[ 66.204898][ T27] audit: type=1800 audit(1576736576.000:24): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2454 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 67.036600][ T27] audit: type=1800 audit(1576736576.920:25): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 67.067957][ T27] audit: type=1800 audit(1576736576.920:26): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. 2019/12/19 06:23:05 fuzzer started 2019/12/19 06:23:07 dialing manager at 10.128.0.26:43141 2019/12/19 06:23:07 syscalls: 2683 2019/12/19 06:23:07 code coverage: enabled 2019/12/19 06:23:07 comparison tracing: enabled 2019/12/19 06:23:07 extra coverage: enabled 2019/12/19 06:23:07 setuid sandbox: enabled 2019/12/19 06:23:07 namespace sandbox: enabled 2019/12/19 06:23:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/19 06:23:07 fault injection: enabled 2019/12/19 06:23:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/19 06:23:07 net packet injection: enabled 2019/12/19 06:23:07 net device setup: enabled 2019/12/19 06:23:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/19 06:23:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:25:54 executing program 0: 06:25:55 executing program 1: syzkaller login: [ 245.288681][ T9872] IPVS: ftp: loaded support on port[0] = 21 [ 245.407044][ T9874] IPVS: ftp: loaded support on port[0] = 21 06:25:55 executing program 2: [ 245.558038][ T9872] chnl_net:caif_netlink_parms(): no params data found [ 245.730587][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.737735][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.750374][ T9872] device bridge_slave_0 entered promiscuous mode [ 245.765456][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.774947][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.783712][ T9872] device bridge_slave_1 entered promiscuous mode [ 245.797521][ T9874] chnl_net:caif_netlink_parms(): no params data found [ 245.816417][ T9878] IPVS: ftp: loaded support on port[0] = 21 06:25:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) [ 245.873752][ T9872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.933974][ T9872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.982467][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.992681][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.001732][ T9874] device bridge_slave_0 entered promiscuous mode [ 246.043034][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.050655][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.059287][ T9874] device bridge_slave_1 entered promiscuous mode [ 246.069519][ T9872] team0: Port device team_slave_0 added [ 246.104652][ T9872] team0: Port device team_slave_1 added [ 246.178922][ T9874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.207485][ T9880] IPVS: ftp: loaded support on port[0] = 21 06:25:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7fd, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/168) [ 246.251569][ T9872] device hsr_slave_0 entered promiscuous mode [ 246.301336][ T9872] device hsr_slave_1 entered promiscuous mode [ 246.409485][ T9874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.433085][ T9878] chnl_net:caif_netlink_parms(): no params data found 06:25:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000200)) [ 246.514790][ T9874] team0: Port device team_slave_0 added [ 246.536765][ T9883] IPVS: ftp: loaded support on port[0] = 21 [ 246.591288][ T9874] team0: Port device team_slave_1 added [ 246.617756][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.632939][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.642249][ T9878] device bridge_slave_0 entered promiscuous mode [ 246.655663][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.663208][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.674390][ T9878] device bridge_slave_1 entered promiscuous mode [ 246.752198][ T9872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.792060][ T9878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.840011][ T9874] device hsr_slave_0 entered promiscuous mode [ 246.888300][ T9874] device hsr_slave_1 entered promiscuous mode [ 246.938039][ T9874] debugfs: Directory 'hsr0' with parent '/' already present! [ 246.946513][ T9872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.992980][ T9872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.072590][ T9872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.136494][ T9885] IPVS: ftp: loaded support on port[0] = 21 [ 247.144540][ T9878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.194638][ T9878] team0: Port device team_slave_0 added [ 247.203873][ T9878] team0: Port device team_slave_1 added [ 247.296812][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 247.334268][ T9874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.429984][ T9878] device hsr_slave_0 entered promiscuous mode [ 247.478418][ T9878] device hsr_slave_1 entered promiscuous mode [ 247.538083][ T9878] debugfs: Directory 'hsr0' with parent '/' already present! [ 247.571974][ T9874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.650398][ T9874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.703078][ T9874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.768686][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.775957][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.794502][ T9880] device bridge_slave_0 entered promiscuous mode [ 247.805002][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.812714][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.820790][ T9880] device bridge_slave_1 entered promiscuous mode [ 247.924154][ T9883] chnl_net:caif_netlink_parms(): no params data found [ 247.988555][ T9878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.051790][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.072972][ T9878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.135020][ T9878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.189464][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.196816][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.205165][ T9883] device bridge_slave_0 entered promiscuous mode [ 248.214464][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.230738][ T9878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.290352][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.297738][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.306932][ T9883] device bridge_slave_1 entered promiscuous mode [ 248.330757][ T9885] chnl_net:caif_netlink_parms(): no params data found [ 248.368222][ T9883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.381621][ T9883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.393090][ T9880] team0: Port device team_slave_0 added [ 248.402207][ T9880] team0: Port device team_slave_1 added [ 248.440362][ T9872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.458830][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.466384][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.474940][ T9885] device bridge_slave_0 entered promiscuous mode [ 248.487604][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.495512][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.507260][ T9885] device bridge_slave_1 entered promiscuous mode [ 248.571691][ T9880] device hsr_slave_0 entered promiscuous mode [ 248.628406][ T9880] device hsr_slave_1 entered promiscuous mode [ 248.668507][ T9880] debugfs: Directory 'hsr0' with parent '/' already present! [ 248.698631][ T9883] team0: Port device team_slave_0 added [ 248.715784][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.736427][ T9883] team0: Port device team_slave_1 added [ 248.744210][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.777427][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.786908][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.825559][ T9872] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.859454][ T9885] team0: Port device team_slave_0 added [ 248.867437][ T9885] team0: Port device team_slave_1 added [ 248.881431][ T9874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.952540][ T9883] device hsr_slave_0 entered promiscuous mode [ 249.008377][ T9883] device hsr_slave_1 entered promiscuous mode [ 249.068306][ T9883] debugfs: Directory 'hsr0' with parent '/' already present! [ 249.083575][ T9880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.130902][ T9880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.191025][ T9880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.267995][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.277713][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.291807][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.299242][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.307720][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.316998][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.325591][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.332798][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.353484][ T9880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.436799][ T9874] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.447436][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.459670][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.468983][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.476774][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.520179][ T9885] device hsr_slave_0 entered promiscuous mode [ 249.558224][ T9885] device hsr_slave_1 entered promiscuous mode [ 249.598109][ T9885] debugfs: Directory 'hsr0' with parent '/' already present! [ 249.620298][ T9883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.704256][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.716332][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.725388][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.734813][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.742139][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.750676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.759895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.769150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.778055][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.786709][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.793982][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.802274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.811298][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.820666][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.829848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.838993][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.847344][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.856109][ T9883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.919681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.930471][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.938867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.947528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.957094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.966053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.974717][ T9883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.027438][ T9883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.096530][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.120302][ T9885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.180678][ T9885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.223800][ T9878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.237773][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.247219][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.268202][ T9885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.319788][ T9874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.330950][ T9874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.351841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.362417][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.370437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.380043][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.389689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.398377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.407170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.416712][ T9885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.497435][ T9874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.515081][ T9878] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.523951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.532484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.540468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.548720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.586234][ T9872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.632989][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.672147][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.681775][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.693240][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.701024][ T9888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.715732][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.724874][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.733483][ T9888] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.740769][ T9888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.752038][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.780439][ T9883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.802628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.811937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.853350][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.886038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 06:26:00 executing program 1: bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) getpid() r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) signalfd(r0, &(0x7f0000000180)={0xfffffffffffffffd}, 0x8) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) socket(0xa, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) 06:26:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x50}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0xa, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000200)=""/253, &(0x7f0000000340)=0xfd) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40600, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)={r7, 0x1ff, 0x3, [0x4, 0x81, 0x2000]}, 0xe) [ 250.913488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.938970][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.959900][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.020210][ T9878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.036943][ T9878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.060079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.072839][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.089078][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.099316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.108776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.121493][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.135159][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.144107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.153311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.161994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.169320][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.177470][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.187124][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.195832][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.203284][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.225219][ T9883] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.240236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.252398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.263763][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.272552][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:26:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000100)='./file0\x00', 0x800000000000744, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=[&(0x7f0000000140)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\aJ\xce\x7f\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\r\x85\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfAH\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e \xee\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00'/472, &(0x7f0000000800)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xacV!\xa0v\xd4*\xbb\xfc\xc6)k\t0\xb8\xd2\x8d\xcd\xa9\x9b\xae!\xbe-\xbe\xca\xe1\xb2d[\xcdB\xf1\x01=\xa9\xa3A\xc5\xa3y)\t\x85q\x11\x1b\x85\xa4\x9fLd?\x17\xe7\xe4>r\xb7\x1f\x93\x9f\xdc\xc4\xb3\x92;\x925\xaf&\xaf\x13c\xbc\xc9\x1co\xa0\xb8z\xe6;\xa50\xc8l\xadY3%\f\xfd\xc3\xfcl\x96P]\xc1\xdfi%\xfe!Y\x1c\x8e\xd3E\xedn/l\x06\xa0{I\x94F'], &(0x7f0000001000)=[&(0x7f0000001d40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a\x00\x00\x00\x00pfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zf\xafc\xf9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac4\x86\xa5>\x14$D\x9en\t\x12\x89S1\xa8;u\xba\x1c1\xb6\x1c\xf4\x06\x97T\xbc\xd0\xbdh\xb9p\t%\xe5O\n\xe7\xf0!W\xfd6j \f\r\xc63\xa4\x7f\xebs\xa0\xca\xc3$K}O\xc5,U\xad\xa7*\x00r\x9f\xc9\xf0\xb2\xd6\xd6\xd0\xb5\xd97\x9c@0\x94\xd3&G\xf5\x9b\x01QE\xe9\xda\xde{}\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000002f80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x94*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i.Epw\xba\xe1\v\x1a9\xcf\xee<\xbaC\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xb9\xcbu2d\xa3\xb1\xce\x83\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9dB_A\xec>k*\x13\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192G&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xacl\xcdX\x04IW\f\xb4r\xfc\xfd\xf8\xcb%\xe8+\xd7\xb542NT|\x1b\xa9\x94\x11F+c\x17\ag\xa4\x94\xef\xab\xdd\xb3\xfc\x9f\x8dTJ\x05\xe2\xdd\\\a\xe0DAg=\x13\x8f\xb0Ho\x8c\\s(\x98\xcff\xd5\xfc\x11\xa5$\xb6\xa4s9\xf4\x01E\xcd&\x99\xf67\xd5\x13\x87+.h\x84\xf6\x01\xbe\x86\xe1\nG\x99\xd7\x17\xeb\xf2\x03Fb\xb1f\xf5\x95\xc8ph\xd5\x84C\xf4\xd1\xe1\xa5z\"y9VG\x01r{\xd2\x18rn\x81\xcc\xc8\a\xd3\x13_\x13\xad\\p\x14\xf8\xd5}e\x98Wp\xf9\xd91\x16\xa8\xbb2?@\xf2\v\x12\xc6D8\xf5o\x00\x00\x00\x00\x00\x00', &(0x7f0000001240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000c80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\aJ\xce\x7f\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\r\x85\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000a80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\x8a&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\xf1(\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc6HrE\x8e\x90\x86\xe5`L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xd9\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7\xf6o?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\xbaC\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9dB_A\xec>k*\x13\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001880)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) [ 251.312424][ T9885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.328517][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.337543][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 06:26:01 executing program 1: bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) getpid() r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) signalfd(r0, &(0x7f0000000180)={0xfffffffffffffffd}, 0x8) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) socket(0xa, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) [ 251.373008][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.380363][ T9892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.388592][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.397709][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.406660][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.413840][ T9892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.422466][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.431642][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.446932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.456046][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.465222][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.514348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.526976][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.536771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.546035][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.565818][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.576860][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.586843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.596517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.605310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.620748][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.632046][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.643503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.657115][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.671377][ T9885] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.690220][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.700340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.714436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.723937][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.747315][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv0 06:26:01 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x73) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x200001000008912, &(0x7f00000001c0)="0805b5055e03cfe8474071") sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="4fb25317170d2ff5fe706d37fc8a7082", 0x7}, 0x28a, 0x0, 0xfffffffffffffd66}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) [ 251.798679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.806395][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.815382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.829764][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.838593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 06:26:01 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb'}}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0xff51, 0x400}], 0x800000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x40800) connect(r2, &(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x80) [ 251.847346][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.856380][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.865489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.892640][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.899906][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.908615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.924082][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.952097][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.959390][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.988823][ T9883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.008528][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.016955][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.030034][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.039925][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.050420][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.091916][ T9937] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 252.105044][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.119822][ T9937] EXT4-fs (loop1): bad geometry: block count 1080 exceeds size of device (32 blocks) 06:26:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, &(0x7f0000000100)='posix_acl_accessuser&[em0\x00') r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100002400075c6946a50d6872010000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x170}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 