ad0f1daddffffa6c392f7eba22fbb03638c73176b9a0fc64e8ba471c5a2466676b0d2887f818e94809e2c5920afce3e811f388d1353f14995bf7d9551d884765009e7a12e547090a88e24836fa5c08d1c720242a5f40d5dd3d26c0b0145f92d9df078fe530f99954ad42cb52c6d849b9dc34e7bc9a9b06cd3574b64be23e9ca27cd64efde6c5eecadf995012e2f57317d3c770b710c936632c8517b3bb54419aa967d18dea9ce625"}, {0x98, 0x105, 0x8001, "a7c1072509f7334022ca3a40723ff901611f2bbe0e7437ffe163bf4d4ea3dba829b5fbdac16d01779e9e07e598d62a5334b0954d8eef7de5496cbc10a20527ebdafad7c4cd1f594e1e905e22836d9f380c4fd506fa3c281155ff6931cfb155d160560de7c9f510dd9a1e379c1b57f4152d6b1505df8ced70f36da3c018f1f724ba31b40569946d"}, {0xd8, 0x11, 0x9, "5a6789b8df4c27711a1683c54bad8ae7d1486ac01e5964655fd81d158b65f5b26db145e9753f55ecd30c4416641389a383cb4602fc453f9e2c8ab9bc989692e2398a513d3c8f94236c716a35340d205b0ba62a60cc3fa21faff5b5bc2aa8dcd22786b7e703925d969aa63e9a7f3d374ddedfa7f667109ad2cc61c347ccbaa9f2d5768f88c7eacf7777288d6c7fcf04804e464dbf6669f42a1b03bfefbf053cc5aa493ab289ca78a9dd2438c3c49e431c19bd302b1a5550c23f15e18da56c52af3185cd"}, {0x10, 0x117, 0x7}, {0x10, 0x10d, 0x3}], 0x260}, 0x1}], 0x1, 0x4000040) 22:48:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:46 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x300, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0x20, 0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0x0, 0x7fffffff}}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000000c0)={0x6, 0x2, 0x5, {0x3, 0x200, 0x8, 0x7f}}) 22:48:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x16b4, 0x0, 0x3, 0x1, 0x3, 0x3f}, &(0x7f0000000080)=0x20) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x18}) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:46 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:46 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 22:48:46 executing program 0: get_mempolicy(0x0, 0x0, 0x400000000, &(0x7f0000ffb000/0x3000)=nil, 0x1) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffff, &(0x7f0000ffe000/0x1000)=nil, 0x2) [ 3339.403511] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:46 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x200100) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x200, 0xffffffffffffffe0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'teql0\x00', {0x2, 0x4e20, @multicast2}}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x8001}}, 0x18) 22:48:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ff9000/0x3000)=nil, 0x9a9, 0x5, 0x2, &(0x7f0000ffc000/0x2000)=nil, 0x3829}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:46 executing program 0: r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:46 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x82) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) getgroups(0x8, &(0x7f0000000240)=[0x0, 0xee00, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) fchownat(r0, &(0x7f00000000c0)='./file0\x00', r2, r3, 0x800) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000300)=0x1000080, 0x4) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000280)={0x3, "a83fcc1d980fb77ab59fe8c721dadd7de918d262d49e680bc3968a89da46d36a", 0x1, 0x1}) [ 3339.559879] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:47 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() unshare(0x10000) 22:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:47 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x101d0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:47 executing program 1: get_mempolicy(0x0, 0x0, 0x800, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x20, "c1c46d", "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"}}, 0x110) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:47 executing program 0: inotify_init1(0x80800) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) [ 3339.744782] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:47 executing program 1: get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ff8000/0x4000)=nil, 0x6) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0xa42) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x0, 0xb}}, 0x20) ioprio_get$uid(0x3, r0) 22:48:47 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:47 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x9) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:47 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x4000, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000100)={0x10001, 0x8, 0x5, 0x0, 0x0, 0x6}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/107) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0xa) 22:48:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x6, 0x9, 0x40}) shmget$private(0x0, 0x13000, 0x80, &(0x7f0000fed000/0x13000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r1 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x75, @ipv4={[], [], @local}, 0x2}}, 0x3, 0x20}, &(0x7f0000000040)=0x90) fcntl$setstatus(r1, 0x4, 0x42000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2}, &(0x7f00000001c0)=0x8) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x4) 22:48:47 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10010) [ 3339.963701] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:47 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4) 22:48:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6aadc320, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=',/\\wlan1-*}vmnet1{\x00', 0xffffffffffffffff}, 0x30) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3ff, 0x10002) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400207) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x181440, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x18882, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x400, {0x38, 0x1, 0x1}, 0x10, r1, r2, 0x47, 0x100000001, 0x0, 0x9, 0x3ff, 0x8, 0x8, 0xd0c, 0x8, 0x0, 0x2, 0x1, 0x7, 0x6, 0x1}}, 0xa0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) 22:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:47 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:47 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000004340)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) unshare(0x10000) 22:48:47 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2a101, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xbea) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x1, 0x43b5, 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0xc2, &(0x7f00000011c0)=""/194, 0x5f, &(0x7f00000012c0)=""/95}) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/208) 22:48:47 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x3, 0x7000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3340.212298] QAT: Invalid ioctl [ 3340.223277] QAT: Invalid ioctl 22:48:47 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000680)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000480)=""/135, 0x87}], 0x8, &(0x7f00000005c0)=""/131, 0x83}, 0x12000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000800)={0x4, &(0x7f00000007c0)=[{0x101, 0x4, 0x1, 0x2}, {0x5, 0x0, 0x3, 0x7fffffff}, {0x1, 0x7, 0x10000000000}, {0x3ff, 0x200, 0x2, 0x80}]}, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000840)=@get={0x1, &(0x7f00000006c0)=""/138}) 22:48:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0xb064d6398b40db0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000400)={@dev={0xfe, 0x80, [], 0x12}, 0x6, 0xd92c9ab5f572fc37, 0xff, 0x8, 0x6, 0x80000000}, 0x20) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000440)={0x2, 0x8000000}) r3 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000000)={0x7ff, 0x195b, 0x4}) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000001c0)={0x6, 0xfffffffffffffe22, 0xfa00, {{0x4, 0x400, "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", 0x8d, 0x3495, 0x7f, 0x8, 0x23, 0xfffffffffffff9c3, 0x0, 0x1}, r4}}, 0x120) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x400, 0x7, 0x8000}, 0x4) 22:48:47 executing program 0: get_mempolicy(0x0, 0x0, 0x6010, &(0x7f0000ffa000/0x4000)=nil, 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x8140) sendfile(r0, r0, &(0x7f0000000480), 0x88) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="dbe31140a63fa7c8c69b1e5d951f326f9b046f56dff70ab544f823cd", 0x1c}, {&(0x7f0000000200)="3c89566d7a013414831a8671ccdf", 0xe}, {&(0x7f0000000240)="49677c40d6c4bb37cfca1d0d6b3791d30d8e139577f4776aab45b45ab75c45cbe1af497680f155eac681c558ba44ae75d821165b14083c59a873aa03d863cea8f2dda0996c4c68e893c46561d2227bc87f2392ebe1fb3a2f2be7b16641b1a065d18166bcce0c6cedb21a0b3f3aa266fab5acc76ba1fe8caa25b25428028142200f42689bcfa7d8b22136b2f0656fc4068da5807858b65b27e932fc7abfe4764d4d7b41f16e4dd2d8ac2b7744547a37f1b7ec01838bddc0f5d80b8c5d577f88", 0xbf}, {&(0x7f0000000300)="a97e8586f73e58218d03c2df7342fc7f5bc14b78a978b0b49b83471ee9decace1bffa90d2958c453c1bfb71784fd48ecbe58b5fa7e71d7c3faa3f3cdc7aa0b54be336865162e75f829714c59c1243b19dfdc6cd19a0230a46f8f9837806cced04037ddf47ead6c290dd5fc7177eb6f196968aa1ec87e956d8b6fe32c50d086ca7a95b21d01f582f41ffa48c75f3a4f35626cc55e2b0a8f38d7112174b13f3e978c1b4a8c9ea824f11071d78c3b43dc040c10a039b11986e999558b9f0b112a8049f5737210ac09f0760c", 0xca}], 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fadvise64(r0, 0x0, 0x5, 0x3) mq_unlink(&(0x7f0000000440)='\x00') perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x125, 0x9, 0x5, 0x5, 0x0, 0x100, 0x40218, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7, 0xeec, 0x7, 0xc00000, 0x800, 0x401, 0x401, 0x2, 0x100000001, 0x100, 0x80000001, 0x813e, 0x234, 0xfffffffffffffff8, 0xffff, 0x5, 0x9, 0x8, 0x0, 0x2, 0xff, 0x6, 0x408000000000, 0x8b, 0x0, 0x9, 0x1, @perf_config_ext={0x1000, 0xffffffffffff84f8}, 0x8169, 0x8001, 0x0, 0x5, 0x3, 0x4, 0x1}, r1, 0x8, r0, 0xa) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) 22:48:47 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3f00000000000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:47 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb4989f6ef0d664e9}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1400) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)) recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/142, 0x8e, 0x21, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x890}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44) clone(0x100000, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) write$P9_RSTAT(r1, 0x0, 0x0) r3 = getpgid(0x0) ptrace$peek(0x2, r3, &(0x7f0000000740)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000580)={0x6, 0x34, 0xb, 0x1b, 0x0, 0x0, 0x5, 0xef, 0x1}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000140)={{0x0, 0x8}, {0xfffffffffffffff9, 0x1}, 0x400, 0x4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0x50, &(0x7f00000006c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)=r5, 0x4) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2) 22:48:47 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 22:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x8, 0x807, 0xb8) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x4, 0x7}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x8c, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:47 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/19) 22:48:47 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xffffffff00000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:48 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$getown(r0, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:48 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x2) 22:48:48 executing program 0: get_mempolicy(0x0, 0x0, 0x800000000000001, &(0x7f0000ffa000/0x4000)=nil, 0x0) 22:48:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:48 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xeffdffff) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:48 executing program 1: get_mempolicy(0x0, 0x0, 0x2000000000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:48 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:48 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvfrom$inet(r0, &(0x7f0000000000)=""/175, 0xaf, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) getcwd(&(0x7f0000000100)=""/4096, 0x1000) unshare(0x10000) 22:48:48 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) bind$vsock_dgram(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) clone(0x200, &(0x7f0000000000)="79fc62862ab861bd95a5703111373e9aa642ec2c918933f2beb090185da560218d4cc4b8aaf88d8c435374c0493fb4f38de9995d51707351cfb771df39311f4bb0fde4c0f976bbca68ea47b6ff347374b2a3386015e8fc", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="d75640375350") msgctl$IPC_RMID(r2, 0x0) 22:48:48 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:48 executing program 0: lookup_dcookie(0x0, &(0x7f0000000000)=""/81, 0x51) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x430000) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x4}, 0x4) r1 = semget$private(0x0, 0x0, 0x108) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000100)=""/142) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffa000/0x1000)=nil, 0x6) 22:48:48 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x2}, 0xb) 22:48:48 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x300) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xffffff7f00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) shmget$private(0x0, 0x2000, 0x405, &(0x7f0000ffb000/0x2000)=nil) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) getpgid(0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{}, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x401}) fallocate(r4, 0x0, 0x0, 0x73e0) 22:48:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:48 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 22:48:49 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e80)={'veth0_to_bridge\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000001f80)={@local, 0x0}, &(0x7f0000001fc0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002000)={0x0, @empty, @loopback}, &(0x7f0000002040)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002080)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000002180)=0xe8) recvmmsg(r0, &(0x7f0000007200)=[{{&(0x7f00000021c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002240)=""/221, 0xdd}, {&(0x7f0000002340)=""/141, 0x8d}, {&(0x7f0000002400)}, {&(0x7f0000002440)=""/124, 0x7c}, {&(0x7f00000024c0)=""/72, 0x48}], 0x5, &(0x7f00000025c0)=""/255, 0xff}, 0x1ff}, {{&(0x7f00000026c0)=@pppol2tp, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002740)=""/237, 0xed}, {&(0x7f0000002840)=""/235, 0xeb}, {&(0x7f0000002940)=""/59, 0x3b}, {&(0x7f0000002980)=""/176, 0xb0}, {&(0x7f0000002a40)=""/68, 0x44}], 0x5}, 0x5}, {{&(0x7f0000002b40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002bc0)=""/182, 0xb6}, {&(0x7f0000002c80)=""/182, 0xb6}], 0x2, &(0x7f0000002d80)=""/194, 0xc2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/50, 0x32}, {&(0x7f0000002ec0)=""/51, 0x33}, {&(0x7f0000002f00)=""/169, 0xa9}, {&(0x7f0000002fc0)=""/110, 0x6e}], 0x4, &(0x7f0000003080)=""/218, 0xda}, 0x3}, {{&(0x7f0000003180)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003280)=[{&(0x7f0000003200)=""/97, 0x61}], 0x1, &(0x7f00000032c0)=""/52, 0x34}, 0x72a}, {{&(0x7f0000003300)=@alg, 0x80, &(0x7f0000005600)=[{&(0x7f0000003380)=""/4096, 0x1000}, {0xfffffffffffffffd}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/109, 0x6d}, {&(0x7f0000005400)=""/241, 0xf1}, {&(0x7f0000005500)=""/240, 0xf0}], 0x6, &(0x7f0000005680)=""/92, 0x5c}, 0x6cc}, {{&(0x7f0000005700)=@sco, 0x80, &(0x7f0000006980)=[{&(0x7f0000005780)=""/226, 0xe2}, {&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/81, 0x51}, {&(0x7f0000006900)=""/66, 0x42}], 0x4, &(0x7f00000069c0)=""/7, 0x7}}, {{&(0x7f0000006a00)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000006a80)=""/90, 0x5a}, {&(0x7f0000006b00)=""/104, 0x68}, {&(0x7f0000006b80)=""/239, 0xef}, {&(0x7f0000006c80)=""/193, 0xc1}, {&(0x7f0000006d80)=""/97, 0x61}, {&(0x7f0000006e00)=""/29, 0x1d}, {&(0x7f0000006e40)=""/241, 0xf1}, {&(0x7f0000006f40)=""/65, 0x41}], 0x8, &(0x7f0000007040)=""/165, 0xa5}, 0xd8a}, {{&(0x7f0000007100)=@nfc_llcp, 0x80, &(0x7f00000071c0)=[{&(0x7f0000007180)=""/38, 0x26}], 0x1}}], 0x9, 0x10100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000007480)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000074c0)={0x0, @multicast2, @multicast1}, &(0x7f0000007500)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000007580)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000007680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000076c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000007b40)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000007c40)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000007c80)={@dev, @multicast1, 0x0}, &(0x7f0000007cc0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000009380)={0x11, 0x0, 0x0}, &(0x7f00000093c0)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000009400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009440)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000009480)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000009500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000009540)=0x14) accept4(r0, &(0x7f0000009640)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000096c0)=0x80, 0x80800) accept$packet(0xffffffffffffffff, &(0x7f00000097c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009800)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000009840)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000009940)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f000000a140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f000000a100)={&(0x7f0000009980)={0x768, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x164, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x100, 0xbf7d, 0x0, 0xfffffffffffffffb}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x2, 0x5, 0x0, 0x4}, {0x8, 0x5, 0xc3e5}, {0x5, 0x7c, 0x6, 0x1}, {0x2, 0x788, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x3, 0x2, 0x5}, {0x4, 0x0, 0x6, 0x6}]}}}]}}, {{0x8, 0x1, r7}, {0xc4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r9}, {0x150, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0xe5, 0x1, 0x101}, {0x5a, 0xffffffff80000000, 0x1, 0x9}, {0x6, 0x6, 0x3, 0x9}, {0x0, 0x4, 0x800, 0x8001}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x88, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x100000001, 0x8, 0x5, 0xfffffffffffff4aa}, {0x5, 0xc76, 0x1000, 0xffffffffffffffdb}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r15}, {0x264, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff6a}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r19}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}]}}, {{0x8, 0x1, r22}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff8001}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:49 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:49 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r0, 0x0) flistxattr(r0, &(0x7f0000000040)=""/67, 0x43) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:49 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x401) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0xe) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) 22:48:49 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 22:48:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x3ca5) 22:48:49 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4080c0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) prctl$PR_SET_SECUREBITS(0x1c, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:48:49 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 22:48:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:49 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xfffffdef) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:49 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000240)={r3, 0x31}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x6f, 0x2, 0x7, 0x8, 0x0, 0x4, 0x801, 0xe, 0x10c, 0x1, 0x401, 0x5, 0x0, 0xffffffffffff8001, 0x100, 0x4, 0x101, 0x0, 0xd3, 0x1, 0xffffffffffffffff, 0x9, 0x4, 0x9, 0xfffffffffffff203, 0x9, 0x7fff, 0x100, 0x2, 0x73, 0x80000001, 0x7, 0x1, 0x0, 0x4, 0x6, 0x0, 0x9, 0x5, @perf_bp={&(0x7f00000000c0), 0x5}, 0x9100, 0x0, 0x80, 0x2, 0xcb6, 0x5, 0x7f}, r1, 0x0, r0, 0x1) io_setup(0x4, &(0x7f0000000180)=0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x2) io_destroy(r4) 22:48:50 executing program 2: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x1ffff, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000680)={{0x7, @addr=0x29c2e573}, 0x8, 0x7, 0xff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x0, 0x1) r4 = perf_event_open(0x0, 0x0, 0x0, r3, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300), 0x4) mkdirat(r5, &(0x7f0000000400)='./file0\x00', 0x80) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0xffffffff, 0x2, 0x80, 0xcb0}, 'syz1\x00', 0x39}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x3ff, 0x0, 0x10002, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000100)={0x19, r7}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f00000006c0)={0x4, r7}) ioprio_set$uid(0x3, r8, 0xfffffffffffffffa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x20, 0x40, 0x0, 0x4, 0x0, 0x8, 0x1, 0x2, 0x4, 0x3, 0x73cd}, 0xb) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000340)={0x5, r7}) setxattr$security_smack_entry(&(0x7f0000000640)='./file0\x00', &(0x7f0000000740)='security.SMACK64IPIN\x00', &(0x7f0000000780)='/dev/vcsa#\x00', 0xb, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x4, 0x44, 0x6}) unshare(0x10001) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000004c0), 0x1) r9 = fcntl$dupfd(r1, 0x406, r4) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000140)) sysfs$3(0x3) setsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000440), &(0x7f0000000480)=0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xfffffffffffffffa, 0x9, 0x80, 0xa0fe, 0x0, 0x2, 0x2000, 0x8, 0x1, 0x101, 0x2, 0x1, 0x3ff, 0xf7, 0x7fffffff, 0x6, 0x8, 0x8, 0x1, 0x7, 0x9, 0x941, 0xfff, 0x682, 0xffffffffffffff7f, 0xfffffffffffffffe, 0x7fff, 0x5, 0xffffffff00000, 0x4, 0x9, 0x4, 0x4, 0x7, 0x6, 0xe2, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x11, 0xfe}, 0x200, 0x100000001, 0x1f, 0x5, 0x4, 0x2e000000000000, 0x7fffffff}, r0, 0xffffffffffffffff, r9, 0x0) 22:48:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:50 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3f00) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:50 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x220300, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='io\x00') r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xa2f, 0x400) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x401}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x982b, 0x4000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/syncsion\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800012}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x220, 0x70bd2b, 0x100025dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 22:48:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x0) 22:48:50 executing program 0: get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffa000/0x2000)=nil, 0x6) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) 22:48:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:50 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x121600000, 0x2, [0x2, 0x9d6b]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0xffffffff}, 0x8) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:50 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:50 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0xd) 22:48:50 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x100, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x8, "4f321fc96d8b4270"}, &(0x7f0000000080)=0x2c) 22:48:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:50 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x1a1080, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000500)={0x5e9c, 0xff, 0x400, 0x3578, 0x1}) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1ff, 0x41a080) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)="ccfe2aa95bcf50ced5b25ff117b6a10a804b322ec6a87995a4a0603c2edbf9497e34c63e19ace1714ae8829b09f010703018352bff9da52850e9015e697e8fce807b7a6a1bfd09c41342903d841ed65a2c65f0ba5637af5c7fc570a95838495577c676b8be1c7f77132919e15fb0ea7ce3679ef4d189321ff1c90c90de6510c115f148235627fccc90135a89336d94556e372d0deebcca5481070e5eae0193ecd9d8cb492948a6e5f87b04191d3472cd6a1a7ada25e1aaaf518b57e64fc48c6575cb9279663f79dcc06a715e5f1cf5dcfa405cd661cd6623d89d1063d8e74f42aa74c8f638a3d395", 0xe8}, {&(0x7f0000000280)="8eec5844b6dbdbe3a7c57bfebaa20fd29b6cbcb86589b81e244251361416065d17350cfe6b8cf8cb4a57553d41bebdadb55ea42485d12b3e08565f4db9995a527508759737b02365dc8b3bae723e6f57783b00f0a12503d122249e411c41a7e1a8040d6c694e5866ed8bafe11fafd6741f31adbe2c7746", 0x77}, {&(0x7f0000000300)="94800bf9f972a2c298ebfb55159ce5bbb59e47e4202381e6d752934f9c6b8c51c094125919d6fd", 0x27}, {&(0x7f0000000340)="17829ae68a079a5035c11fe9a3d0129a53f67c4fb580346c855e87", 0x1b}, {&(0x7f0000000380)="98d658a1d3e1b0b37b0da4e80166231cbca8c4564cc5c64a64c759f0f2d409e473ce24b8f83329765225e82edf1cafe3df3633358837dbb7c2b7c090886fb52a414cfc4f7efee78af3d24bf01912081d2002c9b03015ad7a2217ca03fd9ce6d0ed65729d7a7516c1a9de26828a49a51c8407c77b6a7ecb", 0x77}], 0x5, 0x0, 0x152, 0x1}, 0x20000000) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:klogd_var_run_t:s0\x00', 0x25, 0x1) 22:48:50 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) fanotify_mark(r1, 0x80, 0x1, r3, &(0x7f0000000040)='./file0\x00') ptrace(0x8, r2) 22:48:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x0) 22:48:50 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xeffdffff00000000) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:50 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10800) 22:48:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) sync() add_key$user(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x231) 22:48:50 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_CAPBSET_DROP(0x18, 0x6) r1 = socket$inet6(0xa, 0x5, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x68, 0x2, 0x9, 0x9, 0x80, 0x80, 0x70000000, 0x2481, 0xffffffffffffffff, 0x1, 0x100000000, 0xffffffffffffff77, 0x1, 0x5, 0xfffffffffffff996]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x80000000, 0x3}, &(0x7f0000000180)=0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:50 executing program 0: get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffffff) [ 3343.354790] validate_nla: 16 callbacks suppressed [ 3343.354800] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:50 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xfe, 0x3ffe) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000100)={{0x3, @name="8645aed2d26479f62be7783c3c8f6275aee50aee4f4b5cb0e53685a6c2f0e804"}, 0x8, 0xfffffffffffff801, 0x1}) 22:48:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x1940000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:50 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1) socket$packet(0x11, 0x0, 0x300) [ 3343.549517] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x600000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:51 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000100)={0x8, 0xffffffff, 0x831, 0x80, 0x8001, 0x1000, 0x80000001}) io_setup(0x0, 0x0) [ 3343.705834] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 22:48:51 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x22000000) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1a) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) 22:48:51 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x5d, @loopback, 0x5}, {0xa, 0x4e22, 0x0, @mcast1}, 0x5, [0x200, 0x884, 0xe256, 0x9, 0x4, 0x9, 0x1000, 0x6]}, 0x5c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000300)=0x84) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0xa9, @dev={0xfe, 0x80, [], 0x13}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="3c823133c35917fa1d3c7580c4262ffa598a6ab6b2cbac285ac380ffcf3e1516f2938d95f8dff2400f665887e0f82d63986d867da7ed0a6b142a8cdd037c4de8f31ef4f9eb90b269300d3aec728e1b80d3e40d40195e3a6e3c8ae5bd71f249e8bc4363bbfd47556b7ad842f182c89e269a882998819256e490ddd1f8fb7db5890cb77efc", 0x84}, {&(0x7f00000001c0)="a1a8e0d4e42c3962b7cb2b21bb17165a040776bf21645db58d16cefab7cc7ba33ed6c1cb", 0x24}], 0x2, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff8, 0x0, 0x2, 0x20, 0x1f, 0x9, 0x3a4c8000000, 0x8239, r2}}, @init={0x18, 0x84, 0x0, {0xfffffffffffffffb, 0x80000001, 0x6, 0x436}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x19}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0xb8, 0xc4}, 0x4040811) inotify_init1(0x800) 22:48:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3343.845861] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 22:48:51 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)=')posix_acl_access:system]', 0xfffffffffffffff8) keyctl$reject(0x13, r0, 0x1b, 0x20003f, r1) 22:48:51 executing program 2: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010000b0ffbbcc02500000049982c22753eb5a96f9a880000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100677265000c0002000800040000000000"], 0x38}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) unshare(0x10000) getpgid(r0) 22:48:51 executing program 3: epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xff, 0xfffffffffffffffd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x6c54, 0x24, 0x3, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000029bd7000fbdbdf2503000000080004000500000008000600060000000800059e95336cb44c00ffffff7f3000030008000500ac1414aa14000600fe80000000000000000000000000000e08000000000000000800080000000000"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x8804) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/118) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x1f4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) memfd_create(&(0x7f0000000480)='system*\x00', 0x2) mlock2(&(0x7f000016d000/0x4000)=nil, 0x4000, 0xfffffffffffffffe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="b8172d000000040000000000000000000000040000000000000025f8a24a00000000050000170000000000000000009f2493dc8afc455b1292ea0ea092e497505bacf490a7b105e19fa20a5f433b7385109b425f63aa79aaa163c1baa576bb1a7212bf1e7591f21424adfd95281256501a52c84e739cc5d2c4d60e080d52e1e20a161db95402314fde9d941c8cf06116dca46d6c4a1e7580f108f8f205dc2e5f20b0387ed324a86eafd01b1bd8a676c234c01e52731d423613c70815457c9424f1f58427a74ff7878a2b20c114788c1b9e6312e1a501b02dcb37f9ca62a791c6b894af135f23eaf783e1d39a4ae9f483fba7b268f1c408ac0e8f7215fd3bc212dffb533c2ec2087c12c93de8e4ef9455804e4c46fa6bb1d5f79f6923caaa37bd11a291d552f7339392f72150453b678e2a0219dc7625524b0ce05cef21159af7ddad67d4febb644686475ba0fedf945a43ee0e6165b9bc02ac782b77a34b5c5052b773e57889724e9ab84371b3f659f3255071d380b9a88c0b9acf072897b1f5e1edab17bcc8899b095830de358aa490bf16310c89416c7f86ff33c12d58f9801c2f22cf9444aaefe48a4f962cf6fcad09ee00"], 0x1b3) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000a00)=ANY=[@ANYRES64=r0]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x6, 0x402200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:48:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) [ 3344.092873] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3344.139219] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 3344.141269] __nla_parse: 5 callbacks suppressed [ 3344.141281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor2'. 