252.196772][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.209581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.234030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:26:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="6def1498e9104172f34aa7c441d5c71444930ff862b87636b37c0e2ac703c268f2f1cc9ee9a605e68783c6b1bf430ed54e5792920398617e3afec7abd02611968b86871e93e5092a8fa4dd23da43e3717337e96201773fd0fe509ad64da72ff1248001c462a88ef5e63846b5b291d19a7c0f37af7f68d1892341e160467655a379f3b9dc8fd8a1a551dd24eedc33688f188c9257cfe38d00d1fe6d75f646995429915eb30f86da907e1b58cfc388f823e75ca31575d0de87c39a27cdf4b9023502fe9123aa655b2cd7419e209cab5e6f54e250707a4427a657461dbf60772dfa06baee5ce2410ba45ca16ea624a8", 0xee, 0xfffffffffffffff9) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) [ 252.249106][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.259749][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.269208][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.277077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.285532][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.294266][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.308821][ T9885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.374005][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 06:26:02 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40240, 0x0) connect$netrom(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x9, 0x7b}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="2302"], 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 252.423018][ T9883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.436318][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.465981][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.512758][ T9933] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 252.523432][ T9933] EXT4-fs (loop1): bad geometry: block count 1080 exceeds size of device (32 blocks) [ 252.648855][ T9885] 8021q: adding VLAN 0 to HW filter on device batadv0 06:26:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x765d0200, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3cee000005000000000040000000000800000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800150000000000"], 0x3c}}, 0x0) [ 252.722125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.733897][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.186252][ C1] hrtimer: interrupt took 62745 ns 06:26:03 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000240)=@v2={0x3, 0x2, 0x4, 0x101, 0xec, "cfe6b1af5c2d0c4488dd8085ba8b52c1deb5dec3cf483c2e23c462d7894b57ec85d1acf04db659773b3713c8f07a013e79731fa48e6a2d30bb20f7f2c0d77d19406390482a83193d6fdc5b567bf8ede1484b1f1988fde13d0e0c8cd95e9f1da1841ca4a58bf983af75490ceeaa2866fd897998c8deddbfba4a0aabf2cba88aa5872312bbd4eff20d29f5c5cfde9b255c432031580cbc3c815d7b75ce0c13948e3fbcb786dcf20a4acbac7bec10307da82cf5953f3ab426acb1b906118da29a86ec67c6de3823d6ea7826ef342af1058dcf22af7098c83ca405efda998f29623bc3d861f78a936b68517e7f7b"}, 0xf6, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lseek(r0, 0xa4fc, 0x0) 06:26:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000200)) 06:26:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000b06096768fe07072b0300370e000a0014000200450201070300001419001a00120002000e00010005000300"/57, 0x39}], 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x800, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000100)=0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7f) r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x80000001, 0x4) 06:26:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0xfffffd6c, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x19, 0x1, 0x0, 0x0, {0x1}, [@typed={0x14, 0x1, @ipv6=@loopback={0x100000000000000}}]}, 0x28}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)="9eb303416114edda7e9e4e8dd4fe4f722ba131c35d356e397f10", 0x1a}, {&(0x7f00000000c0)="131d87357c71d257d2e0ce3db4af82d475ca3ff9e439e2c9dc481df19ed835d58bbc8cf306c1b374497e74ff8ad3d95ed828f81432faa1812c2d14bbed905224902a9257ac927665ad70539d9c81cf6969acb0473b7689d5582b53e2e95cc4c41dd01d7bd109ed963de934a145e151b9a8364ecd658e389972d98212767f4a3e3a9923552fd43a2379bd1127a6", 0x8d}, {&(0x7f0000000180)="518898a6cc9e57158d8ad8687cb074086c966899e09990d299bf2b975ca83444c80dfecd8cf329577bff85ef7fd967aae13568f27d4f01217be6f49cbacde04d7ed820de4fbcbc7f412fdfdc5617c1094fa8454a1a00887205f83058a95c801a99825abe7cd7de844486601168004f0414ce4dc3c6787f6a8d2692b980d4c7401c0904c07b322463296d5dde74632feba6ffee80da4480591f80c110ab7a670e76310d6918f59de7dcd9970091e2a3", 0xaf}], 0x3, 0x4) 06:26:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000400)={'feth1_to_b\x02nd\x00\x01\x00', @ifru_flags}) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="22e2e932", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000480)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r5, 0x9, 0x9}, 0x8) unshare(0x40000000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='\x1b\x00') sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000325bdc200fddbdf250e0000000800040080d67a24080005000500000008000400090000a3efa81a00080001000200000008000600e79f00000800040005000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x218bb11a8c8ef108) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000180)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) 06:26:03 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$tun(r12, &(0x7f00000002c0)={@void, @val={0x2, 0x0, 0x9, 0x8, 0xd3, 0x8}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @multicast2, @dev={[], 0x21}, @local}}, 0x26) 06:26:03 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$TCSBRK(r0, 0x5409, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffffa, 0x40) [ 253.537468][T10016] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 253.538671][T10013] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 253.587597][T10016] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 253.642087][T10013] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.656995][T10013] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:26:03 executing program 2: mkdir(0x0, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) unshare(0x2040400) r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x10080) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000440)={"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"}) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={0x0}}, 0x0) gettid() perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x6}, 0x182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x100, 0x0) r2 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000240)={'team0\x00\x030\xff\xfd\x00%`\xc3\xff\xff', 0xb5}) [ 253.686743][T10013] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 06:26:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)=[0x0], 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001880)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000018c0)=0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x2, 0xf22bad23a366f509, 0x40, 0xc7, "2523a97327d5781953e0c807222865c504faaee6d816e8654da41ab3a65a7242f3ea1c0b7e2652d09ec9a84a6481f1ae307d32c9f63d2c3189ec9a29e6ba64", 0x20}, 0x60) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x6, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) [ 253.769851][T10026] IPVS: ftp: loaded support on port[0] = 21 06:26:03 executing program 5: socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x1) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xf9c24a6e26e6bdc5) r1 = socket(0x22, 0x2, 0x1) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xf9c24a6e26e6bdc5) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x80}, 0x28, 0x2) r2 = dup3(r0, 0xffffffffffffffff, 0xc0000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000000240)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="a31c0000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r9, 0x5, 0x2da5090b43647941}, 0xc) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x1) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r10, 0x0) write$P9_RWALK(r10, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r11 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x1f, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r10, r11) close(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 06:26:03 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$tun(r12, &(0x7f00000002c0)={@void, @val={0x2, 0x0, 0x9, 0x8, 0xd3, 0x8}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @multicast2, @dev={[], 0x21}, @local}}, 0x26) 06:26:03 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$TCSBRK(r0, 0x5409, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffffa, 0x40) 06:26:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$TCSBRK(r0, 0x5409, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffffa, 0x40) 06:26:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$TCSBRK(r0, 0x5409, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffffa, 0x40) 06:26:05 executing program 2: mkdir(0x0, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) unshare(0x2040400) r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x10080) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000440)={"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"}) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={0x0}}, 0x0) gettid() perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x6}, 0x182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x100, 0x0) r2 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000240)={'team0\x00\x030\xff\xfd\x00%`\xc3\xff\xff', 0xb5}) 06:26:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0xf, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54e5ab0516dc59ae, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) r4 = dup(r3) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, [], [{0x2, 0x0, 0x2, 0x100000001, 0xff, 0x6}, {0x7ff, 0x5bc79ec6, 0x2, 0x800, 0xbcd6, 0x1f}]}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x5, 0x30000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x3, [], "ce9fccf8f5f9c5eeacf685c276860c2f"}) ioctl(r5, 0x1000008912, &(0x7f0000000040)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fb0\x00', 0x4000, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000580)) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x4e23, @broadcast}, 0xc0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000340)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000380)=r8) r9 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') preadv(r10, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/119, 0x77}], 0x1, 0x3f) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f00000005c0)='TRUE', 0xffffff70, 0x0) kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000040)={r10, r1, 0x10000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0x7) preadv(r12, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/119, 0x77}], 0x1, 0x0) [ 255.615409][T10032] IPVS: ftp: loaded support on port[0] = 21 06:26:06 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$tun(r12, &(0x7f00000002c0)={@void, @val={0x2, 0x0, 0x9, 0x8, 0xd3, 0x8}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @multicast2, @dev={[], 0x21}, @local}}, 0x26) 06:26:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001600)={'bpq0\x00', 0x600}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x10001) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r2 = open(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x0}) write$cgroup_type(r3, &(0x7f0000001180)='threaded\x00', 0xfc9a) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)=0x637d73e013a48e6d) getdents64(r2, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0xff8) r4 