22:48:51 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x1000000002) r0 = syz_open_dev$vbi(&(0x7f0000001540)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001580)={0x0, @in6={{0xa, 0x4e23, 0xfffffffffffffffb, @local, 0x7ff}}, 0x3, 0xfff, 0x8, 0x204000}, &(0x7f0000001640)=0x98) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001680)={r1, 0x551}, &(0x7f00000016c0)=0x8) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x6b2, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000300)={'veth1\x00', 0xdce3}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000200)={r3, 0x401}, 0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x102, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB="860000005799ae975fa6c2aef3ec5624728138f93f41d4230fa0c1deddd2bd955c970deffba9dd4d301e3de7fcc043bd9db1f821654c79b9882a8d9f705ce3b00c8d3f506bbe8ac9fd85cf7f2b2c84e6948ebe133c696b0edee4e6dcf5f8f26a2db6c8e59b9a7de25246e7eacf1fcbeb8b9810dd2f29d4c50caab6000000000000000000000000000000"]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0xfffffffffffffe01, 0x1, 0x10000, 0x9, r3}, &(0x7f0000000280)=0x10) [ 3344.263436] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3344.311521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor2'. [ 3344.320575] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 22:48:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf0ffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) quotactl(0x0, 0x0, 0x0, 0x0) [ 3344.363573] syz-executor1 cpuset=syz1 mems_allowed=0 [ 3344.369369] CPU: 0 PID: 5019 Comm: syz-executor1 Not tainted 4.20.0-rc6+ #374 [ 3344.376665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3344.386025] Call Trace: [ 3344.388629] dump_stack+0x244/0x39d [ 3344.392272] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3344.397476] ? mark_held_locks+0x130/0x130 [ 3344.401725] ? mark_held_locks+0x130/0x130 [ 3344.405981] dump_header+0x27b/0xf72 22:48:51 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) tkill(r0, 0x1b) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x20208, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) [ 3344.409718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3344.415284] ? check_preemption_disabled+0x48/0x280 [ 3344.420335] ? pagefault_out_of_memory+0x197/0x197 [ 3344.425277] ? debug_smp_processor_id+0x1c/0x20 [ 3344.429970] ? perf_trace_lock+0x14d/0x7a0 [ 3344.434248] ? lock_is_held_type+0x210/0x210 [ 3344.438695] ? __lock_is_held+0xb5/0x140 [ 3344.442784] ? debug_smp_processor_id+0x1c/0x20 [ 3344.447473] ? perf_trace_lock+0x14d/0x7a0 [ 3344.451727] ? zap_class+0x640/0x640 [ 3344.455468] ? print_usage_bug+0xc0/0xc0 [ 3344.459541] ? lock_is_held_type+0x210/0x210 22:48:51 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) tee(r0, r1, 0x1ff, 0x6) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2400) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x49}) [ 3344.459567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3344.459589] ? find_held_lock+0x36/0x1c0 [ 3344.459616] ? mark_held_locks+0xc7/0x130 [ 3344.459636] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3344.459651] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3344.459671] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3344.492630] ? trace_hardirqs_on+0xbd/0x310 [ 3344.493056] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3344.496963] ? kasan_check_read+0x11/0x20 [ 3344.496982] ? ___ratelimit+0x3b4/0x672 [ 3344.497004] ? trace_hardirqs_off_caller+0x310/0x310 [ 3344.517637] ? trace_hardirqs_on+0x310/0x310 [ 3344.522062] ? lock_downgrade+0x900/0x900 [ 3344.526230] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3344.531376] ? ___ratelimit+0x3b9/0x672 [ 3344.535411] ? idr_get_free+0xf70/0xf70 [ 3344.539400] ? _raw_spin_unlock_irq+0x27/0x80 [ 3344.543916] ? _raw_spin_unlock_irq+0x27/0x80 [ 3344.548459] oom_kill_process.cold.27+0x10/0x903 [ 3344.553238] ? _raw_spin_unlock_irq+0x27/0x80 [ 3344.557757] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3344.562375] ? oom_evaluate_task+0x540/0x540 [ 3344.566816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3344.572383] ? cgroup_procs_next+0x70/0x70 [ 3344.576638] ? _raw_spin_unlock_irq+0x60/0x80 [ 3344.582604] ? oom_badness+0xaa0/0xaa0 [ 3344.586505] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3344.591280] ? mem_cgroup_iter_break+0x30/0x30 [ 3344.595895] ? mark_held_locks+0xc7/0x130 [ 3344.600077] out_of_memory+0xa84/0x1430 [ 3344.604065] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3344.608664] ? kasan_check_read+0x11/0x20 22:48:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) writev(r0, &(0x7f0000002440)=[{&(0x7f0000000340)="38ad1717fe8c23564dbbdc9da202154fb9a0960878c51e30", 0x18}], 0x1) [ 3344.612826] ? oom_killer_disable+0x3a0/0x3a0 [ 3344.617366] mem_cgroup_out_of_memory+0x15e/0x210 [ 3344.622224] ? memory_oom_group_write+0x160/0x160 [ 3344.627081] ? mem_cgroup_try_charge+0x627/0xe20 [ 3344.631866] ? page_counter_try_charge+0x1c1/0x220 [ 3344.636823] try_charge+0xda9/0x1700 [ 3344.640560] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3344.645504] ? kasan_check_read+0x11/0x20 [ 3344.649677] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3344.654375] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3344.659937] ? lock_page_memcg+0x350/0x350 22:48:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:52 executing program 2: getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xbb4, 0x48580) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400201) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) [ 3344.664196] ? lock_acquire+0x1ed/0x520 [ 3344.668192] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3344.673573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3344.679210] ? check_preemption_disabled+0x48/0x280 [ 3344.679234] ? kasan_check_read+0x11/0x20 [ 3344.679251] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3344.679266] ? rcu_softirq_qs+0x20/0x20 [ 3344.679299] mem_cgroup_try_charge+0x627/0xe20 [ 3344.679321] ? mem_cgroup_protected+0xa60/0xa60 [ 3344.707009] ? do_raw_spin_unlock+0xa7/0x330 [ 3344.711430] ? do_raw_spin_trylock+0x270/0x270 [ 3344.716032] ? _raw_spin_unlock+0x2c/0x50 [ 3344.720187] ? __split_huge_pmd+0x43c/0xa70 [ 3344.724530] ? __put_compound_page+0x96/0xe0 [ 3344.728950] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3344.734506] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 3344.739453] wp_page_copy+0x520/0x2500 [ 3344.743350] ? __lock_acquire+0x62f/0x4c20 [ 3344.747593] ? rcu_softirq_qs+0x20/0x20 [ 3344.751588] ? follow_pfn+0x2e0/0x2e0 [ 3344.755404] ? __split_huge_pmd+0xa70/0xa70 [ 3344.759734] ? mark_held_locks+0x130/0x130 [ 3344.763984] ? __kernel_text_address+0xd/0x40 [ 3344.768489] ? unwind_get_return_address+0x61/0xa0 [ 3344.773428] ? __save_stack_trace+0x8d/0xf0 [ 3344.777765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3344.783326] ? check_preemption_disabled+0x48/0x280 [ 3344.788355] ? debug_smp_processor_id+0x1c/0x20 [ 3344.793034] ? perf_trace_lock+0x14d/0x7a0 [ 3344.797278] ? debug_smp_processor_id+0x1c/0x20 [ 3344.801956] ? perf_trace_lock+0x14d/0x7a0 [ 3344.806202] ? lock_is_held_type+0x210/0x210 [ 3344.810621] ? lock_is_held_type+0x210/0x210 [ 3344.815041] ? __access_remote_vm+0x347/0x710 [ 3344.819546] ? mem_rw.isra.16+0x411/0x640 [ 3344.823704] ? do_iter_read+0x4a3/0x650 [ 3344.827682] ? vfs_readv+0x175/0x1c0 [ 3344.831400] ? do_preadv+0x1cc/0x280 [ 3344.835122] ? zap_class+0x640/0x640 [ 3344.838850] ? lock_unpin_lock+0x4a0/0x4a0 [ 3344.843097] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3344.848639] ? mm_get_huge_zero_page+0x153/0x6a0 [ 3344.853404] ? __phys_addr+0xa6/0x120 [ 3344.857219] ? find_held_lock+0x36/0x1c0 [ 3344.861299] ? do_wp_page+0x518/0x2920 [ 3344.865290] ? lock_downgrade+0x900/0x900 [ 3344.869445] ? do_huge_pmd_anonymous_page+0x167b/0x2040 [ 3344.874822] ? print_usage_bug+0xc0/0xc0 [ 3344.878902] ? kasan_check_read+0x11/0x20 [ 3344.883061] ? do_raw_spin_unlock+0xa7/0x330 [ 3344.887476] ? do_raw_spin_trylock+0x270/0x270 [ 3344.892086] ? __pte_alloc_kernel+0x220/0x220 [ 3344.896592] ? shrink_huge_zero_page_scan+0x170/0x170 [ 3344.901804] do_wp_page+0x520/0x2920 [ 3344.905530] ? __lock_acquire+0x62f/0x4c20 [ 3344.909786] ? finish_mkwrite_fault+0x650/0x650 [ 3344.914479] ? mark_held_locks+0x130/0x130 [ 3344.918724] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3344.923756] ? __lock_acquire+0x62f/0x4c20 [ 3344.928014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3344.933574] ? mark_held_locks+0x130/0x130 [ 3344.937816] ? lock_is_held_type+0x210/0x210 [ 3344.942237] ? huge_pmd_set_accessed+0x4b0/0x4b0 [ 3344.946998] ? zap_class+0x640/0x640 [ 3344.950716] ? __lock_is_held+0xb5/0x140 [ 3344.954795] ? zap_class+0x640/0x640 [ 3344.958524] ? mark_held_locks+0x130/0x130 [ 3344.962780] ? __lock_is_held+0xb5/0x140 [ 3344.966858] ? __account_cfs_rq_runtime+0x790/0x790 [ 3344.971887] ? find_held_lock+0x36/0x1c0 [ 3344.975961] ? print_usage_bug+0xc0/0xc0 [ 3344.980034] ? print_usage_bug+0xc0/0xc0 [ 3344.984106] ? lock_downgrade+0x900/0x900 [ 3344.988269] ? kasan_check_read+0x11/0x20 [ 3344.992425] ? do_raw_spin_unlock+0xa7/0x330 [ 3344.996843] ? do_raw_spin_trylock+0x270/0x270 [ 3345.001438] ? __lock_acquire+0x62f/0x4c20 [ 3345.005683] ? lock_acquire+0x1ed/0x520 [ 3345.009668] ? __handle_mm_fault+0x1fac/0x5be0 [ 3345.014267] ? kasan_check_read+0x11/0x20 [ 3345.018419] ? do_raw_spin_lock+0x14f/0x350 [ 3345.022749] ? rwlock_bug.part.2+0x90/0x90 [ 3345.027022] ? zap_class+0x640/0x640 [ 3345.030747] ? handle_mm_fault+0x42a/0xc70 [ 3345.035005] __handle_mm_fault+0x3bef/0x5be0 [ 3345.039432] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3345.044284] ? lock_is_held_type+0x210/0x210 [ 3345.048703] ? print_usage_bug+0xc0/0xc0 [ 3345.052782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.058355] ? check_preemption_disabled+0x48/0x280 [ 3345.063394] ? zap_class+0x640/0x640 [ 3345.067114] ? zap_class+0x640/0x640 [ 3345.070847] ? find_held_lock+0x36/0x1c0 [ 3345.074924] ? handle_mm_fault+0x42a/0xc70 [ 3345.079170] ? lock_downgrade+0x900/0x900 [ 3345.083342] ? check_preemption_disabled+0x48/0x280 [ 3345.088372] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3345.093308] ? kasan_check_read+0x11/0x20 [ 3345.097465] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3345.102746] ? rcu_softirq_qs+0x20/0x20 [ 3345.106735] ? trace_hardirqs_off_caller+0x310/0x310 [ 3345.111862] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3345.117405] ? check_preemption_disabled+0x48/0x280 [ 3345.122438] handle_mm_fault+0x54f/0xc70 [ 3345.126509] ? __handle_mm_fault+0x5be0/0x5be0 [ 3345.131107] ? find_vma+0x34/0x190 [ 3345.134660] __do_page_fault+0x5e8/0xe60 [ 3345.138740] do_page_fault+0xf2/0x7e0 [ 3345.142563] ? vmalloc_sync_all+0x30/0x30 [ 3345.146726] ? error_entry+0x76/0xd0 [ 3345.150450] ? trace_hardirqs_off_caller+0xbb/0x310 [ 3345.155477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3345.160329] ? trace_hardirqs_on_caller+0x310/0x310 [ 3345.165363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3345.170224] page_fault+0x1e/0x30 [ 3345.173686] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 3345.179578] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 3345.198485] RSP: 0018:ffff88811d4ef948 EFLAGS: 00010206 [ 3345.203854] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 00000000000000c0 [ 3345.211131] RDX: 0000000000001000 RSI: ffff888136f0df40 RDI: 0000000020200000 [ 3345.218403] RBP: ffff88811d4ef980 R08: 0000000000000000 R09: 0000000000000040 [ 3345.225679] R10: ffffed1026de1bff R11: ffff888136f0dfff R12: 00000000202000c0 [ 3345.233211] R13: 00000000201ff0c0 R14: ffff888136f0d000 R15: 00007ffffffff000 [ 3345.240552] ? _copy_to_user+0xf6/0x110 [ 3345.244539] mem_rw.isra.16+0x450/0x640 [ 3345.248531] ? proc_pid_stack+0x430/0x430 [ 3345.252684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3345.258232] ? _copy_from_user+0xdf/0x150 [ 3345.262400] ? security_file_permission+0x1c2/0x220 [ 3345.267432] mem_read+0x52/0x70 [ 3345.270759] do_iter_read+0x4a3/0x650 [ 3345.274593] vfs_readv+0x175/0x1c0 [ 3345.278149] ? compat_rw_copy_check_uvector+0x440/0x440 [ 3345.283527] ? rcu_pm_notify+0xc0/0xc0 [ 3345.287434] ? fget_raw+0x20/0x20 [ 3345.290901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3345.296457] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3345.302018] do_preadv+0x1cc/0x280 [ 3345.305567] ? do_readv+0x310/0x310 [ 3345.309209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.314762] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3345.320149] ? trace_hardirqs_off_caller+0x310/0x310 [ 3345.325265] __x64_sys_preadv+0x9a/0xf0 [ 3345.329256] do_syscall_64+0x1b9/0x820 [ 3345.333151] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3345.338527] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3345.343469] ? trace_hardirqs_on_caller+0x310/0x310 [ 3345.348494] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3345.353533] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 3345.360207] ? __switch_to_asm+0x40/0x70 [ 3345.364280] ? __switch_to_asm+0x34/0x70 [ 3345.368369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3345.373227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3345.378423] RIP: 0033:0x457669 [ 3345.381626] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3345.400528] RSP: 002b:00007f664a3c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 3345.408247] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457669 [ 3345.415517] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000004 [ 3345.422796] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3345.430073] R10: 000000002000107c R11: 0000000000000246 R12: 00007f664a3c26d4 [ 3345.437345] R13: 00000000004c39bb R14: 00000000004d63c8 R15: 00000000ffffffff [ 3345.446400] Task in /syz1 killed as a result of limit of /syz1 [ 3345.452691] memory: usage 307196kB, limit 307200kB, failcnt 2261 [ 3345.471330] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3345.478148] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3345.537268] Memory cgroup stats for /syz1: cache:972KB rss:259892KB rss_huge:239616KB shmem:128KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:260032KB inactive_file:8KB active_file:0KB unevictable:1200KB [ 3345.582619] Memory cgroup out of memory: Kill process 21976 (syz-executor1) score 1106 or sacrifice child [ 3345.593012] Killed process 21976 (syz-executor1) total-vm:70472kB, anon-rss:2204kB, file-rss:33556kB, shmem-rss:0kB [ 3345.624960] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 3345.658526] syz-executor1 cpuset=syz1 mems_allowed=0 [ 3345.664424] CPU: 1 PID: 5008 Comm: syz-executor1 Not tainted 4.20.0-rc6+ #374 [ 3345.671712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3345.681086] Call Trace: [ 3345.683707] dump_stack+0x244/0x39d [ 3345.687386] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3345.692608] ? mark_held_locks+0x130/0x130 [ 3345.696874] ? mark_held_locks+0x130/0x130 [ 3345.701144] dump_header+0x27b/0xf72 [ 3345.704895] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.710485] ? check_preemption_disabled+0x48/0x280 [ 3345.716511] ? pagefault_out_of_memory+0x197/0x197 [ 3345.721469] ? debug_smp_processor_id+0x1c/0x20 [ 3345.726169] ? perf_trace_lock+0x14d/0x7a0 [ 3345.730443] ? lock_is_held_type+0x210/0x210 [ 3345.734955] ? __lock_is_held+0xb5/0x140 [ 3345.739051] ? debug_smp_processor_id+0x1c/0x20 [ 3345.743751] ? perf_trace_lock+0x14d/0x7a0 [ 3345.748022] ? zap_class+0x640/0x640 [ 3345.751905] ? print_usage_bug+0xc0/0xc0 [ 3345.756005] ? lock_is_held_type+0x210/0x210 [ 3345.760454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.766031] ? find_held_lock+0x36/0x1c0 [ 3345.770131] ? mark_held_locks+0xc7/0x130 [ 3345.774443] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3345.779568] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3345.784703] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3345.789323] ? trace_hardirqs_on+0xbd/0x310 [ 3345.793666] ? kasan_check_read+0x11/0x20 [ 3345.797843] ? ___ratelimit+0x3b4/0x672 [ 3345.801841] ? trace_hardirqs_off_caller+0x310/0x310 [ 3345.806978] ? trace_hardirqs_on+0x310/0x310 [ 3345.811426] ? lock_downgrade+0x900/0x900 [ 3345.815622] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3345.820754] ? ___ratelimit+0x3b9/0x672 [ 3345.824777] ? idr_get_free+0xf70/0xf70 [ 3345.828918] ? _raw_spin_unlock_irq+0x27/0x80 [ 3345.833509] ? _raw_spin_unlock_irq+0x27/0x80 [ 3345.838041] oom_kill_process.cold.27+0x10/0x903 [ 3345.842872] ? _raw_spin_unlock_irq+0x27/0x80 [ 3345.847394] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3345.852009] ? oom_evaluate_task+0x540/0x540 [ 3345.856446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.862029] ? cgroup_procs_next+0x70/0x70 [ 3345.866293] ? _raw_spin_unlock_irq+0x60/0x80 [ 3345.870831] ? oom_badness+0xaa0/0xaa0 [ 3345.874786] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3345.879585] ? mem_cgroup_iter_break+0x30/0x30 [ 3345.884200] ? mark_held_locks+0xc7/0x130 [ 3345.888382] out_of_memory+0xa84/0x1430 [ 3345.892375] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3345.896975] ? kasan_check_read+0x11/0x20 [ 3345.901158] ? oom_killer_disable+0x3a0/0x3a0 [ 3345.905712] mem_cgroup_out_of_memory+0x15e/0x210 [ 3345.910573] ? memory_oom_group_write+0x160/0x160 [ 3345.915438] ? mem_cgroup_try_charge+0x627/0xe20 [ 3345.920512] ? page_counter_try_charge+0x1c1/0x220 [ 3345.925592] try_charge+0xda9/0x1700 [ 3345.929318] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3345.934263] ? kasan_check_read+0x11/0x20 [ 3345.938430] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3345.943128] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3345.948685] ? finish_task_switch+0x1f4/0x910 [ 3345.953216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.958866] ? lock_page_memcg+0x350/0x350 [ 3345.963179] ? lock_acquire+0x1ed/0x520 [ 3345.967174] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3345.972584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.978152] ? check_preemption_disabled+0x48/0x280 [ 3345.983196] ? kasan_check_read+0x11/0x20 [ 3345.987509] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3345.993088] ? rcu_softirq_qs+0x20/0x20 [ 3345.997394] ? zap_class+0x640/0x640 [ 3346.001161] ? check_preemption_disabled+0x48/0x280 [ 3346.006283] mem_cgroup_try_charge+0x627/0xe20 [ 3346.010959] ? mem_cgroup_protected+0xa60/0xa60 [ 3346.015723] ? __lock_acquire+0x62f/0x4c20 [ 3346.019998] ? check_preemption_disabled+0x48/0x280 [ 3346.025058] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3346.030051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3346.035662] ? PageHuge+0x183/0x2b0 [ 3346.039307] ? vma_kernel_pagesize+0xb0/0xb0 [ 3346.043778] ? mark_held_locks+0x130/0x130 [ 3346.048062] ? find_get_entry+0xaae/0x1120 [ 3346.052356] __add_to_page_cache_locked+0x793/0x1840 [ 3346.057522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3346.063188] ? find_lock_entry+0x8e0/0x8e0 [ 3346.067628] ? count_shadow_nodes+0x670/0x670 [ 3346.072188] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3346.077345] ? zap_class+0x640/0x640 [ 3346.081116] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3346.086668] ? zap_class+0x640/0x640 [ 3346.090479] ? check_preemption_disabled+0x48/0x280 [ 3346.095530] ? zap_class+0x640/0x640 [ 3346.099371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3346.104955] ? check_preemption_disabled+0x48/0x280 [ 3346.110005] ? __lock_is_held+0xb5/0x140 [ 3346.114139] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3346.119205] ? __alloc_pages_nodemask+0xb87/0xea0 [ 3346.124120] add_to_page_cache_lru+0x355/0xdb0 [ 3346.128736] ? add_to_page_cache_locked+0x40/0x40 [ 3346.133685] ? copy_page_from_iter+0x8f0/0x8f0 [ 3346.138331] ? kasan_check_read+0x11/0x20 [ 3346.142495] ? do_raw_spin_unlock+0xa7/0x330 [ 3346.146950] ? zap_class+0x640/0x640 [ 3346.150693] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3346.156249] ? unlock_page+0x2c2/0x4c0 [ 3346.160195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3346.165784] ? copy_page_to_iter+0x5a4/0x1000 [ 3346.170315] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3346.175886] ? alloc_pages_current+0x17b/0x350 [ 3346.180537] ? __page_cache_alloc+0x191/0x5c0 [ 3346.185082] ? force_page_cache_readahead+0x340/0x340 [ 3346.190323] ? simple_readpage+0x1b1/0x230 [ 3346.194642] ? generic_perform_write+0x6a0/0x6a0 [ 3346.199490] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3346.204813] ? kasan_check_write+0x14/0x20 [ 3346.209074] generic_file_read_iter+0x1c40/0x2d70 [ 3346.213969] ? filemap_write_and_wait_range+0xd0/0xd0 [ 3346.219199] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3346.224783] ? free_one_page+0x1700/0x1700 [ 3346.229070] ? mark_held_locks+0x130/0x130 [ 3346.233374] ? mark_held_locks+0x130/0x130 [ 3346.237637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3346.243250] ? check_preemption_disabled+0x48/0x280 [ 3346.248450] ? debug_smp_processor_id+0x1c/0x20 [ 3346.253166] ? perf_trace_lock+0x14d/0x7a0 [ 3346.257483] ? lock_is_held_type+0x210/0x210 [ 3346.261930] ? lock_is_held_type+0x210/0x210 [ 3346.266362] ? zap_class+0x640/0x640 [ 3346.270124] ? print_usage_bug+0xc0/0xc0 [ 3346.274205] ? zap_class+0x640/0x640 [ 3346.277966] ? print_usage_bug+0xc0/0xc0 [ 3346.282082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3346.287690] ? find_held_lock+0x36/0x1c0 [ 3346.291835] ? mark_held_locks+0xc7/0x130 [ 3346.296008] ? account_kernel_stack+0x2cf/0x3e0 [ 3346.300804] ? account_kernel_stack+0x2cf/0x3e0 [ 3346.305543] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3346.310187] ? trace_hardirqs_on+0xbd/0x310 [ 3346.314550] ? remove_entity_load_avg+0x228/0x2e0 [ 3346.319525] ? __free_pages+0x149/0x190 [ 3346.323638] ? free_unref_page+0x960/0x960 [ 3346.327976] ? kasan_check_write+0x14/0x20 [ 3346.332293] ? finish_task_switch+0x615/0x910 [ 3346.336852] ? __switch_to_asm+0x40/0x70 [ 3346.341013] ? preempt_notifier_register+0x200/0x200 [ 3346.346173] ? __switch_to_asm+0x34/0x70 [ 3346.350276] ? __switch_to_asm+0x34/0x70 [ 3346.354421] ? __switch_to_asm+0x40/0x70 [ 3346.358577] ? __switch_to_asm+0x34/0x70 [ 3346.362703] ? __switch_to_asm+0x40/0x70 [ 3346.366895] ? __switch_to_asm+0x34/0x70 [ 3346.371091] ? __switch_to_asm+0x40/0x70 [ 3346.375169] ? __switch_to_asm+0x34/0x70 [ 3346.379276] ? __switch_to_asm+0x34/0x70 [ 3346.383422] ? __switch_to_asm+0x40/0x70 [ 3346.387559] ? __switch_to_asm+0x34/0x70 [ 3346.391681] ? __switch_to_asm+0x40/0x70 [ 3346.395940] ? __switch_to_asm+0x34/0x70 [ 3346.400193] ? __switch_to_asm+0x40/0x70 [ 3346.404416] ? __schedule+0x8d7/0x21d0 [ 3346.408377] ? loop1+0x1b1/0x892 [ 3346.411842] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3346.417409] ? iov_iter_init+0xe5/0x210 [ 3346.421443] __vfs_read+0x6ac/0x9b0 [ 3346.425314] ? vfs_copy_file_range+0xb90/0xb90 [ 3346.429987] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3346.435544] ? __kernel_fpu_end+0xce/0x1b0 [ 3346.439874] ? fpstate_init+0x160/0x160 [ 3346.444012] integrity_kernel_read+0x14b/0x200 [ 3346.448681] ? integrity_inode_free+0x320/0x320 [ 3346.453444] ? sha256_avx2_update+0x2c/0x40 [ 3346.457932] ima_calc_file_hash_tfm+0x38d/0x450 [ 3346.462646] ? ima_calc_field_array_hash_tfm.isra.4+0x6e0/0x6e0 [ 3346.468809] ? mutex_trylock+0x2b0/0x2b0 [ 3346.473056] ? lock_is_held_type+0x210/0x210 [ 3346.477538] ? kasan_slab_alloc+0x12/0x20 [ 3346.481749] ? integrity_inode_get+0x56/0x230 [ 3346.486300] ? zap_class+0x640/0x640 [ 3346.490164] ? do_sys_open+0x568/0x700 [ 3346.494155] ? __x64_sys_open+0x7e/0xc0 [ 3346.498205] ? do_syscall_64+0x1b9/0x820 [ 3346.502330] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3346.507788] ? zap_class+0x640/0x640 [ 3346.511514] ? kasan_check_read+0x11/0x20 [ 3346.515683] ? find_held_lock+0x36/0x1c0 [ 3346.519762] ima_calc_file_hash+0x222/0x570 [ 3346.524110] ima_collect_measurement+0x619/0x730 [ 3346.528884] ? ima_get_action+0xa0/0xa0 [ 3346.532890] process_measurement+0x11fd/0x1bf0 [ 3346.537493] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 3346.542788] ? find_held_lock+0x36/0x1c0 [ 3346.546875] ? lock_downgrade+0x900/0x900 [ 3346.551036] ? check_preemption_disabled+0x48/0x280 [ 3346.556067] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3346.561003] ? kasan_check_read+0x11/0x20 [ 3346.565158] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3346.570441] ? rcu_softirq_qs+0x20/0x20 [ 3346.574438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3346.579986] ? refcount_sub_and_test_checked+0x203/0x310 [ 3346.585810] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 3346.591269] ? aa_capable+0xe30/0xe30 [ 3346.595089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3346.600631] ? do_dentry_open+0x945/0x1250 [ 3346.604879] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3346.610425] ? apparmor_task_getsecid+0x96/0xd0 [ 3346.615105] ima_file_check+0xe5/0x130 [ 3346.619004] ? process_measurement+0x1bf0/0x1bf0 [ 3346.623766] ? inode_owner_or_capable+0x17f/0x1f0 [ 3346.628642] path_openat+0x134a/0x5150 [ 3346.632536] ? lock_is_held_type+0x210/0x210 [ 3346.636946] ? unwind_dump+0x190/0x190 [ 3346.640859] ? path_lookupat.isra.43+0xc00/0xc00 [ 3346.645618] ? unwind_get_return_address+0x61/0xa0 [ 3346.650556] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3346.655582] ? expand_files.part.8+0x571/0x9a0 [ 3346.660176] ? find_held_lock+0x36/0x1c0 [ 3346.664251] ? __alloc_fd+0x347/0x6e0 [ 3346.668061] ? lock_downgrade+0x900/0x900 [ 3346.672217] ? getname+0x19/0x20 [ 3346.675645] ? kasan_check_read+0x11/0x20 [ 3346.679806] ? do_raw_spin_unlock+0xa7/0x330 [ 3346.684219] ? do_raw_spin_trylock+0x270/0x270 [ 3346.688825] ? __lock_is_held+0xb5/0x140 [ 3346.692890] ? __check_object_size+0xb1/0x782 [ 3346.697404] ? _raw_spin_unlock+0x2c/0x50 [ 3346.701582] ? __alloc_fd+0x347/0x6e0 [ 3346.705411] do_filp_open+0x255/0x380 [ 3346.709238] ? may_open_dev+0x100/0x100 [ 3346.713235] ? get_unused_fd_flags+0x122/0x1a0 [ 3346.717826] ? __alloc_fd+0x6e0/0x6e0 [ 3346.721649] do_sys_open+0x568/0x700 [ 3346.725386] ? filp_open+0x80/0x80 [ 3346.728940] ? trace_hardirqs_off_caller+0x310/0x310 [ 3346.734058] __x64_sys_open+0x7e/0xc0 [ 3346.737874] do_syscall_64+0x1b9/0x820 [ 3346.741767] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3346.747149] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3346.752082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3346.756939] ? trace_hardirqs_on_caller+0x310/0x310 [ 3346.761965] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3346.766988] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3346.772025] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3346.776885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3346.782080] RIP: 0033:0x457669 [ 3346.785288] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3346.804204] RSP: 002b:00007f664a3e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3346.811923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 3346.819204] RDX: 0000000000000000 RSI: 000000000014103e RDI: 0000000020000200 [ 3346.826483] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3346.833757] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664a3e36d4 [ 3346.841035] R13: 00000000004f173f R14: 00000000004d5498 R15: 00000000ffffffff [ 3346.963203] Task in /syz1 killed as a result of limit of /syz1 [ 3346.975909] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3346.995436] memory: usage 307200kB, limit 307200kB, failcnt 2338 [ 3347.004579] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3347.022975] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3347.039522] Memory cgroup stats for /syz1: cache:1104KB rss:260048KB rss_huge:237568KB shmem:128KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:260116KB inactive_file:8KB active_file:0KB unevictable:1264KB 22:48:54 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:54 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) fallocate(r0, 0x12, 0x2, 0xffffffffffffff72) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x1011, r0, 0x0) [ 3347.424227] Memory cgroup out of memory: Kill process 26690 (syz-executor1) score 1106 or sacrifice child [ 3347.448528] Killed process 26690 (syz-executor1) total-vm:70604kB, anon-rss:2212kB, file-rss:33548kB, shmem-rss:0kB [ 3347.538735] audit: type=1800 audit(1544914134.884:280): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor1" name="bus" dev="ramfs" ino=652335 res=0 [ 3347.546908] oom_reaper: reaped process 5050 (syz-executor1), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 22:48:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 22:48:54 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@in={0x2, 0x0, @empty}, &(0x7f0000000140)=0x80, 0x80800) sendto$unix(r0, &(0x7f0000000180)="f05777fa9626e652b87090d2b7751533e38d588d9d69160f4872624d17f3ce15ac7b655c7d801e6ccd7bed5811c91e5fb4d6f4be7d8e07072b87e98f4fd0e25e", 0x40, 0x800, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000800)={0xa, 0x401, 0x1, @mcast1, 0x4}, 0x1c) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000003c0)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x2) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000002c0)={0x41, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r4 = socket$inet6(0xa, 0x803, 0xfba) r5 = socket$inet6(0xa, 0x80807, 0x3fc) r6 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r4, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000580)=0x80) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400, 0x0}, &(0x7f0000000300)=0x20) r8 = syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000700)={r7, @in6={{0xa, 0x4e24, 0x8, @remote, 0x30000000}}, 0x3, 0xd179, 0x575, 0x2, 0x1}, &(0x7f0000000340)=0x98) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000880)=ANY=[], 0x0) accept4$inet6(r5, &(0x7f00000007c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000800)=0xffffffffffffff13, 0x80000) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) r9 = syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x9, 0x40000) writev(r9, &(0x7f0000000600)=[{&(0x7f00000005c0)}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x5d0, 0x2f8, 0x0, 0x3e8, 0x0, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x4, &(0x7f00000001c0), {[{{@ipv6={@mcast1, @empty, [0xffffff00, 0x0, 0x0, 0xff0000ff], [0xffffffff, 0x0, 0xffffffff], 'teql0\x00', 'yam0\x00', {0xff}, {0xff}, 0x1e, 0x3, 0x4, 0x4}, 0x0, 0x1d0, 0x2f8, 0x0, {}, [@common=@inet=@recent1={0x108, 'recent\x00', 0x0, {0xffffffff, 0x80000001, 0x1, 0x1, 'syz1\x00', 0x7, [0x0, 0xff, 0xffffffff, 0xffffff00]}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:tape_device_t:s0\x00'}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x11}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffff00], 'gretap0\x00', 'bcsf0\x00', {0xff}, {0xff}, 0xff, 0x4, 0x1, 0x78}, 0x0, 0xc8, 0xf0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0x7, 0x7f}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x47, 0xfffffffffffffffc}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0xa000000000000000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) socket$nl_xfrm(0x10, 0x3, 0x6) 22:48:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:54 executing program 4: 22:48:54 executing program 2: getpid() r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5ea, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x37, {{0xa, 0x4e24, 0x3, @loopback, 0x10000}}}, 0x88) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x110) unshare(0x10000) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x1) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000017010007002e2f66696c6430"], 0x10) 22:48:54 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="99b40be81a8c", @dev={[], 0xf}, [], {@generic={0x0, "119380fb6cce20cfef8048587d5ca1d213c5a76d0f6b3f45fabdcb9876f679a3c9058d820df78bd468d0c944e42113656198c6d59b8fd6e5946029ec0a5034e98d6b2c31db9f58ff845d8e3d0f271a540f4ae2ae33077e479c8cc644a80e0805d09902938dcbecf96f6e2b7cb33e455a"}}}, &(0x7f0000000080)={0x1, 0x4, [0xe4e, 0x622, 0x56, 0xf45]}) [ 3347.577943] audit: type=1800 audit(1544914134.914:281): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor1" name="bus" dev="ramfs" ino=652371 res=0 22:48:55 executing program 4: [ 3347.642103] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:55 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0xfffffffffffffffc}}, 0x20) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x4a2, 0x0, 0xff, 0x6, 0x1c, 0x82}, 0x20) 22:48:55 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x4, 0x4) unshare(0x10000) 22:48:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x200) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000000)={{0x0, @name="ef0c23498e5ebc16aed5e57b116b53c1706b10b8d59ed8a238aaa4ac7b2c233b"}, 0x8, 0x5}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0x40000000, 0x8, "283e022018b6f4aa58ebf128c811e0d238f31806f8b42592ad46826b8f6d7a07", 0x1, 0x1f, 0x0, 0x68, 0x97, 0x5, 0x4, 0x2, [0x2, 0xcefd, 0x7ed, 0x20]}) 22:48:55 executing program 4: [ 3347.853928] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3347.979524] syz-executor1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3348.016592] syz-executor1 cpuset=syz1 mems_allowed=0 [ 3348.028660] CPU: 1 PID: 5093 Comm: syz-executor1 Not tainted 4.20.0-rc6+ #374 [ 3348.035963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3348.045326] Call Trace: [ 3348.047930] dump_stack+0x244/0x39d [ 3348.051565] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3348.056759] dump_header+0x27b/0xf72 [ 3348.060480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3348.066011] ? check_preemption_disabled+0x48/0x280 [ 3348.071022] ? pagefault_out_of_memory+0x197/0x197 [ 3348.075940] ? debug_smp_processor_id+0x1c/0x20 [ 3348.080599] ? perf_trace_lock+0x14d/0x7a0 [ 3348.084827] ? lock_is_held_type+0x210/0x210 [ 3348.089227] ? __lock_is_held+0xb5/0x140 [ 3348.093283] ? debug_smp_processor_id+0x1c/0x20 [ 3348.097945] ? perf_trace_lock+0x14d/0x7a0 [ 3348.102172] ? zap_class+0x640/0x640 [ 3348.105879] ? print_usage_bug+0xc0/0xc0 [ 3348.109932] ? lock_is_held_type+0x210/0x210 [ 3348.114386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3348.119935] ? find_held_lock+0x36/0x1c0 [ 3348.124006] ? mark_held_locks+0xc7/0x130 [ 3348.128148] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3348.133255] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3348.138359] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3348.142944] ? trace_hardirqs_on+0xbd/0x310 [ 3348.147256] ? kasan_check_read+0x11/0x20 [ 3348.151421] ? ___ratelimit+0x3b4/0x672 [ 3348.155390] ? trace_hardirqs_off_caller+0x310/0x310 [ 3348.160489] ? trace_hardirqs_on+0x310/0x310 [ 3348.164890] ? lock_downgrade+0x900/0x900 [ 3348.169031] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3348.174137] ? ___ratelimit+0x3b9/0x672 [ 3348.178111] ? idr_get_free+0xf70/0xf70 [ 3348.182080] ? _raw_spin_unlock_irq+0x27/0x80 [ 3348.186563] ? _raw_spin_unlock_irq+0x27/0x80 [ 3348.191063] oom_kill_process.cold.27+0x10/0x903 [ 3348.195809] ? _raw_spin_unlock_irq+0x27/0x80 [ 3348.200312] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3348.204919] ? oom_evaluate_task+0x540/0x540 [ 3348.209350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3348.214882] ? cgroup_procs_next+0x70/0x70 [ 3348.219110] ? _raw_spin_unlock_irq+0x60/0x80 [ 3348.223593] ? oom_badness+0xaa0/0xaa0 [ 3348.227483] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3348.232243] ? mem_cgroup_iter_break+0x30/0x30 [ 3348.236836] ? mark_held_locks+0xc7/0x130 [ 3348.241013] out_of_memory+0xa84/0x1430 [ 3348.244982] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3348.249555] ? kasan_check_read+0x11/0x20 [ 3348.253695] ? oom_killer_disable+0x3a0/0x3a0 [ 3348.258216] mem_cgroup_out_of_memory+0x15e/0x210 [ 3348.263058] ? memory_oom_group_write+0x160/0x160 [ 3348.267891] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3348.272730] ? page_counter_try_charge+0x1c1/0x220 [ 3348.277650] try_charge+0xda9/0x1700 [ 3348.281365] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3348.286025] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3348.290945] ? kasan_check_read+0x11/0x20 [ 3348.295081] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3348.300362] ? rcu_softirq_qs+0x20/0x20 [ 3348.304334] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3348.309868] ? attach_entity_load_avg+0x860/0x860 [ 3348.314731] ? lock_page_memcg+0x350/0x350 [ 3348.318959] ? lock_acquire+0x1ed/0x520 [ 3348.322950] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3348.328330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3348.333880] ? check_preemption_disabled+0x48/0x280 [ 3348.338896] memcg_kmem_charge_memcg+0x7c/0x120 [ 3348.343555] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3348.348146] ? __update_load_avg_blocked_se+0x690/0x690 [ 3348.353515] memcg_kmem_charge+0x149/0x350 [ 3348.357745] __alloc_pages_nodemask+0x75e/0xea0 [ 3348.362419] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3348.367459] ? attach_entity_load_avg+0x860/0x860 [ 3348.372306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3348.377837] ? print_usage_bug+0xc0/0xc0 [ 3348.381892] ? attach_entity_load_avg+0x860/0x860 [ 3348.386761] ? debug_smp_processor_id+0x1c/0x20 [ 3348.391428] ? perf_trace_lock+0x14d/0x7a0 [ 3348.395652] ? check_preemption_disabled+0x48/0x280 [ 3348.400658] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3348.406192] alloc_pages_current+0x173/0x350 [ 3348.410612] pte_alloc_one+0x1b/0x1a0 [ 3348.414417] do_huge_pmd_anonymous_page+0xe03/0x2040 [ 3348.419524] ? find_held_lock+0x36/0x1c0 [ 3348.423583] ? __thp_get_unmapped_area+0x180/0x180 [ 3348.428508] ? mark_held_locks+0x130/0x130 [ 3348.432734] ? find_held_lock+0x36/0x1c0 [ 3348.436799] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3348.441840] ? print_usage_bug+0xc0/0xc0 [ 3348.445901] ? ptep_set_access_flags+0x1a0/0x1a0 [ 3348.450686] ? print_usage_bug+0xc0/0xc0 [ 3348.454747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3348.460312] ? check_preemption_disabled+0x48/0x280 [ 3348.465348] ? debug_smp_processor_id+0x1c/0x20 [ 3348.470007] ? perf_trace_lock+0x14d/0x7a0 [ 3348.474236] ? __lock_acquire+0x62f/0x4c20 [ 3348.478465] ? huge_pmd_set_accessed+0x4b0/0x4b0 [ 3348.483222] ? __lock_acquire+0x62f/0x4c20 [ 3348.487492] ? mark_held_locks+0x130/0x130 [ 3348.491764] ? find_held_lock+0x36/0x1c0 [ 3348.495862] __handle_mm_fault+0x3c97/0x5be0 [ 3348.500303] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3348.505170] ? lock_is_held_type+0x210/0x210 [ 3348.509591] ? kasan_check_read+0x11/0x20 [ 3348.513794] ? do_raw_spin_unlock+0xa7/0x330 [ 3348.518221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3348.523788] ? pud_huge+0xc1/0x110 [ 3348.527327] ? zap_class+0x640/0x640 [ 3348.531031] ? zap_class+0x640/0x640 [ 3348.534736] ? find_held_lock+0x36/0x1c0 [ 3348.538798] ? handle_mm_fault+0x42a/0xc70 [ 3348.543038] ? lock_downgrade+0x900/0x900 [ 3348.547179] ? check_preemption_disabled+0x48/0x280 [ 3348.552194] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3348.557109] ? kasan_check_read+0x11/0x20 [ 3348.561266] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3348.566529] ? rcu_softirq_qs+0x20/0x20 [ 3348.570493] ? trace_hardirqs_off_caller+0x310/0x310 [ 3348.575585] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3348.581401] ? check_preemption_disabled+0x48/0x280 [ 3348.586407] handle_mm_fault+0x54f/0xc70 [ 3348.590459] ? __handle_mm_fault+0x5be0/0x5be0 [ 3348.595039] ? find_vma+0x34/0x190 [ 3348.598568] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3348.603604] __get_user_pages+0xa3d/0x1ea0 [ 3348.607834] ? follow_page_mask+0x2160/0x2160 [ 3348.612335] ? mark_held_locks+0x130/0x130 [ 3348.616567] ? zap_class+0x640/0x640 [ 3348.620286] ? __access_remote_vm+0xf4/0x710 [ 3348.624713] ? __lock_is_held+0xb5/0x140 [ 3348.628794] ? lock_release+0xa00/0xa00 [ 3348.632853] get_user_pages_remote+0x21a/0x440 [ 3348.637435] __access_remote_vm+0x347/0x710 [ 3348.641753] ? generic_access_phys+0x2a0/0x2a0 [ 3348.646361] ? lock_release+0xa00/0xa00 [ 3348.650329] ? usercopy_warn+0x110/0x110 [ 3348.654384] ? retint_kernel+0x2d/0x2d [ 3348.658271] access_remote_vm+0x37/0x50 [ 3348.662236] mem_rw.isra.16+0x411/0x640 [ 3348.666203] ? proc_pid_stack+0x430/0x430 [ 3348.670382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3348.675922] ? _copy_from_user+0xdf/0x150 [ 3348.680075] ? security_file_permission+0x1c2/0x220 [ 3348.685081] mem_read+0x52/0x70 [ 3348.688383] do_iter_read+0x4a3/0x650 [ 3348.692178] vfs_readv+0x175/0x1c0 [ 3348.695708] ? compat_rw_copy_check_uvector+0x440/0x440 [ 3348.701067] ? rcu_pm_notify+0xc0/0xc0 [ 3348.704948] ? fget_raw+0x20/0x20 [ 3348.708394] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3348.713927] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3348.719461] do_preadv+0x1cc/0x280 [ 3348.722990] ? do_readv+0x310/0x310 [ 3348.726602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3348.732128] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3348.737481] ? trace_hardirqs_off_caller+0x310/0x310 [ 3348.742584] __x64_sys_preadv+0x9a/0xf0 [ 3348.746556] do_syscall_64+0x1b9/0x820 [ 3348.750433] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3348.755791] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3348.760713] ? trace_hardirqs_on_caller+0x310/0x310 [ 3348.765716] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3348.770810] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 3348.777490] ? __switch_to_asm+0x40/0x70 [ 3348.781537] ? __switch_to_asm+0x34/0x70 [ 3348.785589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3348.790432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3348.795625] RIP: 0033:0x457669 [ 3348.798810] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3348.817727] RSP: 002b:00007f664a3c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 3348.825437] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457669 [ 3348.833040] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000004 [ 3348.840296] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3348.847581] R10: 000000002000107c R11: 0000000000000246 R12: 00007f664a3c26d4 [ 3348.854837] R13: 00000000004c39bb R14: 00000000004d63c8 R15: 00000000ffffffff [ 3348.864513] Task in /syz1 killed as a result of limit of /syz1 [ 3348.870913] memory: usage 307168kB, limit 307200kB, failcnt 2355 [ 3348.877066] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3348.883901] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3348.890105] Memory cgroup stats for /syz1: cache:1996KB rss:259784KB rss_huge:239616KB shmem:128KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:259772KB inactive_file:8KB active_file:0KB unevictable:1936KB [ 3348.911915] Memory cgroup out of memory: Kill process 5077 (syz-executor1) score 1117 or sacrifice child [ 3348.921636] Killed process 5077 (syz-executor1) total-vm:70472kB, anon-rss:6256kB, file-rss:32768kB, shmem-rss:0kB 22:48:56 executing program 1: 22:48:56 executing program 2: getpid() r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x13) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x300000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:56 executing program 4: 22:48:56 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2) 22:48:56 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RWRITE(r2, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x2}, 0xb) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) [ 3348.936313] oom_reaper: reaped process 5077 (syz-executor1), now anon-rss:0kB, file-rss:31936kB, shmem-rss:0kB [ 3348.939270] audit: type=1800 audit(1544914136.284:282): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor1" name="bus" dev="ramfs" ino=652444 res=0 22:48:56 executing program 4: 22:48:56 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5) [ 3349.006426] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:56 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x60200, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x0, 0x3, 0x8}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x804, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 22:48:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x4, 0xffffffff, 0x7}}, 0x28) 22:48:56 executing program 3: r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) io_setup(0xd257, &(0x7f00000000c0)=0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x900, 0x0) r5 = dup2(r1, r3) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001400)='/dev/audio\x00', 0x200, 0x0) r7 = eventfd2(0x3, 0x800) r8 = syz_open_dev$usbmon(&(0x7f00000026c0)='/dev/usbmon#\x00', 0x4, 0x8000) r9 = syz_open_dev$dspn(&(0x7f0000003840)='/dev/dsp#\x00', 0x25, 0x4000) io_submit(r2, 0x9, &(0x7f00000038c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2400000000000, r3, &(0x7f0000000100)="81c2", 0x2, 0x401, 0x0, 0x3, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000000240)="c4120c53607239e76252e7b893b4be67f3dc3b5f35bed2cf879acfea5ac91fe777e11853dc3ba2590d6490f7d141c61f2093", 0x32, 0x3ff, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f00000002c0)="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", 0x1000, 0x4, 0x0, 0x0, r5}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x2, 0xfb, r1, &(0x7f0000001300)="16499df213a787a9ccd59013edeee1da16f4ea858a300879b814e14c56003a685ac0e4947a5e714c9260de1645efa77426786c2b51acfc7070f0d8e19debf08c33f806b736442f3ea5bb01d2c41370eb8e74b9b76c89a1a88e4bf46ee1b227ba6de1f596eace814c3b19457e068c1f38b11cc42da090c2ef6920cad93505810eaa55874bff1b70dfb88650b140c60cb551d75d57f9719f881839a84f6c3489db2175c7265e938da0dd9e96a8cef3ac5c52a39601334e1725cc8116d3e74aa6ec675847", 0xc3, 0x86b9, 0x0, 0x0, r6}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0xeef, r1, &(0x7f0000001480)="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", 0x1000, 0x5, 0x0, 0x1, r1}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x7, 0x200, r3, &(0x7f00000024c0)="875274692536bc6f1d28b6ad1d6f11c1b4d3859fe98b6f3f6afb9f37b69ce85a1b61ac3f97d38686824aa62ea7d7bae349e8426cc6e74d84c501a7fc016375bac06b3c336511146167dc876f7cfa688ee57cf2f0e7303891dc58a35624c2f74d9475d115816746349c5e1cb8cea1a6105ac02fc0b02e209b0abc57ec3f00f13bdbd8c43201bb46610c384e57c6c22874e26e", 0x92, 0x8000, 0x0, 0x3, r7}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x6, 0x8, r3, &(0x7f00000025c0)="4f92921eaf3806801cac0eddb14b2e0b8d07b5e1dd51606dbfed07669cb4eddc7e248c484c7f0e8c66a07e8a61926aa5699e21a0a5e9c7317e592b973931ee5649e4ec66bdee9a7159cafd4dc0a0d8d3c7c30ea104c7171e51894c54a9b41621a1d37d259da450012700cf4f476ba6c9af51672f05d88a74cf67d5fbc9f89848914251a20159f430ed5f4c97ed8c83b806f4aa5ebc3d09cf3dfaf4f5500224b0629d41d640efbc6d3dbb1b9bbbf3d734631fe5d7d337d0681024588ee7aa0243b0021c2073f7969e479699619c36f3308ce54983b244c7052b961e7cc044f2fa", 0xe0, 0x9, 0x0, 0x0, r8}, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x7, 0x36, r1, &(0x7f0000002740)="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", 0x1000, 0x401, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000003880)={0x0, 0x0, 0x0, 0xd, 0x4, r1, &(0x7f0000003780)="2b1b5ebccf5d80d7e9346d66f6ff1b99c0055afa645c2db11500497b798b4428092c2fcb084e14f52053af9733c9b39956c26223ca6a7dfacd600927e82372ce0a508d35eefea01ad68deb5bd9c3a9ab985641c3a3238ab657e132c29edbe2e2515ef722c34d32166925cea96e1a4674b3dafc08a52b7f5157f0945dac2677a1df7fc6e6658d3e0eaebf95efa126c4cb4fa4b1f52094b49860fb4fb5f3d9b238254460bcb8284ebe2a7ff845af7aad398f6033f64e65e01695024c3542d1", 0xbe, 0x8, 0x0, 0x2, r9}]) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:56 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0xffff, &(0x7f0000000180)) dup2(0xffffffffffffff9c, 0xffffffffffffffff) [ 3349.138330] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:56 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4c0000, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x9, 0x4, 0x3}, 0x8}}, 0x18) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000500)={0x6, 