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r4, &(0x7f0000000080), 0x1000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) 06:26:06 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:26:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0xf, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54e5ab0516dc59ae, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) r4 = dup(r3) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, [], [{0x2, 0x0, 0x2, 0x100000001, 0xff, 0x6}, {0x7ff, 0x5bc79ec6, 0x2, 0x800, 0xbcd6, 0x1f}]}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x5, 0x30000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x3, [], "ce9fccf8f5f9c5eeacf685c276860c2f"}) ioctl(r5, 0x1000008912, &(0x7f0000000040)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fb0\x00', 0x4000, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000580)) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x4e23, @broadcast}, 0xc0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000340)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000380)=r8) r9 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') preadv(r10, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/119, 0x77}], 0x1, 0x3f) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f00000005c0)='TRUE', 0xffffff70, 0x0) kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000040)={r10, r1, 0x10000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0x7) preadv(r12, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/119, 0x77}], 0x1, 0x0) 06:26:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000400)={'feth1_to_b\x02nd\x00\x01\x00', @ifru_flags}) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="22e2e932", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000480)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r5, 0x9, 0x9}, 0x8) unshare(0x40000000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='\x1b\x00') sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000325bdc200fddbdf250e0000000800040080d67a24080005000500000008000400090000a3efa81a00080001000200000008000600e79f00000800040005000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x218bb11a8c8ef108) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000180)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) 06:26:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0xf, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54e5ab0516dc59ae, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) r4 = dup(r3) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, [], [{0x2, 0x0, 0x2, 0x100000001, 0xff, 0x6}, {0x7ff, 0x5bc79ec6, 0x2, 0x800, 0xbcd6, 0x1f}]}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x5, 0x30000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x3, [], "ce9fccf8f5f9c5eeacf685c276860c2f"}) ioctl(r5, 0x1000008912, &(0x7f0000000040)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fb0\x00', 0x4000, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000580)) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x4e23, @broadcast}, 0xc0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000340)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000380)=r8) r9 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') preadv(r10, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/119, 0x77}], 0x1, 0x3f) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002e00815be00f80ecdb4cb904094865160800030014000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f00000005c0)='TRUE', 0xffffff70, 0x0) kcmp$KCMP_EPOLL_TFD(r8, 0x0, 0x7, r9, &(0x7f0000000040)={r10, r1, 0x10000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0x7) preadv(r12, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/119, 0x77}], 0x1, 0x0) [ 256.553075][T10085] FAT-fs (loop0): bogus number of reserved sectors [ 256.559969][T10085] FAT-fs (loop0): Can't find a valid FAT filesystem [ 256.618034][ T152] tipc: TX() has been purged, node left! 06:26:06 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) [ 256.827725][T10085] FAT-fs (loop0): bogus number of reserved sectors [ 256.834447][T10085] FAT-fs (loop0): Can't find a valid FAT filesystem [ 256.883526][ T2607] blk_update_request: I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.896910][ T2607] Buffer I/O error on dev loop0, logical block 1, async page read [ 256.905202][ T2607] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.916216][ T2607] Buffer I/O error on dev loop0, logical block 2, async page read [ 256.924155][ T2607] blk_update_request: I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.935157][ T2607] Buffer I/O error on dev loop0, logical block 3, async page read [ 256.945648][ T2607] blk_update_request: I/O error, dev loop0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.956638][ T2607] Buffer I/O error on dev loop0, logical block 4, async page read [ 256.964636][ T2607] blk_update_request: I/O error, dev loop0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.975601][ T2607] Buffer I/O error on dev loop0, logical block 5, async page read 06:26:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001600)={'bpq0\x00', 0x600}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x10001) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r2 = open(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x0}) write$cgroup_type(r3, &(0x7f0000001180)='threaded\x00', 0xfc9a) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)=0x637d73e013a48e6d) getdents64(r2, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0xff8) r4 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r4, &(0x7f0000000080), 0x1000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) 06:26:06 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$tun(r12, &(0x7f00000002c0)={@void, @val={0x2, 0x0, 0x9, 0x8, 0xd3, 0x8}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @multicast2, @dev={[], 0x21}, @local}}, 0x26) [ 256.984573][ T2607] blk_update_request: I/O error, dev loop0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.995546][ T2607] Buffer I/O error on dev loop0, logical block 6, async page read [ 257.003521][ T2607] blk_update_request: I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.014512][ T2607] Buffer I/O error on dev loop0, logical block 7, async page read 06:26:07 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 06:26:07 executing program 5: perf_event_open(&(0x7f0000002dc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xd0fb) r1 = socket(0x1e, 0x805, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(r3) dup2(r2, r3) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) 06:26:07 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) dup(r11) [ 257.209793][T10117] FAT-fs (loop0): bogus number of reserved sectors [ 257.216447][T10117] FAT-fs (loop0): Can't find a valid FAT filesystem 06:26:07 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) [ 257.324979][T10112] IPVS: ftp: loaded support on port[0] = 21 06:26:07 executing program 1: ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 06:26:07 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 06:26:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet(0x10, 0x2, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/185) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x31f) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x4000000000000}, &(0x7f0000000080)={0x4, 0x0, 0x7b589b1e, 0x0, 0x5, 0x0, 0x0, 0x1f}, &(0x7f00000000c0)={0x3, 0x80000001, 0x4, 0x7, 0x0, 0x9, 0x1}, &(0x7f0000000100)={0x77359400}) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) fdatasync(0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) 06:26:11 executing program 3: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0) r1 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r1}, 0x0) r2 = memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) dup2(0xffffffffffffffff, r2) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket(0xa, 0x3, 0x8) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) waitid(0x0, 0x0, &(0x7f0000000040), 0x2, 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) dup2(r6, 0xffffffffffffffff) r7 = gettid() r8 = syz_open_dev$sg(0x0, 0x0, 0x40) ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000780)) ptrace$setopts(0xffffffffffffffff, r7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r9}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffffffffffffc1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r9}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r9}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r9}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="57efe30852c54cfe675374e114fb9b4366ffe17de31621d02f78379663aad3136d953b5437ba733e3501123efb64facaba3f0ead275c047692d798d6d42dc05e5a66f96820d01b0cf3d1aef94fb3a22a02f15d5e5d1a5ca83a65e70297d06f385abf3a13f5f432d2d08f4e17498efc36ebf09c61d466549c4fd6373be41566fae51e266789ad98bc6adef1d8f229"], 0x1}}, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x6a7}}, 0xffffffffffffffb2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/11) r13 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r14 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) getsockopt$MISDN_TIME_STAMP(r14, 0x0, 0x1, 0x0, 0x0) pwritev(r13, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r13) sendfile(r10, r11, 0x0, 0x102000004) 06:26:11 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 06:26:11 executing program 1: ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 06:26:11 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 06:26:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet(0x10, 0x2, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/185) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x31f) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x4000000000000}, &(0x7f0000000080)={0x4, 0x0, 0x7b589b1e, 0x0, 0x5, 0x0, 0x0, 0x1f}, &(0x7f00000000c0)={0x3, 0x80000001, 0x4, 0x7, 0x0, 0x9, 0x1}, &(0x7f0000000100)={0x77359400}) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) fdatasync(0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) 06:26:11 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 06:26:11 executing program 1: ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 06:26:11 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:11 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) [ 261.869740][T10167] bridge0: port 3(gretap0) entered blocking state [ 261.899033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 261.905184][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:26:11 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) [ 261.951285][T10167] bridge0: port 3(gretap0) entered disabled state [ 262.004635][T10167] device gretap0 entered promiscuous mode [ 262.040976][T10167] bridge0: port 3(gretap0) entered blocking state [ 262.047731][T10167] bridge0: port 3(gretap0) entered forwarding state 06:26:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0xaa0000000000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x80008}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r1, r0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) preadv(r0, &(0x7f00000017c0), 0x1a6, 0x0) 06:26:12 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 262.316692][ T152] tipc: TX() has been purged, node left! [ 262.375796][T10171] syz-executor.3 (10171) used greatest stack depth: 22400 bytes left 06:26:12 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400302, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@nfs_export_off='nfsCex\x86\xb1\xbc\x1f\xb6off'}, {@default_permissions='default_permissions'}]}) 06:26:12 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) 06:26:12 executing program 0: r0 = socket$inet6(0xa, 0x8000008000080003, 0x800000000000003) r1 = socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffc1, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100290a000800feffffff0036a80000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a00000000000400000004200000040000000400000004000000"], 0x3c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1) 06:26:12 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 06:26:12 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:26:12 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:26:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$alg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b4d442128c", 0x5}], 0x1}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0xc16}], 0x1}, 0x0) 06:26:12 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) [ 262.682980][T10213] overlayfs: unrecognized mount option "nfsCex†±¼¶off" or missing value [ 262.780082][T10219] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 262.885257][T10201] bridge0: port 1(bridge_slave_0) entered disabled state 06:26:12 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 06:26:12 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 06:26:13 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 06:26:13 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) [ 263.410380][T10240] FAULT_INJECTION: forcing a failure. [ 263.410380][T10240] name failslab, interval 1, probability 0, space 0, times 1 [ 263.423963][T10240] CPU: 1 PID: 10240 Comm: syz-executor.1 Not tainted 5.5.0-rc2-syzkaller #0 [ 263.432668][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.442742][T10240] Call Trace: [ 263.446142][T10240] dump_stack+0x197/0x210 [ 263.450579][T10240] should_fail.cold+0xa/0x15 [ 263.455345][T10240] ? fault_create_debugfs_attr+0x180/0x180 [ 263.461269][T10240] ? ___might_sleep+0x163/0x2c0 [ 263.466203][T10240] __should_failslab+0x121/0x190 [ 263.471251][T10240] should_failslab+0x9/0x14 [ 263.475773][T10240] __kmalloc+0x2e0/0x770 [ 263.480608][T10240] ? mark_held_locks+0xf0/0xf0 [ 263.485387][T10240] ? mark_lock+0xc2/0x1220 [ 263.489896][T10240] ? _parse_integer+0x190/0x190 [ 263.494823][T10240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.501128][T10240] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 263.506865][T10240] tomoyo_realpath_from_path+0xcd/0x7b0 [ 263.512424][T10240] ? tomoyo_path_number_perm+0x193/0x520 [ 263.518080][T10240] tomoyo_path_number_perm+0x1dd/0x520 [ 263.523546][T10240] ? tomoyo_path_number_perm+0x193/0x520 [ 263.529191][T10240] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 263.535062][T10240] ? __f_unlock_pos+0x19/0x20 [ 263.539788][T10240] ? __fget+0x37f/0x550 [ 263.543962][T10240] ? ksys_dup3+0x3e0/0x3e0 [ 263.548391][T10240] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 263.554724][T10240] ? fput_many+0x12c/0x1a0 [ 263.559160][T10240] tomoyo_file_ioctl+0x23/0x30 [ 263.564018][T10240] security_file_ioctl+0x77/0xc0 [ 263.568983][T10240] ksys_ioctl+0x57/0xd0 [ 263.573152][T10240] __x64_sys_ioctl+0x73/0xb0 [ 263.577832][T10240] do_syscall_64+0xfa/0x790 [ 263.582559][T10240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.588504][T10240] RIP: 0033:0x45a919 [ 263.592411][T10240] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.612021][T10240] RSP: 002b:00007fda13afec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.620549][T10240] RAX: ffffffffffffffda RBX: 00007fda13afec90 RCX: 000000000045a919 [ 263.628537][T10240] RDX: 0000000000000000 RSI: 0000000000005409 RDI: 0000000000000003 [ 263.636529][T10240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 263.644489][T10240] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda13aff6d4 [ 263.652459][T10240] R13: 00000000004c59f5 R14: 00000000004dbc88 R15: 0000000000000004 [ 263.663013][T10201] device bridge_slave_0 left promiscuous mode [ 263.673888][T10240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.684716][T10201] bridge0: port 1(bridge_slave_0) entered disabled state 06:26:13 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) dup(r11) 06:26:13 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) 06:26:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xb) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r5) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f0000000040)='attr\x00') ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000001a40)={"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"}) sched_setscheduler(r0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000080)=0x10000000002) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000c22fa0), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x600) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 06:26:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, &(0x7f0000000100)=0x6, r2, &(0x7f0000000140)=0xffffffff80000000, 0xbb71534, 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x200, 0x80202) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r7, 0x1, 0x20}, &(0x7f00000000c0)=0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) 06:26:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x200, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0)=0xd2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, r8, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xa, 0x9, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0xc8, r8, 0xdf2998d8d172a10a, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc71f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8df}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x10000830) accept$unix(r2, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x1d2247f40cb50814) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000240)={'vxcan1\x00', r10}) sendmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="ce", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x10}], 0x10}}], 0x2, 0x0) 06:26:14 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:26:14 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 264.182540][T10255] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 264.203613][T10258] FAULT_INJECTION: forcing a failure. [ 264.203613][T10258] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 264.216901][T10258] CPU: 1 PID: 10258 Comm: syz-executor.1 Not tainted 5.5.0-rc2-syzkaller #0 [ 264.225588][T10258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.229895][T10255] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 264.235744][T10258] Call Trace: [ 264.235785][T10258] dump_stack+0x197/0x210 [ 264.235811][T10258] should_fail.cold+0xa/0x15 [ 264.235838][T10258] ? fault_create_debugfs_attr+0x180/0x180 [ 264.263144][T10258] ? __kasan_check_read+0x11/0x20 [ 264.268203][T10258] ? mark_lock+0xc2/0x1220 [ 264.272646][T10258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.278994][T10258] should_fail_alloc_page+0x50/0x60 [ 264.284280][T10258] __alloc_pages_nodemask+0x1a1/0x910 [ 264.289750][T10258] ? __lockdep_free_key_range+0x120/0x120 [ 264.295496][T10258] ? __alloc_pages_slowpath+0x2920/0x2920 [ 264.301242][T10258] ? __kasan_check_read+0x11/0x20 [ 264.306307][T10258] ? fault_create_debugfs_attr+0x180/0x180 [ 264.312145][T10258] cache_grow_begin+0x90/0xc60 [ 264.316936][T10258] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 264.322802][T10258] ? trace_hardirqs_off+0x62/0x240 [ 264.327949][T10258] __kmalloc+0x6b2/0x770 [ 264.332211][T10258] ? mark_held_locks+0xf0/0xf0 [ 264.337003][T10258] ? mark_lock+0xc2/0x1220 [ 264.341453][T10258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.347732][T10258] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 264.353493][T10258] tomoyo_realpath_from_path+0xcd/0x7b0 [ 264.359072][T10258] ? tomoyo_path_number_perm+0x193/0x520 [ 264.364748][T10258] tomoyo_path_number_perm+0x1dd/0x520 [ 264.370681][T10258] ? tomoyo_path_number_perm+0x193/0x520 [ 264.376358][T10258] ? tomoyo_execute_permission+0x4a0/0x4a0 06:26:14 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) dup(r11) [ 264.382200][T10258] ? __f_unlock_pos+0x19/0x20 [ 264.386955][T10258] ? __fget+0x37f/0x550 [ 264.391149][T10258] ? ksys_dup3+0x3e0/0x3e0 [ 264.395595][T10258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 264.401873][T10258] ? fput_many+0x12c/0x1a0 [ 264.406323][T10258] tomoyo_file_ioctl+0x23/0x30 [ 264.411117][T10258] security_file_ioctl+0x77/0xc0 [ 264.416071][T10258] ksys_ioctl+0x57/0xd0 [ 264.420235][T10258] __x64_sys_ioctl+0x73/0xb0 [ 264.424836][T10258] do_syscall_64+0xfa/0x790 [ 264.429486][T10258] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 264.435381][T10258] RIP: 0033:0x45a919 [ 264.440249][T10258] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 264.459856][T10258] RSP: 002b:00007fda13afec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.468273][T10258] RAX: ffffffffffffffda RBX: 00007fda13afec90 RCX: 000000000045a919 [ 264.476236][T10258] RDX: 0000000000000000 RSI: 0000000000005409 RDI: 0000000000000003 06:26:14 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) fanotify_init(0x4, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb46b7c9ec4f26e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x301040, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xfffffffffffffdcd) rt_sigaction(0x2000019, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x7) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xff}, 0x8) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) socket$inet(0x2, 0x80001, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000f7048b1e03f0d114f870652bba9c709b16f6de6649e77f013ed678a6e5f6cf7c9b83ad7d74e38a4cf4a4cd3c611cc4e6b31775025d1121fdc61638c9c5930d7ba09b9301dc9b29fd1164ca0b78c02bf1b2c1eccf9e30dfb1fc201e5c8c6817ef2", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r5}, &(0x7f0000000040)=0xc) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f00000001c0)={0x0, "e36cdad759f26e5e9b030924760b85ca3e5a3c613865692a34ab1f1f657866d9"}) r7 = syz_open_dev$radio(&(0x7f0000000080)='\x00\x00\x00\xf4\x00\x00 \x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0xc05c6104, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x0) [ 264.484196][T10258] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 264.492172][T10258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda13aff6d4 [ 264.500132][T10258] R13: 00000000004c59f5 R14: 00000000004dbc88 R15: 0000000000000004 06:26:14 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 06:26:14 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 264.668343][T10276] bond0: (slave bond_slave_1): Releasing backup interface 06:26:14 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) dup(r11) 06:26:14 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:26:14 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 06:26:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:15 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x80000) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x20100, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x155) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x1) openat$cgroup(r0, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000280)={0x6, {{0x2, 0x4e23, @loopback}}}, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) dup(r4) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x400002) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x1018, 0x4) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x11) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe06}, 0x24000001) write$cgroup_int(r5, 0x0, 0x0) 06:26:15 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) dup(r11) 06:26:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)={0x10001, {{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x4d4f}}, 0x3, 0x1, [{{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x2b}, 0x20004000}}]}, 0x110) 06:26:15 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:26:15 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) [ 265.477779][T10302] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 265.517202][T10302] CPU: 1 PID: 10302 Comm: syz-executor.3 Not tainted 5.5.0-rc2-syzkaller #0 [ 