0x1f}) getresgid(&(0x7f0000000200), &(0x7f0000000400)=0x0, &(0x7f00000003c0)) chown(&(0x7f0000000100)='./file0\x00', r1, r2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r3 = accept$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000440)=0x10) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x22d, 0x49, 0x2, {0x8, 0x3, 0x6}}, 0x14) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'L+', 0x5}, 0x28, 0x2) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) 22:48:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 3349.187489] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask 22:48:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 22:48:56 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1) 22:48:56 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x2000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3349.315213] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:56 executing program 1: socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SECCOMP(0x15) 22:48:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:56 executing program 0: prctl$PR_MCE_KILL_GET(0x22) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10001, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21000008}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 22:48:56 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0x3f, 0x1, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:48:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1400) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)) recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/142, 0x8e, 0x21, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x890}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44) clone(0x100000, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) write$P9_RSTAT(r1, 0x0, 0x0) r3 = getpgid(0x0) ptrace$peek(0x2, r3, &(0x7f0000000740)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000580)={0x6, 0x34, 0xb, 0x1b, 0x0, 0x0, 0x5, 0xef, 0x1}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000140)={{0x0, 0x8}, {0xfffffffffffffff9, 0x1}, 0x400, 0x4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0x50, &(0x7f00000006c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)=r5, 0x4) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2) [ 3349.513277] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3349.754861] syz-executor3 invoked oom-killer: gfp_mask=0x6280c2(GFP_HIGHUSER|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3349.768150] syz-executor3 cpuset=syz3 mems_allowed=0 [ 3349.774622] CPU: 0 PID: 5154 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #374 [ 3349.781905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3349.791264] Call Trace: [ 3349.793879] dump_stack+0x244/0x39d [ 3349.797528] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3349.802759] dump_header+0x27b/0xf72 [ 3349.806511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3349.812067] ? check_preemption_disabled+0x48/0x280 [ 3349.817106] ? pagefault_out_of_memory+0x197/0x197 [ 3349.822052] ? debug_smp_processor_id+0x1c/0x20 [ 3349.826740] ? perf_trace_lock+0x14d/0x7a0 [ 3349.831006] ? lock_is_held_type+0x210/0x210 [ 3349.835430] ? __lock_is_held+0xb5/0x140 [ 3349.839514] ? debug_smp_processor_id+0x1c/0x20 [ 3349.844197] ? perf_trace_lock+0x14d/0x7a0 [ 3349.848445] ? zap_class+0x640/0x640 [ 3349.852183] ? print_usage_bug+0xc0/0xc0 [ 3349.856263] ? lock_is_held_type+0x210/0x210 [ 3349.860704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3349.866265] ? find_held_lock+0x36/0x1c0 [ 3349.870357] ? mark_held_locks+0xc7/0x130 [ 3349.874527] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3349.879646] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3349.884768] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3349.889385] ? trace_hardirqs_on+0xbd/0x310 [ 3349.893728] ? kasan_check_read+0x11/0x20 [ 3349.897892] ? ___ratelimit+0x3b4/0x672 [ 3349.901890] ? trace_hardirqs_off_caller+0x310/0x310 [ 3349.907022] ? trace_hardirqs_on+0x310/0x310 [ 3349.911461] ? lock_downgrade+0x900/0x900 [ 3349.915631] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3349.920766] ? ___ratelimit+0x3b9/0x672 [ 3349.924811] ? idr_get_free+0xf70/0xf70 [ 3349.928814] ? _raw_spin_unlock_irq+0x27/0x80 [ 3349.933329] ? _raw_spin_unlock_irq+0x27/0x80 [ 3349.937854] oom_kill_process.cold.27+0x10/0x903 [ 3349.942627] ? _raw_spin_unlock_irq+0x27/0x80 [ 3349.947155] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3349.951765] ? oom_evaluate_task+0x540/0x540 [ 3349.956203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3349.961734] ? cgroup_procs_next+0x70/0x70 [ 3349.965960] ? _raw_spin_unlock_irq+0x60/0x80 [ 3349.970460] ? oom_badness+0xaa0/0xaa0 [ 3349.974341] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3349.979102] ? mem_cgroup_iter_break+0x30/0x30 [ 3349.983698] ? mark_held_locks+0xc7/0x130 [ 3349.987848] out_of_memory+0xa84/0x1430 [ 3349.991816] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3349.996398] ? kasan_check_read+0x11/0x20 [ 3350.000559] ? oom_killer_disable+0x3a0/0x3a0 [ 3350.005085] mem_cgroup_out_of_memory+0x15e/0x210 [ 3350.009939] ? memory_oom_group_write+0x160/0x160 [ 3350.014784] ? mem_cgroup_try_charge+0x627/0xe20 [ 3350.019563] ? page_counter_try_charge+0x1c1/0x220 [ 3350.024505] try_charge+0xda9/0x1700 [ 3350.028226] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3350.033179] ? kasan_check_read+0x11/0x20 [ 3350.037340] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3350.042025] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3350.047574] ? __lock_is_held+0xb5/0x140 [ 3350.051633] ? lock_page_memcg+0x350/0x350 [ 3350.055926] ? check_preemption_disabled+0x48/0x280 [ 3350.060957] ? lock_acquire+0x1ed/0x520 [ 3350.064943] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3350.070322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.075866] ? check_preemption_disabled+0x48/0x280 [ 3350.080893] ? kasan_check_read+0x11/0x20 [ 3350.085039] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3350.090318] ? rcu_softirq_qs+0x20/0x20 [ 3350.094296] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3350.098886] ? trace_hardirqs_on+0xbd/0x310 [ 3350.103233] mem_cgroup_try_charge+0x627/0xe20 [ 3350.107849] ? __lock_acquire+0x62f/0x4c20 [ 3350.112087] ? mem_cgroup_protected+0xa60/0xa60 [ 3350.116771] ? __lock_acquire+0x62f/0x4c20 [ 3350.121033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.126573] ? check_preemption_disabled+0x48/0x280 [ 3350.131660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.137199] ? PageHuge+0x183/0x2b0 [ 3350.140835] ? vma_kernel_pagesize+0xb0/0xb0 [ 3350.145258] ? mark_held_locks+0x130/0x130 [ 3350.149500] ? debug_smp_processor_id+0x1c/0x20 [ 3350.154176] ? perf_trace_lock+0x14d/0x7a0 [ 3350.158432] __add_to_page_cache_locked+0x793/0x1840 [ 3350.163553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.169117] ? find_lock_entry+0x8e0/0x8e0 [ 3350.173362] ? zap_class+0x640/0x640 [ 3350.177082] ? check_preemption_disabled+0x48/0x280 [ 3350.182120] ? count_shadow_nodes+0x670/0x670 [ 3350.186633] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3350.191740] ? zap_class+0x640/0x640 [ 3350.195454] ? find_held_lock+0x36/0x1c0 [ 3350.199532] ? zap_class+0x640/0x640 [ 3350.203460] ? find_get_entry+0xa87/0x1120 [ 3350.207739] ? zap_class+0x640/0x640 [ 3350.211504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.217069] ? check_preemption_disabled+0x48/0x280 [ 3350.222108] ? __lock_is_held+0xb5/0x140 [ 3350.226182] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3350.231222] ? __alloc_pages_nodemask+0xb87/0xea0 [ 3350.236180] add_to_page_cache_lru+0x355/0xdb0 [ 3350.240806] ? add_to_page_cache_locked+0x40/0x40 [ 3350.245695] ? is_bpf_text_address+0xac/0x170 [ 3350.250208] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3350.255149] ? kasan_check_read+0x11/0x20 [ 3350.259314] ? rcu_softirq_qs+0x20/0x20 [ 3350.263294] ? unwind_dump+0x190/0x190 [ 3350.267186] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3350.272731] ? alloc_pages_current+0x17b/0x350 [ 3350.277335] ? __page_cache_alloc+0x191/0x5c0 [ 3350.281851] ? generic_perform_write+0x6a0/0x6a0 [ 3350.286764] pagecache_get_page+0x53a/0xf00 [ 3350.291125] ? add_to_page_cache_lru+0xdb0/0xdb0 [ 3350.296008] ? do_syscall_64+0x1b9/0x820 [ 3350.300096] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3350.305486] ? __alloc_file+0x35c/0x470 [ 3350.309490] ? file_free_rcu+0xd0/0xd0 [ 3350.313414] ? mark_held_locks+0xc7/0x130 [ 3350.317593] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3350.322370] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3350.326973] ? retint_kernel+0x2d/0x2d [ 3350.330891] ? trace_hardirqs_on_caller+0xc0/0x310 [ 3350.335903] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3350.340662] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 3350.346139] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3350.351693] ? unlock_page+0x2c2/0x4c0 [ 3350.355599] ? wake_up_page_bit+0x6f0/0x6f0 [ 3350.360084] ? retint_kernel+0x2d/0x2d [ 3350.364005] ioctx_alloc+0x88f/0x2270 [ 3350.367846] ? do_io_getevents+0x470/0x470 [ 3350.372103] ? debug_smp_processor_id+0x1c/0x20 [ 3350.376804] ? perf_trace_lock+0x14d/0x7a0 [ 3350.381049] ? lock_is_held_type+0x210/0x210 [ 3350.385478] ? find_held_lock+0x36/0x1c0 [ 3350.389560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.395116] ? check_preemption_disabled+0x48/0x280 [ 3350.400156] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3350.405716] ? find_held_lock+0x36/0x1c0 [ 3350.409836] ? __might_fault+0x12b/0x1e0 [ 3350.413931] ? lock_downgrade+0x900/0x900 [ 3350.418114] ? lock_release+0xa00/0xa00 [ 3350.422115] ? perf_trace_sched_process_exec+0x860/0x860 [ 3350.427619] __x64_sys_io_setup+0x111/0x4d0 [ 3350.431966] ? exit_aio+0x570/0x570 [ 3350.435634] do_syscall_64+0x1b9/0x820 [ 3350.439548] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3350.444932] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3350.449978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3350.454978] ? trace_hardirqs_on_caller+0x310/0x310 [ 3350.460105] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3350.465183] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3350.470395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3350.475275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3350.480488] RIP: 0033:0x457669 [ 3350.483696] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3350.502823] RSP: 002b:00007f1ab58dac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 3350.510567] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457669 [ 3350.517867] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000d257 [ 3350.525154] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3350.532431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ab58db6d4 [ 3350.539877] R13: 00000000004be99b R14: 00000000004cf570 R15: 00000000ffffffff [ 3350.552217] Task in /syz3 killed as a result of limit of /syz3 [ 3350.558295] memory: usage 307200kB, limit 307200kB, failcnt 10861 [ 3350.564551] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3350.571395] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3350.577878] Memory cgroup stats for /syz3: cache:2380KB rss:140292KB rss_huge:59392KB shmem:176KB mapped_file:0KB dirty:0KB writeback:132KB swap:0KB inactive_anon:140KB active_anon:140308KB inactive_file:2232KB active_file:0KB unevictable:0KB [ 3350.601747] Memory cgroup out of memory: Kill process 12638 (syz-executor3) score 1106 or sacrifice child [ 3350.613485] Killed process 12638 (syz-executor3) total-vm:70340kB, anon-rss:2212kB, file-rss:33544kB, shmem-rss:0kB [ 3350.637583] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 3350.663224] syz-executor3 cpuset=syz3 mems_allowed=0 [ 3350.669634] CPU: 0 PID: 5147 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #374 [ 3350.676940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3350.686388] Call Trace: [ 3350.689009] dump_stack+0x244/0x39d [ 3350.692728] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3350.697958] dump_header+0x27b/0xf72 [ 3350.701709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.707275] ? check_preemption_disabled+0x48/0x280 [ 3350.712320] ? pagefault_out_of_memory+0x197/0x197 [ 3350.717275] ? debug_smp_processor_id+0x1c/0x20 [ 3350.721972] ? perf_trace_lock+0x14d/0x7a0 [ 3350.726242] ? lock_is_held_type+0x210/0x210 [ 3350.730673] ? __lock_is_held+0xb5/0x140 [ 3350.734759] ? debug_smp_processor_id+0x1c/0x20 [ 3350.739471] ? perf_trace_lock+0x14d/0x7a0 [ 3350.743730] ? zap_class+0x640/0x640 [ 3350.747471] ? print_usage_bug+0xc0/0xc0 [ 3350.751553] ? lock_is_held_type+0x210/0x210 [ 3350.755994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.761561] ? find_held_lock+0x36/0x1c0 [ 3350.765654] ? mark_held_locks+0xc7/0x130 [ 3350.769840] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3350.774972] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3350.780097] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3350.784706] ? trace_hardirqs_on+0xbd/0x310 [ 3350.789109] ? kasan_check_read+0x11/0x20 [ 3350.793286] ? ___ratelimit+0x3b4/0x672 [ 3350.797282] ? trace_hardirqs_off_caller+0x310/0x310 [ 3350.802400] ? trace_hardirqs_on+0x310/0x310 [ 3350.806829] ? lock_downgrade+0x900/0x900 [ 3350.810993] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3350.816111] ? ___ratelimit+0x3b9/0x672 [ 3350.820136] ? idr_get_free+0xf70/0xf70 [ 3350.824116] ? _raw_spin_unlock_irq+0x27/0x80 [ 3350.828612] ? _raw_spin_unlock_irq+0x27/0x80 [ 3350.833111] oom_kill_process.cold.27+0x10/0x903 [ 3350.837867] ? _raw_spin_unlock_irq+0x27/0x80 [ 3350.842363] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3350.846950] ? oom_evaluate_task+0x540/0x540 [ 3350.851358] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.856901] ? cgroup_procs_next+0x70/0x70 [ 3350.861242] ? _raw_spin_unlock_irq+0x60/0x80 [ 3350.865735] ? oom_badness+0xaa0/0xaa0 [ 3350.869625] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 3350.874382] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3350.879981] ? mem_cgroup_iter_break+0x30/0x30 [ 3350.884574] ? cgroup_file_notify+0x226/0x2f0 [ 3350.889071] out_of_memory+0xa84/0x1430 [ 3350.893042] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3350.897623] ? kasan_check_read+0x11/0x20 [ 3350.901768] ? oom_killer_disable+0x3a0/0x3a0 [ 3350.906293] mem_cgroup_out_of_memory+0x15e/0x210 [ 3350.911136] ? memory_oom_group_write+0x160/0x160 [ 3350.915977] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 3350.920896] ? page_counter_try_charge+0x1c1/0x220 [ 3350.925891] try_charge+0xda9/0x1700 [ 3350.929609] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 3350.934278] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3350.939208] ? kasan_check_read+0x11/0x20 [ 3350.943403] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3350.948680] ? rcu_softirq_qs+0x20/0x20 [ 3350.952663] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 3350.958214] ? __kernel_text_address+0xd/0x40 [ 3350.962726] ? lock_page_memcg+0x350/0x350 [ 3350.966964] ? lock_acquire+0x1ed/0x520 [ 3350.971002] ? mem_cgroup_oom_control_write+0x100/0x100 [ 3350.976370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3350.981953] ? check_preemption_disabled+0x48/0x280 [ 3350.986978] memcg_kmem_charge_memcg+0x7c/0x120 [ 3350.991646] ? memcg_kmem_put_cache+0xb0/0xb0 [ 3350.996247] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3351.001659] memcg_kmem_charge+0x149/0x350 [ 3351.005902] __alloc_pages_nodemask+0x75e/0xea0 [ 3351.010570] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3351.015858] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 3351.020875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.026412] ? check_preemption_disabled+0x48/0x280 [ 3351.031434] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3351.036971] ? rcu_pm_notify+0xc0/0xc0 [ 3351.040869] ? copy_process+0x2026/0x87a0 [ 3351.045018] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3351.050036] ? kmem_cache_alloc_node+0x349/0x730 [ 3351.054812] copy_process+0xa09/0x87a0 [ 3351.058704] ? __lock_acquire+0x62f/0x4c20 [ 3351.062988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.068525] ? update_load_avg+0x2470/0x2470 [ 3351.072980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.078523] ? mark_held_locks+0x130/0x130 [ 3351.082759] ? __cleanup_sighand+0x70/0x70 [ 3351.087012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.092550] ? check_preemption_disabled+0x48/0x280 [ 3351.097568] ? print_usage_bug+0xc0/0xc0 [ 3351.101625] ? perf_trace_lock+0x14d/0x7a0 [ 3351.105872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.111408] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 3351.116596] ? lock_is_held_type+0x210/0x210 [ 3351.121005] ? find_held_lock+0x36/0x1c0 [ 3351.125153] ? __lock_acquire+0x62f/0x4c20 [ 3351.129391] ? finish_task_switch+0x1f4/0x910 [ 3351.133887] ? _raw_spin_unlock_irq+0x27/0x80 [ 3351.138383] ? _raw_spin_unlock_irq+0x27/0x80 [ 3351.142885] ? mark_held_locks+0x130/0x130 [ 3351.147121] ? print_usage_bug+0xc0/0xc0 [ 3351.151183] ? rcu_preempt_deferred_qs_irqrestore+0x8a5/0x1000 [ 3351.157153] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3351.162254] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3351.167358] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.172944] ? check_preemption_disabled+0x48/0x280 [ 3351.177964] ? print_usage_bug+0xc0/0xc0 [ 3351.182024] ? __lock_acquire+0x62f/0x4c20 [ 3351.186262] ? rcu_force_quiescent_state+0x10/0x10 [ 3351.191239] ? lock_is_held_type+0x210/0x210 [ 3351.195655] ? print_usage_bug+0xc0/0xc0 [ 3351.199713] ? __lock_acquire+0x62f/0x4c20 [ 3351.203949] ? print_usage_bug+0xc0/0xc0 [ 3351.208014] ? __lock_acquire+0x62f/0x4c20 [ 3351.212259] ? mark_held_locks+0x130/0x130 [ 3351.216493] ? debug_smp_processor_id+0x1c/0x20 [ 3351.221167] ? mark_held_locks+0x130/0x130 [ 3351.225428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.230964] ? check_preemption_disabled+0x48/0x280 [ 3351.236027] ? debug_smp_processor_id+0x1c/0x20 [ 3351.240740] ? perf_trace_lock+0x14d/0x7a0 [ 3351.244976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.250513] ? check_preemption_disabled+0x48/0x280 [ 3351.255532] ? debug_smp_processor_id+0x1c/0x20 [ 3351.260201] ? perf_trace_lock+0x14d/0x7a0 [ 3351.264436] ? print_usage_bug+0xc0/0xc0 [ 3351.268493] ? zap_class+0x640/0x640 [ 3351.272209] ? delayacct_end+0xc5/0x100 [ 3351.276178] ? zap_class+0x640/0x640 [ 3351.279889] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3351.285082] ? __lock_acquire+0x62f/0x4c20 [ 3351.289322] ? find_held_lock+0x36/0x1c0 [ 3351.293414] ? mark_held_locks+0x130/0x130 [ 3351.297644] ? _raw_spin_unlock_irq+0x27/0x80 [ 3351.302182] ? _raw_spin_unlock_irq+0x27/0x80 [ 3351.306675] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3351.311367] ? trace_hardirqs_on+0xbd/0x310 [ 3351.315690] ? kasan_check_read+0x11/0x20 [ 3351.319840] ? psi_memstall_leave+0x202/0x260 [ 3351.324348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.329898] ? check_preemption_disabled+0x48/0x280 [ 3351.334923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.340462] ? debug_smp_processor_id+0x1c/0x20 [ 3351.345130] ? perf_trace_lock+0x14d/0x7a0 [ 3351.349367] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3351.354909] ? lock_is_held_type+0x210/0x210 [ 3351.359321] ? zap_class+0x640/0x640 [ 3351.363032] ? cgroup_file_notify+0x226/0x2f0 [ 3351.367528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3351.373067] ? check_preemption_disabled+0x48/0x280 [ 3351.378088] _do_fork+0x1cb/0x11d0 [ 3351.381629] ? fork_idle+0x1d0/0x1d0 [ 3351.385345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3351.390883] ? syscall_trace_enter+0x68c/0x1260 [ 3351.395555] ? trace_event_raw_event_sys_exit+0x2d0/0x2d0 [ 3351.401089] ? rcu_softirq_qs+0x20/0x20 [ 3351.405064] ? check_preemption_disabled+0x48/0x280 [ 3351.410084] ? do_syscall_64+0x9a/0x820 [ 3351.414058] ? do_syscall_64+0x9a/0x820 [ 3351.418032] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3351.422641] ? trace_hardirqs_on+0xbd/0x310 [ 3351.426960] ? trace_hardirqs_on+0x310/0x310 [ 3351.431367] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3351.436728] ? trace_hardirqs_off_caller+0x310/0x310 [ 3351.441890] __x64_sys_clone+0xbf/0x150 [ 3351.445931] do_syscall_64+0x1b9/0x820 [ 3351.449829] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3351.455206] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3351.460185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3351.465077] ? trace_hardirqs_on_caller+0x310/0x310 [ 3351.470094] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3351.475111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3351.479964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3351.485150] RIP: 0033:0x45a039 [ 3351.488355] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3351.507271] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3351.515005] RAX: ffffffffffffffda RBX: 00007f1ab58ba700 RCX: 000000000045a039 [ 3351.522300] RDX: 00007f1ab58ba9d0 RSI: 00007f1ab58b9db0 RDI: 00000000003d0f00 [ 3351.529571] RBP: 0000000000a3fcd0 R08: 00007f1ab58ba700 R09: 00007f1ab58ba700 [ 3351.536897] R10: 00007f1ab58ba9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3351.544407] R13: 0000000000a3fb7f R14: 00007f1ab58ba9c0 R15: 000000000072bfac [ 3351.557477] Task in /syz3 killed as a result of limit of /syz3 [ 3351.563671] memory: usage 306020kB, limit 307200kB, failcnt 10861 [ 3351.569998] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3351.576770] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3351.583041] Memory cgroup stats for /syz3: cache:3436KB rss:138156KB rss_huge:57344KB shmem:176KB mapped_file:0KB dirty:0KB writeback:132KB swap:0KB inactive_anon:140KB active_anon:138160KB inactive_file:3368KB active_file:0KB unevictable:0KB [ 3351.604880] Memory cgroup out of memory: Kill process 12704 (syz-executor3) score 1106 or sacrifice child [ 3351.614742] Killed process 12704 (syz-executor3) total-vm:70340kB, anon-rss:2212kB, file-rss:33544kB, shmem-rss:0kB [ 3351.626942] oom_reaper: reaped process 12704 (syz-executor3), now anon-rss:0kB, file-rss:32776kB, shmem-rss:0kB 22:48:59 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x280, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x400000000004, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) bind$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffe80, 0x0, 0x0, 0x40000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:59 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5ea, 0x200) r3 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x4, 0x0, 0x10000, 0x3}) 22:48:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:59 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x9, 0x4) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:48:59 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @rand_addr=0x2}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x81, 0x7}) unshare(0x10000) 22:48:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x700}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x97, 0x5, 0x0, 0x1, 0x3, 0xffffffffffffff76, 0x8, 0x0, 0x5, 0x2, 0x0, 0x5, 0x8, 0x9, 0x2}}) [ 3351.812495] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3351.822377] netlink: 'syz-executor1': attribute type 15 has an invalid length. 22:48:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:59 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x2080, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000540)={@multicast1, @multicast1, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000019c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000001ac0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001b40)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001d40)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001e40)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000001f40)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001f80)={'syz_tun\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000001fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002000)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002340)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002300)={&(0x7f0000002040)={0x2a8, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9000}}, {0x8, 0x6, r10}}}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r11 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x2, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x4000006) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000005c0)='bridge_slave_1\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, &(0x7f0000000280)={r12, @in6={{0xa, 0x4e22, 0x1800000, @dev={0xfe, 0x80, [], 0xd}, 0xfffffffffffffffc}}, 0x0, 0x9, 0x1, 0x6, 0x8}, &(0x7f0000000400)=0x98) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000340)={'\x81r\xc0-t\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe3\xec\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0, [{}]}, 0x88) unshare(0x10000) getcwd(&(0x7f0000000000)=""/132, 0x84) 22:48:59 executing program 1: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3166b194}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)='wlan0\x00', 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x4, 0x3, 0x831, 0x0, 0x1, 0x0, 0x5}, {0x0, 0x0, 0x8, 0x7ee}, 0x0, 0x6e6bbc, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3}, 0x0, @in6=@mcast2, 0x3503, 0x0, 0x0, 0x2, 0x0, 0x7}}, 0xe8) sync_file_range(r1, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in, 0x4e23, 0x1f, 0x4e20, 0x6, 0xa, 0xa0, 0x80, 0x2e}, {0x8, 0x6, 0x4, 0x93, 0x0, 0x8001, 0xba}, {0x7, 0x0, 0xffffffffffffff2d, 0x5}, 0x2, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0xff}, 0x0, @in=@rand_addr=0x80000000, 0x0, 0x3, 0x3, 0x80, 0x5, 0x3, 0x40}}, 0xe8) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e) r4 = dup2(r2, r3) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\v\xcb\x98\xa3\xe1\xf4o\xd5\x1b\x13\x9du^\xfc\xe9v\x8b\x84\xeau\xc2\xffK<\x85\xca\xef7M\x12jV\xfaGC\xaf~\xf5\\\x84k\xfe}\xd1`r\xd2`\xff\xdd\xcc\x8am\"\xe0/D\xd6\xa3`RK\x86\xb5\x1aKX\xaf\xca5\xf1\"\x01\xad\xb0$\xbf\xb2\x0f\xbd6Nx\xa22\xfb\xef1YP)\xf7Ut\n\xb1^\x17=\xc7;\xa9d\xa4\x18\x90\a\xc7\xc4\r\xb8\xfbKd\xdd\x8e\xc4\xd3f') fcntl$setstatus(r5, 0x4, 0x4000) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) recvfrom(0xffffffffffffffff, &(0x7f0000000780)=""/89, 0x59, 0x40000001, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) msgget$private(0x0, 0x402) seccomp(0x1, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6, 0x20000000000, 0x6}, {0x8e1, 0x6, 0x5, 0x1}, {0x300000, 0x1, 0xbb1}, {0xe3, 0x4, 0x5, 0x101}]}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={r6, 0x80000, r1}) sendfile(r1, r5, &(0x7f0000000040)=0xe00, 0x1080005000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)={0x174, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x160, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x545}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1f, @ipv4={[], [], @multicast1}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @broadcast}, 0x967}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1b}, 0x6e}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf959, @loopback, 0x100000001}}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x401, 0x4) geteuid() 22:48:59 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5ea, 0x200) r3 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x4, 0x0, 0x10000, 0x3}) 22:48:59 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffff89}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:48:59 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xf909, 0x40001) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0x4, 0x8, [0x7, 0x1]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e23, @broadcast}}) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) [ 3351.960543] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 3351.989821] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:59 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5ea, 0x200) r3 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x4, 0x0, 0x10000, 0x3}) 22:48:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:59 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) process_vm_readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f00000003c0)=""/232, 0xe8}], 0x6, &(0x7f0000000600)=[{&(0x7f0000000540)=""/100, 0x64}, {&(0x7f00000005c0)=""/4, 0x4}], 0x2, 0x0) getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='pids.events\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000680)={0x969b, 0x10f9e0, "409d1686ed9a34b5c119ad4a35f31c39b3b468a8d3ccb883", {0x3, 0x6}, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400082, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e23, 0x7fff}}, 0x4, 0x100}, &(0x7f0000000780)=0x90) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000007c0)=r4, 0x4) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000040)=0x10001) 22:48:59 executing program 3: epoll_create1(0x40000000080000) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x3f, 0x0, 0x800000000000}, 0xffffffffffffff16) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0xffffffff80000001, 0x4, 0x3, 0x3, r4}, &(0x7f00000002c0)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) r12 = getegid() getgroups(0x6, &(0x7f0000000980)=[0xee01, 0x0, 0x0, 0xee01, 0xee01, 0xee00]) getgroups(0x8, &(0x7f00000009c0)=[0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xee01, 0xee01, 0xee00, 0xee01]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) getgroups(0x4, &(0x7f0000000a80)=[0xee01, 0x0, 0x0, 0xffffffffffffffff]) getgroups(0x1, &(0x7f0000000ac0)=[0xffffffffffffffff]) fstat(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {0x1, 0x4}, [{0x2, 0x4, r5}, {0x2, 0x7, r6}, {0x2, 0x1, r7}, {0x2, 0x1, r8}, {0x2, 0x7, r9}, {0x2, 0x0, r10}], {0x4, 0x4}, [{0x8, 0x6, r11}, {0x8, 0x3, r12}, {0x8, 0x1, r13}, {0x8, 0x2, r14}, {0x8, 0x1, r15}, {0x8, 0x4, r16}, {0x8, 0x6, r17}, {0x8, 0x1, r18}, {0x8, 0x7, r19}]}, 0x9c, 0x0) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000100)=0x1) 22:48:59 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x14500, 0x0) fcntl$setlease(r0, 0x400, 0x3) [ 3352.162557] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:48:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:48:59 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ff1000/0x2000)=nil, 0x2) 22:48:59 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioprio_get$uid(0x2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) [ 3352.355272] netlink: 'syz-executor5': attribute type 15 has an invalid length. 