265.525933][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.536002][T10302] Call Trace: [ 265.536037][T10302] dump_stack+0x197/0x210 [ 265.536142][T10302] dump_header+0x10b/0x82d [ 265.536163][T10302] oom_kill_process.cold+0x10/0x15 [ 265.553317][T10302] out_of_memory+0x334/0x13c0 [ 265.558056][T10302] ? __sched_text_start+0x8/0x8 [ 265.562927][T10302] ? oom_killer_disable+0x280/0x280 [ 265.568297][T10302] mem_cgroup_out_of_memory+0x1d8/0x240 [ 265.573866][T10302] ? memcg_oom_wake_function+0x700/0x700 [ 265.579521][T10302] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 265.585375][T10302] ? cgroup_file_notify+0x140/0x1b0 [ 265.590572][T10302] memory_max_write+0x262/0x3a0 [ 265.595419][T10302] ? mem_cgroup_write+0x370/0x370 [ 265.600469][T10302] ? lock_acquire+0x190/0x410 [ 265.605212][T10302] ? kernfs_fop_write+0x1df/0x4a0 [ 265.610237][T10302] cgroup_file_write+0x241/0x790 [ 265.615167][T10302] ? mem_cgroup_write+0x370/0x370 [ 265.620202][T10302] ? css_release_work_fn+0xa40/0xa40 [ 265.625497][T10302] ? css_release_work_fn+0xa40/0xa40 [ 265.630776][T10302] kernfs_fop_write+0x270/0x4a0 [ 265.635622][T10302] __vfs_write+0x8a/0x110 [ 265.639940][T10302] ? kernfs_fop_open+0xd80/0xd80 [ 265.644871][T10302] vfs_write+0x268/0x5d0 [ 265.649107][T10302] ksys_write+0x14f/0x290 [ 265.653427][T10302] ? __ia32_sys_read+0xb0/0xb0 [ 265.658206][T10302] ? do_syscall_64+0x26/0x790 [ 265.662889][T10302] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.668947][T10302] ? do_syscall_64+0x26/0x790 [ 265.673622][T10302] __x64_sys_write+0x73/0xb0 [ 265.678219][T10302] do_syscall_64+0xfa/0x790 [ 265.682732][T10302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.688612][T10302] RIP: 0033:0x45a919 [ 265.692505][T10302] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.712484][T10302] RSP: 002b:00007fac09629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.720886][T10302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 06:26:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:15 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) [ 265.728854][T10302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 265.736832][T10302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 265.744815][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac0962a6d4 [ 265.752868][T10302] R13: 00000000004cbe00 R14: 00000000004e5bd0 R15: 00000000ffffffff 06:26:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) getsockopt(r1, 0x0, 0x3, &(0x7f0000000040)=""/77, &(0x7f00000000c0)=0x4d) fchdir(r0) open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x8, 0x80) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000140)={0xfffffff7, 0x4, 0x4}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0xfdbd, 0x4, 0xea125165b3a52cb4}) r3 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x0, 0x0, [], 0x0}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000e80)={{0x9, 0x2, 0xfffff7d7, 0x1, '\x00', 0xffff7fff}, 0x2, 0x4, 0x7fffffff, r4, 0x8, 0x10001, 'syz0\x00', &(0x7f00000002c0)=['md5sumvboxnet1GPLem1\x00', '\x00', 'keyringwlan1wlan1[em0lo\x00', '\'\x00', ',mime_type[{vmnet1\x00', '&\x00', 'loppp1\x00', '\x00'], 0x4d, [], [0xfff, 0x7f, 0x6]}) r5 = syz_open_procfs(r4, &(0x7f0000000240)='net/softnet_stat\x00') ftruncate(r5, 0xfffd) 06:26:15 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x2, 0x0) 06:26:15 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 06:26:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000100)={0x77f447e7da5d4153, {0x3, 0x3ff, 0x2}}) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f854699aae86735abd0c59bc34835a8c6aa4cea1c575733fc905b2", 0x30}], 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 266.398125][T10302] memory: usage 5092kB, limit 0kB, failcnt 9 [ 266.404472][T10302] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 266.410311][T10338] FAT-fs (loop0): Directory bread(block 53929) failed [ 266.423429][T10338] FAT-fs (loop0): Directory bread(block 53930) failed [ 266.434193][T10338] FAT-fs (loop0): Directory bread(block 53931) failed [ 266.441791][T10338] FAT-fs (loop0): Directory bread(block 53932) failed [ 266.449943][T10338] FAT-fs (loop0): Directory bread(block 53933) failed [ 266.457630][T10338] FAT-fs (loop0): Directory bread(block 53934) failed [ 266.466093][T10338] FAT-fs (loop0): Directory bread(block 53935) failed [ 266.473587][T10302] Memory cgroup stats for /syz3: [ 266.473974][T10302] anon 2359296 [ 266.473974][T10302] file 4096 [ 266.473974][T10302] kernel_stack 73728 [ 266.473974][T10302] slab 1355776 [ 266.473974][T10302] sock 1081344 [ 266.473974][T10302] shmem 0 [ 266.473974][T10302] file_mapped 0 [ 266.473974][T10302] file_dirty 0 [ 266.473974][T10302] file_writeback 0 [ 266.473974][T10302] anon_thp 2097152 [ 266.473974][T10302] inactive_anon 0 [ 266.473974][T10302] active_anon 2273280 [ 266.473974][T10302] inactive_file 0 [ 266.473974][T10302] active_file 0 [ 266.473974][T10302] unevictable 0 [ 266.473974][T10302] slab_reclaimable 540672 [ 266.473974][T10302] slab_unreclaimable 815104 [ 266.473974][T10302] pgfault 3861 [ 266.473974][T10302] pgmajfault 0 [ 266.473974][T10302] workingset_refault 0 [ 266.473974][T10302] workingset_activate 0 [ 266.473974][T10302] workingset_nodereclaim 0 [ 266.473974][T10302] pgrefill 0 [ 266.473974][T10302] pgscan 0 [ 266.473974][T10302] pgsteal 0 [ 266.473974][T10302] pgactivate 0 [ 266.474902][T10338] FAT-fs (loop0): Directory bread(block 53936) failed [ 266.516090][T10302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10299,uid=0 [ 266.573420][T10338] FAT-fs (loop0): Directory bread(block 53937) failed [ 266.596568][T10302] Memory cgroup out of memory: Killed process 10299 (syz-executor.3) total-vm:72716kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 266.618144][T10338] FAT-fs (loop0): Directory bread(block 53938) failed 06:26:16 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x80000) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x20100, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x155) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x1) openat$cgroup(r0, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000280)={0x6, {{0x2, 0x4e23, @loopback}}}, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) dup(r4) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x400002) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x1018, 0x4) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x11) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe06}, 0x24000001) write$cgroup_int(r5, 0x0, 0x0) [ 266.650233][ T1107] oom_reaper: reaped process 10299 (syz-executor.3), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB 06:26:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:16 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 06:26:16 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x10, 0x0) 06:26:16 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') flistxattr(0xffffffffffffffff, &(0x7f00000000c0), 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x4, 0xe0) [ 266.806405][ T9880] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 266.856110][ T9880] CPU: 1 PID: 9880 Comm: syz-executor.3 Not tainted 5.5.0-rc2-syzkaller #0 [ 266.864763][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.874836][ T9880] Call Trace: [ 266.874908][ T9880] dump_stack+0x197/0x210 [ 266.874930][ T9880] dump_header+0x10b/0x82d [ 266.886955][ T9880] ? oom_kill_process+0x94/0x420 [ 266.891921][ T9880] oom_kill_process.cold+0x10/0x15 [ 266.897053][ T9880] out_of_memory+0x334/0x13c0 [ 266.901739][ T9880] ? find_held_lock+0x35/0x130 [ 266.906530][ T9880] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 266.912359][ T9880] ? oom_killer_disable+0x280/0x280 [ 266.917588][ T9880] mem_cgroup_out_of_memory+0x1d8/0x240 [ 266.923157][ T9880] ? memcg_oom_wake_function+0x700/0x700 [ 266.928827][ T9880] ? do_raw_spin_unlock+0x181/0x270 [ 266.934052][ T9880] ? _raw_spin_unlock+0x28/0x40 [ 266.939367][ T9880] try_charge+0xf76/0x14d0 [ 266.943809][ T9880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.950070][ T9880] ? perf_trace_lock+0x90/0x4c0 [ 266.954965][ T9880] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 266.960513][ T9880] ? __lockdep_free_key_range+0x120/0x120 [ 266.960531][ T9880] ? cache_grow_begin+0x122/0xc60 [ 266.960544][ T9880] ? find_held_lock+0x35/0x130 [ 266.960556][ T9880] ? cache_grow_begin+0x122/0xc60 [ 266.960575][ T9880] __memcg_kmem_charge_memcg+0x7c/0x130 [ 266.960587][ T9880] ? lock_downgrade+0x920/0x920 [ 266.960601][ T9880] ? memcg_kmem_put_cache+0x1a0/0x1a0 [ 266.960619][ T9880] ? __kasan_check_read+0x11/0x20 [ 266.960636][ T9880] cache_grow_begin+0x5e8/0xc60 [ 266.960656][ T9880] ? write_comp_data+0x11/0x70 [ 266.986707][ T9880] ? mempolicy_slab_node+0x139/0x390 [ 267.011537][ T9880] fallback_alloc+0x1f8/0x2d0 [ 267.021502][ T9880] ____cache_alloc_node+0x1bc/0x1d0 [ 267.026724][ T9880] ? trace_hardirqs_off+0x62/0x240 [ 267.031861][ T9880] kmem_cache_alloc+0x1ef/0x710 [ 267.036727][ T9880] ? lock_downgrade+0x920/0x920 [ 267.041601][ T9880] ? rwlock_bug.part.0+0x90/0x90 [ 267.046636][ T9880] ? ratelimit_state_init+0xb0/0xb0 [ 267.051863][ T9880] ext4_alloc_inode+0x1f/0x640 [ 267.056843][ T9880] ? ratelimit_state_init+0xb0/0xb0 [ 267.062065][ T9880] alloc_inode+0x68/0x1e0 [ 267.066416][ T9880] iget_locked+0x1a6/0x4b0 [ 267.070986][ T9880] __ext4_iget+0x265/0x3e20 [ 267.075513][ T9880] ? ext4_get_projid+0x190/0x190 [ 267.080564][ T9880] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 267.086120][ T9880] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 267.092108][ T9880] ? d_alloc_parallel+0xa6e/0x1c00 [ 267.097230][ T9880] ext4_lookup+0x3b1/0x7a0 [ 267.101659][ T9880] ? ext4_cross_rename+0x1490/0x1490 [ 267.106952][ T9880] ? __lock_acquire+0x16f2/0x4a00 [ 267.111993][ T9880] ? lockdep_init_map+0x1be/0x6d0 [ 267.117118][ T9880] __lookup_slow+0x279/0x500 [ 267.121720][ T9880] ? vfs_unlink+0x620/0x620 [ 267.126263][ T9880] lookup_slow+0x58/0x80 [ 267.130516][ T9880] path_mountpoint+0x5d1/0x1e00 [ 267.135378][ T9880] ? __lockdep_free_key_range+0x120/0x120 [ 267.141103][ T9880] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 267.147099][ T9880] ? path_openat+0x4500/0x4500 [ 267.151881][ T9880] filename_mountpoint+0x18e/0x390 [ 267.157000][ T9880] ? filename_parentat.isra.0+0x410/0x410 [ 267.162726][ T9880] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 267.168896][ T9880] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 267.175199][ T9880] ? __phys_addr_symbol+0x30/0x70 [ 267.180230][ T9880] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 267.185956][ T9880] ? __check_object_size+0x3d/0x437 [ 267.191166][ T9880] ? strncpy_from_user+0x2b4/0x400 [ 267.196305][ T9880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.202553][ T9880] ? getname_flags+0x277/0x5b0 [ 267.207330][ T9880] user_path_mountpoint_at+0x3a/0x50 [ 267.212683][ T9880] ksys_umount+0x164/0xef0 [ 267.217102][ T9880] ? __ia32_sys_rmdir+0x40/0x40 [ 267.221974][ T9880] ? __detach_mounts+0x290/0x290 [ 267.227049][ T9880] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 267.233422][ T9880] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 267.238921][ T9880] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 267.244401][ T9880] ? do_syscall_64+0x26/0x790 [ 267.249105][ T9880] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 267.255179][ T9880] ? do_syscall_64+0x26/0x790 [ 267.259864][ T9880] ? lockdep_hardirqs_on+0x421/0x5e0 [ 267.265175][ T9880] __x64_sys_umount+0x54/0x80 [ 267.269880][ T9880] do_syscall_64+0xfa/0x790 [ 267.274419][ T9880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 267.280806][ T9880] RIP: 0033:0x45d347 [ 267.284733][ T9880] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:26:17 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 06:26:17 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) 06:26:17 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x8400) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vgaDarbiter\x00', 0x95e23775dd56276d, 0x0) ioctl$BLKDISCARD(r2, 0x1277, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCGISO7816(r1, 0x80285442, 0x0) r3 = open(&(0x7f0000001640)='./file0/file0\x00', 0xc142, 0x1a) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001480)=0xfe3e) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f00000014c0)=@sco={0x1f, {0x8a, 0x81, 0x7, 0x60, 0x40, 0x98}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001540)="8c8b1d14a7c1d293c4fa1b150a5c8c6032f9a034414a431b47763ee372c10c2070284adae346fb9361cafe3999f5c8931910cf61a8b1b41a422b798bda20182e44512877013190", 0x47}, {&(0x7f0000001680)="6a01bfa773bc42853b352e3acc2afec22cf342f7d7f69e2947acd24d8c1c461f5adcc69e99dd508d7f2c144de607afdd8bf9f059ed286f6e8ef55e64f4b8f153ddb78b9feeedcdabb8c37781763f6685a97164f2c393f475e987c6431e4be57c5db1f9cb70e8ca7c6677fa7df1321ba0f27cce184cf9178554d7dcfc0613f3a162613901a6905a3736ff5e78267fbcf927e2f325d5bd5eaff647733ca7e8c062b3503761db2883998ebe6f0b7d16", 0xae}, {&(0x7f0000001740)="31e9daa96747e2dde1f4fe030d94cac6dee988e88d9f079ec5e9f6ecf30d8788ab54508c5f597094ac1321ac8b9e2afdda1101ba651da563f8c3cf5d1612ffda5b911a96ac91ca43d66b492385279c81b6a7d11e63c8ce76595c892c3644c1c1e07af458279db29c260250", 0x6b}, {&(0x7f00000017c0)="13107c6d4dba7c3e268bb7f4eef83925203afc78c920d5d565c578b1cf6ccc7e3e4c27fbe961826bc50fa23534421bc2d5412fd6bbfc87aae4781592cd4a8299595b8c35157e1c859935442c218ff97b0835e6453e85ee161476ae88374008a1b3b51ffeade93791a9fd31f80729cc948a321aa048c8578265dae1ab9409ac05c79adf280c5cf0e32db8c17e089511c8f6dc1027afac27be84d9b6dbba35f21eff39d1f3ac350922f2e4", 0xaa}, {&(0x7f0000001b00)="e6ba3c6406ce6290fe6198c2e9b225c9854c19ba5ec6f02beee22ed18fd1be43e65689996c8dcaa0bc7b70a4aaba87b39bf82febac37a4d014423986f383153095f1a89411155bb118aaeee5e21e1a2f1df1305fd7cc3c07558a213e", 0x5c}], 0x5, &(0x7f0000001c00)=[@timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x68}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xb2}}], 0xa8}, 0x4048011) r7 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x4000) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="2040aa2747de7ec2d21a555a76e0339766aa4afbf9925dfda76e852d4ac49710d9d972de923f9c8484021a466635e562f3", @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000@000000000040000,urer_id=', @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',allow_other,func=CRE']) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x8888, &(0x7f0000001cc0)=ANY=[@ANYRESDEC=r11, @ANYRESHEX, @ANYBLOB="2c3030303030303030303030303034303030302c757365725f69643dfd2458e66ce8eab1af6605a70745f3b46e0ee41cbab9deda35e4133917c91b605ab9a6ee85ab189ce56c11afd87df33c51b13e31e2801ff74c8377dc933a614af3a81295b54e08fb549b53f803e00fd6f4ab954c44ac6925e64f4c75b3c972e6a93fdc7ed9dc0db688790215b67cdd05b9c5856cbe9cbdd8ddaa79462a9a771958b42fa205874a4fb7df670281797be5a1abadb8a917139b1cae29be98bd09baba338677196b4e7c65021aa209000000acdcfccc0b04d5b6391bf251c3b0314b433471", @ANYRES16=0x0, @ANYBLOB="3a67726f75705f69643d775a725697cab24ae9c097b0e367467e340eb382c621c1249de09ee3bf0254ab927137b02279ce5d84666d4003255e69a7e91026e8f72e5c3f59b37ab5f7224733f7d567858ff7341f6ad22af2918472b2cb4754b8759358260daa9f812737cd257a98c115c3b769a368384bad8845615eea541a046d05d47c5e7df8257ce90b920dd0dfa98a669348f642477f9b845c95d66043642c1aaa9ae00f6565ec43ecba4a49fa2ae85094a9063e77c7ea2efef300004ab2bcf77f80bcb7b87b5b86688b9802a320938264022713612fb455c64511a5b7a7ec4186450000", @ANYRESDEC, @ANYBLOB=',allow_other,func=CREDS_']) 06:26:17 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x2275, 0x0) 06:26:17 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 267.304445][ T9880] RSP: 002b:00007ffecac829d8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 267.312880][ T9880] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d347 [ 267.320871][ T9880] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffecac82a80 [ 267.328862][ T9880] RBP: 000000000000001f R08: 0000000000000000 R09: 000000000000000a [ 267.336871][ T9880] R10: 0000000000000006 R11: 0000000000000202 R12: 00007ffecac83b10 [ 267.344879][ T9880] R13: 0000000001b92940 R14: 0000000000000000 R15: 00007ffecac83b10 06:26:17 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 267.749207][T10369] fuse: Unknown parameter ' @ª'GÞ~ÂÒUZvà3—fªJûù’]ý§n…-JÄ—ÙÙrÞ’?œ„„Ff5åbó0xffffffffffffffff' [ 267.810770][T10369] fuse: Unknown parameter '000000000000000000120xffffffffffffffff' [ 267.818103][ T9880] memory: usage 2736kB, limit 0kB, failcnt 22 [ 267.824835][ T9880] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 267.847892][ T9880] Memory cgroup stats for /syz3: [ 267.848289][ T9880] anon 73728 [ 267.848289][ T9880] file 4096 [ 267.848289][ T9880] kernel_stack 36864 [ 267.848289][ T9880] slab 1355776 [ 267.848289][ T9880] sock 1081344 [ 267.848289][ T9880] shmem 0 [ 267.848289][ T9880] file_mapped 0 [ 267.848289][ T9880] file_dirty 0 [ 267.848289][ T9880] file_writeback 0 [ 267.848289][ T9880] anon_thp 0 [ 267.848289][ T9880] inactive_anon 0 [ 267.848289][ T9880] active_anon 122880 [ 267.848289][ T9880] inactive_file 0 [ 267.848289][ T9880] active_file 0 [ 267.848289][ T9880] unevictable 0 [ 267.848289][ T9880] slab_reclaimable 540672 [ 267.848289][ T9880] slab_unreclaimable 815104 [ 267.848289][ T9880] pgfault 3861 [ 267.848289][ T9880] pgmajfault 0 [ 267.848289][ T9880] workingset_refault 0 [ 267.848289][ T9880] workingset_activate 0 [ 267.848289][ T9880] workingset_nodereclaim 0 [ 267.848289][ T9880] pgrefill 0 [ 267.848289][ T9880] pgscan 0 [ 267.848289][ T9880] pgsteal 0 [ 267.848289][ T9880] pgactivate 0 [ 268.108400][ T9880] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9880,uid=0 [ 268.124688][ T9880] Memory cgroup out of memory: Killed process 9880 (syz-executor.3) total-vm:72452kB, anon-rss:108kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 268.143878][ T1107] oom_reaper: reaped process 9880 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 06:26:18 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x80000) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x20100, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x155) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x1) openat$cgroup(r0, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000280)={0x6, {{0x2, 0x4e23, @loopback}}}, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) dup(r4) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x400002) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x1018, 0x4) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x11) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe06}, 0x24000001) write$cgroup_int(r5, 0x0, 0x0) 06:26:18 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x4b66, 0x0) 06:26:18 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000040)={r10, @in6={{0xa, 0x4e21, 0xffffffff, @ipv4={[], [], @local}, 0xe8e6}}}, 0x84) 06:26:18 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:18 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) dup(r5) 06:26:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff", 0x1c}], 0x1) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x7) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f000000020319000000070000", 0xd}], 0x1) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff3fff58", 0x1f}], 0x1) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000600)) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x190, r9, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4ab}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xea67}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4b6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9abe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffa9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}]}, 0x190}}, 0x84) r10 = accept(r6, &(0x7f00000000c0)=@can, &(0x7f0000000000)=0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x7, 0x200, 0xb3, 0xab2, 0x3, 0x0, 0x1f, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000240)={r13, @in={{0x2, 0x4e22, @local}}, [0x8, 0x6, 0xe00000000000, 0x1, 0x1, 0x2, 0x71, 0x1, 0x10001, 0x80000001, 0xa0, 0x6, 0x3, 0x1000, 0x4]}, &(0x7f00000001c0)=0x100) 06:26:18 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 06:26:18 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x4c00, 0x0) 06:26:19 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) 06:26:19 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:19 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x80000) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x20100, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x155) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x1) openat$cgroup(r0, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000280)={0x6, {{0x2, 0x4e23, @loopback}}}, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) dup(r4) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x400002) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x1018, 0x4) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x11) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe06}, 0x24000001) write$cgroup_int(r5, 0x0, 0x0) 06:26:19 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 06:26:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x4c01, 0x0) 06:26:19 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x8a000, 0x100) openat$cgroup_ro(r1, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0xd3) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) fallocate(r2, 0x0, 0x0, 0x2000002) read$eventfd(r2, &(0x7f00000003c0), 0x8) fallocate(0xffffffffffffffff, 0xb, 0x6, 0xffffffff) r3 = creat(&(0x7f0000001c00)='./bus\x00', 0xb3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00') lseek(r4, 0x0, 0x3) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/113, 0x71}], 0x1, 0x100) r5 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r3, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000) r6 = dup(r5) creat(&(0x7f00000001c0)='./bus\x00', 0x9) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) write$cgroup_int(r2, &(0x7f0000000140)=0xb8ed, 0x12) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x401) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x800fe) sendfile(r6, r7, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0bfbc9f85a7a734d55bb3ad41f3f9253439178c84ae01ffad7e5f4dfd72464d732ec96819c795031652d92de876e7c2320000000"], 0x3, 0x0) 06:26:19 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) 06:26:19 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:19 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) 06:26:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5402, 0x0) 06:26:19 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) [ 269.749809][T10424] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:26:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5403, 0x0) 06:26:19 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:19 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 271.909765][T10452] IPVS: ftp: loaded support on port[0] = 21 [ 271.997527][T10452] chnl_net:caif_netlink_parms(): no params data found [ 272.035107][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.042373][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.050704][T10452] device bridge_slave_0 entered promiscuous mode [ 272.059132][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.066299][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.074334][T10452] device bridge_slave_1 entered promiscuous mode [ 272.096518][T10452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.108165][T10452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.130870][T10452] team0: Port device team_slave_0 added [ 272.140558][T10452] team0: Port device team_slave_1 added [ 272.211553][T10452] device hsr_slave_0 entered promiscuous mode [ 272.278262][T10452] device hsr_slave_1 entered promiscuous mode [ 