22:49:00 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xf909, 0x40001) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0x4, 0x8, [0x7, 0x1]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e23, @broadcast}}) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) 22:49:00 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5ea, 0x200) r3 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) 22:49:00 executing program 0: get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffc000/0x3000)=nil, 0xfffffffffffffffa) 22:49:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:49:00 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x4, 0x1, 0x5, 0x6d0c, 0x7fffffff}, 0xc) getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000) 22:49:00 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5ea, 0x200) dup2(r0, r0) 22:49:00 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) 22:49:00 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_buf(r2, 0x29, 0xfe, &(0x7f0000000240)=""/198, &(0x7f0000000100)=0xc6) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) io_setup(0x0, 0x0) 22:49:00 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) link(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:49:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:49:00 executing program 1: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5ea, 0x200) r3 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) 22:49:00 executing program 0: get_mempolicy(0x0, 0x0, 0xbae2, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:49:00 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5ea, 0x200) 22:49:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) 22:49:00 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x2, 0x8}}, 0x14) 22:49:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:49:00 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3, &(0x7f0000ffe000/0x2000)=nil, 0x1) 22:49:00 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200400, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x4fd, 0x0, 0x201f, 0x6, 0xbe, {0x7, 0x5}}) 22:49:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:49:00 executing program 3: epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x400000) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) flock(r0, 0x6) io_setup(0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x280100) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000100)) 22:49:00 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) unshare(0x10000) 22:49:00 executing program 0: get_mempolicy(0x0, 0x0, 0xda9, &(0x7f0000ffc000/0x1000)=nil, 0x3) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @rand_addr=0x5}}, {{0x2, 0x4e21, @empty}}}, 0x108) 22:49:00 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x8, 0x0, 'client1\x00', 0x1, "222c757fa6cdf634", "00ac3eeba31e7cd15fa6193967ef729da8dccbb6b16726fdefea878870133969", 0x7fffffff, 0x5}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000001c0)=0x2, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) 22:49:00 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000080)=0x24f) unshare(0x10000) 22:49:00 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x8, 0x0, 'client1\x00', 0x1, "222c757fa6cdf634", "00ac3eeba31e7cd15fa6193967ef729da8dccbb6b16726fdefea878870133969", 0x7fffffff, 0x5}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x15, 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000001c0)=0x2, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) 22:49:00 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20900, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000180)="86790e391db1decc9ef0a06a8e7431f177a1de02a00d419d6f0fb7e9a9646e19967d66c78a8e41423c382131db98ee77e93fa48d0ac751c653a40bb567fe6de962bc5270a26c125f1d8f79d9e0de669fddbe07a9afef3016993932d1b6b94abf74d08f0f9655b7599b30e6916ec9da49abb44688c93e226ce116ffe60a59413977c040f847a90beb55cfac0762808de14586ae0f2f915ef0e68791dff7d802a13e222aa062796bfaff0bc7ed3639cd5020a06b0906c8901c239a0edae801") setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000040)="ece5b847cb3f15340d7784bccc7f138d05c7f53f90d3c6c565438bd1a0de0c4aa0a63124ddf901af3796650c3c6b5031abaa7fdf4947e2f19aa9796b434db485cae1ef4a94d84c2121f130f922c3116ac1f0eaec33988453b6bbe145be779f7aaaccf995411c6b14231e41a108abcd7fd63f5515d16cf3a7dfdc142186149660b0727a9d7470e3cb744860d10bd3cf4bb1e8a4f742a06beaeabdd3aa37ab81b2ec41e70acd9ef17b6ba1e2fe7e680c615415f275788f91964fb635cb696d1dc663c824a9775374e855b45b82e3e799cc4a1fc38802", 0xd5) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2) 22:49:00 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x8) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/125) 22:49:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 22:49:00 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(r0, 0x55, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10000) 22:49:00 executing program 4: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000000c0)=""/125) [ 3353.545658] QAT: Invalid ioctl 22:49:00 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ff5000/0x3000)=nil) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000ff4000/0x4000)=nil, 0x2) [ 3353.586949] QAT: Invalid ioctl [ 3354.175705] ================================================================== [ 3354.183612] BUG: KASAN: use-after-free in tipc_group_bc_cong+0x327/0x3f0 [ 3354.190529] Read of size 2 at addr ffff8881cc65a974 by task syz-executor3/5344 [ 3354.197882] [ 3354.199558] CPU: 0 PID: 5344 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #374 [ 3354.206894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3354.216356] Call Trace: [ 3354.219002] dump_stack+0x244/0x39d [ 3354.222640] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3354.227838] ? printk+0xa7/0xcf [ 3354.231122] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 3354.235873] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3354.240982] print_address_description.cold.7+0x9/0x1ff [ 3354.246348] kasan_report.cold.8+0x242/0x309 [ 3354.250820] ? tipc_group_bc_cong+0x327/0x3f0 [ 3354.255328] __asan_report_load2_noabort+0x14/0x20 [ 3354.260259] tipc_group_bc_cong+0x327/0x3f0 [ 3354.264623] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3354.269728] ? tipc_group_cong+0x5d0/0x5d0 [ 3354.273964] ? remove_wait_queue+0x1a6/0x360 [ 3354.278376] ? add_wait_queue+0x2b0/0x2b0 [ 3354.282523] ? __local_bh_enable_ip+0x160/0x260 [ 3354.287195] tipc_send_group_bcast+0x50a/0xd90 [ 3354.291806] ? tipc_sk_sock_err.isra.61+0x2f0/0x2f0 [ 3354.296840] ? __init_waitqueue_head+0x150/0x150 [ 3354.301602] ? refill_pi_state_cache.part.8+0x310/0x310 [ 3354.307026] ? mark_held_locks+0x130/0x130 [ 3354.311261] ? futex_wait_setup+0x266/0x3e0 [ 3354.315585] ? debug_smp_processor_id+0x1c/0x20 [ 3354.320260] ? perf_trace_lock+0x14d/0x7a0 [ 3354.324493] ? futex_wake+0x760/0x760 [ 3354.328297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3354.333836] ? check_preemption_disabled+0x48/0x280 [ 3354.338867] __tipc_sendmsg+0xeec/0x1d40 [ 3354.342927] ? perf_trace_lock+0x14d/0x7a0 [ 3354.347160] ? debug_smp_processor_id+0x1c/0x20 [ 3354.351915] ? tipc_sendmcast+0xf50/0xf50 [ 3354.356062] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 3354.361306] ? zap_class+0x640/0x640 [ 3354.365108] ? print_usage_bug+0xc0/0xc0 [ 3354.369181] ? find_held_lock+0x36/0x1c0 [ 3354.373247] ? mark_held_locks+0xc7/0x130 [ 3354.377398] ? __local_bh_enable_ip+0x160/0x260 [ 3354.382068] ? __local_bh_enable_ip+0x160/0x260 [ 3354.386736] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3354.391365] ? trace_hardirqs_on+0xbd/0x310 [ 3354.395687] ? lock_release+0xa00/0xa00 [ 3354.399709] ? lock_sock_nested+0xe2/0x120 [ 3354.403948] ? trace_hardirqs_off_caller+0x310/0x310 [ 3354.409054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3354.414593] ? check_preemption_disabled+0x48/0x280 [ 3354.419612] ? lock_sock_nested+0x9a/0x120 [ 3354.423903] ? lock_sock_nested+0x9a/0x120 [ 3354.428142] ? __local_bh_enable_ip+0x160/0x260 [ 3354.432843] tipc_sendmsg+0x50/0x70 [ 3354.436517] ? __tipc_sendmsg+0x1d40/0x1d40 [ 3354.440844] sock_sendmsg+0xd5/0x120 [ 3354.444561] ___sys_sendmsg+0x7fd/0x930 [ 3354.448536] ? __local_bh_enable_ip+0x160/0x260 [ 3354.453211] ? copy_msghdr_from_user+0x580/0x580 [ 3354.457965] ? _raw_spin_unlock_bh+0x30/0x40 [ 3354.462384] ? __fget_light+0x2e9/0x430 [ 3354.466363] ? fget_raw+0x20/0x20 [ 3354.469885] ? check_preemption_disabled+0x48/0x280 [ 3354.474923] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3354.480465] ? rcu_pm_notify+0xc0/0xc0 [ 3354.484369] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3354.489911] ? sockfd_lookup_light+0xc5/0x160 [ 3354.494409] __sys_sendmsg+0x11d/0x280 [ 3354.498349] ? __ia32_sys_shutdown+0x80/0x80 [ 3354.502823] ? do_syscall_64+0x9a/0x820 [ 3354.506826] ? do_syscall_64+0x9a/0x820 [ 3354.510883] ? trace_hardirqs_off_caller+0x310/0x310 [ 3354.516035] __x64_sys_sendmsg+0x78/0xb0 [ 3354.520149] do_syscall_64+0x1b9/0x820 [ 3354.524038] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3354.529406] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3354.534380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3354.539268] ? trace_hardirqs_on_caller+0x310/0x310 [ 3354.544285] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3354.549303] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3354.554318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3354.559164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3354.564352] RIP: 0033:0x457669 [ 3354.567546] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3354.586446] RSP: 002b:00007f1ab58dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3354.594151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 3354.601418] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 3354.608682] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3354.615947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ab58db6d4 [ 3354.623214] R13: 00000000004c44bd R14: 00000000004d74a8 R15: 00000000ffffffff [ 3354.630490] [ 3354.632113] Allocated by task 5344: [ 3354.635741] save_stack+0x43/0xd0 [ 3354.639197] kasan_kmalloc+0xc7/0xe0 [ 3354.642909] kmem_cache_alloc_trace+0x152/0x750 [ 3354.647575] tipc_group_create+0x152/0xa70 [ 3354.651824] tipc_setsockopt+0x2d1/0xd70 [ 3354.655887] __sys_setsockopt+0x1ba/0x3c0 [ 3354.660034] __x64_sys_setsockopt+0xbe/0x150 [ 3354.664444] do_syscall_64+0x1b9/0x820 [ 3354.668331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3354.673515] [ 3354.675142] Freed by task 5356: [ 3354.678419] save_stack+0x43/0xd0 [ 3354.681876] __kasan_slab_free+0x102/0x150 [ 3354.686108] kasan_slab_free+0xe/0x10 [ 3354.689906] kfree+0xcf/0x230 [ 3354.693013] tipc_group_delete+0x2e4/0x3f0 [ 3354.697248] tipc_sk_leave+0x113/0x220 [ 3354.701132] tipc_setsockopt+0x97d/0xd70 [ 3354.705191] __sys_setsockopt+0x1ba/0x3c0 [ 3354.709335] __x64_sys_setsockopt+0xbe/0x150 [ 3354.713804] do_syscall_64+0x1b9/0x820 [ 3354.717740] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3354.723018] [ 3354.724685] The buggy address belongs to the object at ffff8881cc65a900 [ 3354.724685] which belongs to the cache kmalloc-192 of size 192 [ 3354.737448] The buggy address is located 116 bytes inside of [ 3354.737448] 192-byte region [ffff8881cc65a900, ffff8881cc65a9c0) [ 3354.749316] The buggy address belongs to the page: [ 3354.754243] page:ffffea0007319680 count:1 mapcount:0 mapping:ffff8881da800040 index:0xffff8881cc65ae00 [ 3354.763683] flags: 0x2fffc0000000200(slab) [ 3354.767917] raw: 02fffc0000000200 ffffea0007309d08 ffffea00070c3188 ffff8881da800040 [ 3354.775815] raw: ffff8881cc65ae00 ffff8881cc65a000 000000010000000c 0000000000000000 [ 3354.783809] page dumped because: kasan: bad access detected [ 3354.789514] [ 3354.791134] Memory state around the buggy address: [ 3354.796109] ffff8881cc65a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3354.803515] ffff8881cc65a880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3354.810874] >ffff8881cc65a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3354.818284] ^ [ 3354.825294] ffff8881cc65a980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3354.832650] ffff8881cc65aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3354.840001] ================================================================== [ 3354.847350] Disabling lock debugging due to kernel taint [ 3354.853296] Kernel panic - not syncing: panic_on_warn set ... [ 3354.859221] CPU: 0 PID: 5344 Comm: syz-executor3 Tainted: G B 4.20.0-rc6+ #374 [ 3354.867894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3354.877764] Call Trace: [ 3354.880404] dump_stack+0x244/0x39d [ 3354.884046] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3354.889241] panic+0x2ad/0x55c [ 3354.892437] ? add_taint.cold.5+0x16/0x16 [ 3354.896588] ? preempt_schedule+0x4d/0x60 [ 3354.900736] ? ___preempt_schedule+0x16/0x18 [ 3354.905151] ? trace_hardirqs_on+0xb4/0x310 [ 3354.909477] kasan_end_report+0x47/0x4f [ 3354.913447] kasan_report.cold.8+0x76/0x309 [ 3354.917807] ? tipc_group_bc_cong+0x327/0x3f0 [ 3354.922377] __asan_report_load2_noabort+0x14/0x20 [ 3354.927316] tipc_group_bc_cong+0x327/0x3f0 [ 3354.931638] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3354.936739] ? tipc_group_cong+0x5d0/0x5d0 [ 3354.940988] ? remove_wait_queue+0x1a6/0x360 [ 3354.945410] ? add_wait_queue+0x2b0/0x2b0 [ 3354.949564] ? __local_bh_enable_ip+0x160/0x260 [ 3354.954234] tipc_send_group_bcast+0x50a/0xd90 [ 3354.958837] ? tipc_sk_sock_err.isra.61+0x2f0/0x2f0 [ 3354.963866] ? __init_waitqueue_head+0x150/0x150 [ 3354.968626] ? refill_pi_state_cache.part.8+0x310/0x310 [ 3354.974048] ? mark_held_locks+0x130/0x130 [ 3354.978287] ? futex_wait_setup+0x266/0x3e0 [ 3354.982622] ? debug_smp_processor_id+0x1c/0x20 [ 3354.987298] ? perf_trace_lock+0x14d/0x7a0 [ 3354.991542] ? futex_wake+0x760/0x760 [ 3354.995346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3355.000887] ? check_preemption_disabled+0x48/0x280 [ 3355.005907] __tipc_sendmsg+0xeec/0x1d40 [ 3355.009967] ? perf_trace_lock+0x14d/0x7a0 [ 3355.014208] ? debug_smp_processor_id+0x1c/0x20 [ 3355.018895] ? tipc_sendmcast+0xf50/0xf50 [ 3355.023043] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 3355.028244] ? zap_class+0x640/0x640 [ 3355.031961] ? print_usage_bug+0xc0/0xc0 [ 3355.036024] ? find_held_lock+0x36/0x1c0 [ 3355.040100] ? mark_held_locks+0xc7/0x130 [ 3355.044257] ? __local_bh_enable_ip+0x160/0x260 [ 3355.048929] ? __local_bh_enable_ip+0x160/0x260 [ 3355.053612] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3355.058203] ? trace_hardirqs_on+0xbd/0x310 [ 3355.062531] ? lock_release+0xa00/0xa00 [ 3355.066506] ? lock_sock_nested+0xe2/0x120 [ 3355.070748] ? trace_hardirqs_off_caller+0x310/0x310 [ 3355.075896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3355.081446] ? check_preemption_disabled+0x48/0x280 [ 3355.086458] ? lock_sock_nested+0x9a/0x120 [ 3355.090689] ? lock_sock_nested+0x9a/0x120 [ 3355.094925] ? __local_bh_enable_ip+0x160/0x260 [ 3355.099596] tipc_sendmsg+0x50/0x70 [ 3355.103231] ? __tipc_sendmsg+0x1d40/0x1d40 [ 3355.107563] sock_sendmsg+0xd5/0x120 [ 3355.111276] ___sys_sendmsg+0x7fd/0x930 [ 3355.115247] ? __local_bh_enable_ip+0x160/0x260 [ 3355.119927] ? copy_msghdr_from_user+0x580/0x580 [ 3355.124695] ? _raw_spin_unlock_bh+0x30/0x40 [ 3355.129110] ? __fget_light+0x2e9/0x430 [ 3355.133084] ? fget_raw+0x20/0x20 [ 3355.136550] ? check_preemption_disabled+0x48/0x280 [ 3355.141582] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3355.147176] ? rcu_pm_notify+0xc0/0xc0 [ 3355.151072] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3355.156614] ? sockfd_lookup_light+0xc5/0x160 [ 3355.161122] __sys_sendmsg+0x11d/0x280 [ 3355.165039] ? __ia32_sys_shutdown+0x80/0x80 [ 3355.169468] ? do_syscall_64+0x9a/0x820 [ 3355.173442] ? do_syscall_64+0x9a/0x820 [ 3355.177423] ? trace_hardirqs_off_caller+0x310/0x310 [ 3355.182535] __x64_sys_sendmsg+0x78/0xb0 [ 3355.186597] do_syscall_64+0x1b9/0x820 [ 3355.190486] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3355.195935] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3355.200871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3355.205713] ? trace_hardirqs_on_caller+0x310/0x310 [ 3355.210731] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3355.215747] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3355.220764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3355.225640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3355.230840] RIP: 0033:0x457669 [ 3355.234039] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3355.252940] RSP: 002b:00007f1ab58dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3355.260691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 3355.267970] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 3355.275245] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3355.282509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ab58db6d4 [ 3355.289768] R13: 00000000004c44bd R14: 00000000004d74a8 R15: 00000000ffffffff [ 3355.298282] Kernel Offset: disabled [ 3355.301915] Rebooting in 86400 seconds..