272.328092][T10452] debugfs: Directory 'hsr0' with parent '/' already present! [ 272.346667][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.353966][T10452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.361556][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.368681][T10452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.416337][T10452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.431943][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.441532][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.450606][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.459942][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 272.478658][T10452] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.490945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.499876][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.507087][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.534874][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.545055][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.552212][ T9887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.561410][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.571086][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.581276][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.595607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.607707][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.620130][T10452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.640422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.648505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.663371][T10452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.856045][T10462] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 272.869459][T10462] CPU: 1 PID: 10462 Comm: syz-executor.3 Not tainted 5.5.0-rc2-syzkaller #0 [ 272.878266][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.888403][T10462] Call Trace: [ 272.891697][T10462] dump_stack+0x197/0x210 [ 272.896023][T10462] dump_header+0x10b/0x82d [ 272.900483][T10462] oom_kill_process.cold+0x10/0x15 [ 272.905599][T10462] out_of_memory+0x334/0x13c0 [ 272.910274][T10462] ? __sched_text_start+0x8/0x8 [ 272.915115][T10462] ? oom_killer_disable+0x280/0x280 [ 272.920311][T10462] mem_cgroup_out_of_memory+0x1d8/0x240 [ 272.925864][T10462] ? memcg_oom_wake_function+0x700/0x700 [ 272.931495][T10462] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 272.937291][T10462] ? cgroup_file_notify+0x140/0x1b0 [ 272.942481][T10462] memory_max_write+0x262/0x3a0 [ 272.947325][T10462] ? mem_cgroup_write+0x370/0x370 [ 272.952337][T10462] ? lock_acquire+0x190/0x410 [ 272.957003][T10462] ? kernfs_fop_write+0x1df/0x4a0 [ 272.962035][T10462] cgroup_file_write+0x241/0x790 [ 272.966979][T10462] ? mem_cgroup_write+0x370/0x370 [ 272.972003][T10462] ? css_release_work_fn+0xa40/0xa40 [ 272.977283][T10462] ? css_release_work_fn+0xa40/0xa40 [ 272.982556][T10462] kernfs_fop_write+0x270/0x4a0 [ 272.987400][T10462] __vfs_write+0x8a/0x110 [ 272.991722][T10462] ? kernfs_fop_open+0xd80/0xd80 [ 272.996648][T10462] vfs_write+0x268/0x5d0 [ 273.000882][T10462] ksys_write+0x14f/0x290 [ 273.005200][T10462] ? __ia32_sys_read+0xb0/0xb0 [ 273.009967][T10462] ? do_syscall_64+0x26/0x790 [ 273.014632][T10462] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.020709][T10462] ? do_syscall_64+0x26/0x790 [ 273.025405][T10462] __x64_sys_write+0x73/0xb0 [ 273.030023][T10462] do_syscall_64+0xfa/0x790 [ 273.034545][T10462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.040442][T10462] RIP: 0033:0x45a919 [ 273.044328][T10462] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.063939][T10462] RSP: 002b:00007f928e200c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.072342][T10462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 273.080342][T10462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 273.088301][T10462] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 273.096276][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f928e2016d4 [ 273.104235][T10462] R13: 00000000004cbe00 R14: 00000000004e5bd0 R15: 00000000ffffffff [ 273.117675][T10462] memory: usage 5012kB, limit 0kB, failcnt 23 [ 273.123967][T10462] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 273.131165][T10462] Memory cgroup stats for /syz3: [ 273.131298][T10462] anon 2273280 [ 273.131298][T10462] file 4096 [ 273.131298][T10462] kernel_stack 73728 [ 273.131298][T10462] slab 1490944 [ 273.131298][T10462] sock 1081344 [ 273.131298][T10462] shmem 0 [ 273.131298][T10462] file_mapped 0 [ 273.131298][T10462] file_dirty 0 [ 273.131298][T10462] file_writeback 0 [ 273.131298][T10462] anon_thp 2097152 [ 273.131298][T10462] inactive_anon 0 [ 273.131298][T10462] active_anon 2273280 [ 273.131298][T10462] inactive_file 0 [ 273.131298][T10462] active_file 0 [ 273.131298][T10462] unevictable 0 [ 273.131298][T10462] slab_reclaimable 540672 [ 273.131298][T10462] slab_unreclaimable 950272 [ 273.131298][T10462] pgfault 3993 [ 273.131298][T10462] pgmajfault 0 [ 273.131298][T10462] workingset_refault 0 [ 273.131298][T10462] workingset_activate 0 [ 273.131298][T10462] workingset_nodereclaim 0 [ 273.131298][T10462] pgrefill 0 [ 273.131298][T10462] pgscan 0 [ 273.131298][T10462] pgsteal 0 [ 273.131298][T10462] pgactivate 0 [ 273.227029][T10462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10461,uid=0 [ 273.244564][T10462] Memory cgroup out of memory: Killed process 10461 (syz-executor.3) total-vm:72588kB, anon-rss:2184kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 273.264168][ T1107] oom_reaper: reaped process 10461 (syz-executor.3), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB 06:26:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5404, 0x0) 06:26:23 executing program 3: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r1, 0x439, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}]}, 0x3c}, 0x1, 0x4c00}, 0x0) 06:26:23 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) socket$inet_dccp(0x2, 0x6, 0x0) 06:26:23 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:23 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 06:26:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280112000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000000440)={0x0, 0x10001, 0x3, 0x10001, 0x8, 0x9}) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat(r7, &(0x7f00000002c0)='./file0\x00', 0x800, 0x100) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="050000000000000003000020080001007533320020000a0008000b00000000e1140005000000001f00000000000800c9e60000004a35521dee58ce120e3bf9b8da41123c9f59dc63ff03a2a26835e3c1e083c91dd68ca9eb94d9eb1873dabd478846b31515d511830fdc184187a34509bcd3998ec247169cc04bd5dbd71d"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 273.430168][T10452] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 273.456780][T10471] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.477930][T10452] CPU: 0 PID: 10452 Comm: syz-executor.3 Not tainted 5.5.0-rc2-syzkaller #0 [ 273.486664][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.496735][T10452] Call Trace: [ 273.500049][T10452] dump_stack+0x197/0x210 [ 273.504405][T10452] dump_header+0x10b/0x82d [ 273.508840][T10452] ? oom_kill_process+0x94/0x420 [ 273.513812][T10452] oom_kill_process.cold+0x10/0x15 [ 273.518953][T10452] out_of_memory+0x334/0x13c0 [ 273.523647][T10452] ? find_held_lock+0x35/0x130 [ 273.528440][T10452] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 273.534451][T10452] ? oom_killer_disable+0x280/0x280 [ 273.539678][T10452] mem_cgroup_out_of_memory+0x1d8/0x240 [ 273.545242][T10452] ? memcg_oom_wake_function+0x700/0x700 [ 273.550902][T10452] ? do_raw_spin_unlock+0x181/0x270 [ 273.556126][T10452] ? _raw_spin_unlock+0x28/0x40 [ 273.561004][T10452] try_charge+0xf76/0x14d0 [ 273.565460][T10452] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 273.571035][T10452] ? percpu_ref_tryget+0x102/0x230 [ 273.571112][T10452] ? rcu_read_lock_held+0x9c/0xb0 [ 273.581276][T10452] ? __kasan_check_read+0x11/0x20 [ 273.586334][T10452] ? get_mem_cgroup_from_mm+0x151/0x310 [ 273.591897][T10452] mem_cgroup_try_charge+0x136/0x590 [ 273.591918][T10452] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 273.591939][T10452] __handle_mm_fault+0x1f1f/0x3da0 [ 273.607980][T10452] ? vm_iomap_memory+0x1a0/0x1a0 [ 273.613030][T10452] ? handle_mm_fault+0x292/0xa50 [ 273.618006][T10452] ? handle_mm_fault+0x7a0/0xa50 [ 273.622972][T10452] ? __kasan_check_read+0x11/0x20 [ 273.628021][T10452] handle_mm_fault+0x3b2/0xa50 [ 273.632896][T10452] __do_page_fault+0x536/0xd80 [ 273.637701][T10452] do_page_fault+0x38/0x590 [ 273.642293][T10452] page_fault+0x39/0x40 [ 273.646462][T10452] RIP: 0033:0x4036f2 [ 273.650377][T10452] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 49 9c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 69 51 05 00 48 [ 273.669997][T10452] RSP: 002b:00007ffee85e5e40 EFLAGS: 00010246 06:26:23 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) 06:26:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5405, 0x0) 06:26:23 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) 06:26:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5406, 0x0) [ 273.676079][T10452] RAX: 0000000000000000 RBX: 00000000000429b6 RCX: 00000000004143d0 [ 273.684075][T10452] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffee85e6f70 [ 273.692065][T10452] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000cf7940 [ 273.700077][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee85e6f70 [ 273.708067][T10452] R13: 00007ffee85e6f60 R14: 0000000000000000 R15: 00007ffee85e6f70 06:26:23 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:23 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) [ 273.745418][T10479] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 06:26:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x200000002, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) close(r3) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x4e22, @local}, 0x10) [ 273.792253][T10452] memory: usage 2684kB, limit 0kB, failcnt 32 [ 273.798503][T10452] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 273.806049][T10452] Memory cgroup stats for /syz3: [ 273.806315][T10452] anon 61440 [ 273.806315][T10452] file 4096 [ 273.806315][T10452] kernel_stack 36864 [ 273.806315][T10452] slab 1490944 [ 273.806315][T10452] sock 1081344 [ 273.806315][T10452] shmem 0 [ 273.806315][T10452] file_mapped 0 [ 273.806315][T10452] file_dirty 0 [ 273.806315][T10452] file_writeback 0 [ 273.806315][T10452] anon_thp 0 [ 273.806315][T10452] inactive_anon 0 [ 273.806315][T10452] active_anon 61440 [ 273.806315][T10452] inactive_file 0 [ 273.806315][T10452] active_file 0 [ 273.806315][T10452] unevictable 0 [ 273.806315][T10452] slab_reclaimable 540672 [ 273.806315][T10452] slab_unreclaimable 950272 [ 273.806315][T10452] pgfault 3993 [ 273.806315][T10452] pgmajfault 0 [ 273.806315][T10452] workingset_refault 0 [ 273.806315][T10452] workingset_activate 0 [ 273.806315][T10452] workingset_nodereclaim 0 [ 273.806315][T10452] pgrefill 0 [ 273.806315][T10452] pgscan 0 [ 273.806315][T10452] pgsteal 0 [ 273.806315][T10452] pgactivate 0 [ 274.027895][T10452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=10452,uid=0 [ 274.081651][T10452] Memory cgroup out of memory: Killed process 10452 (syz-executor.3) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 06:26:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x80, 0x3}, 0x0) gettid() r0 = open(0x0, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/igmp\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00') socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x22002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) r6 = syz_open_procfs(0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000000) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000240)) r7 = syz_open_pts(r3, 0x4000000000000002) sendfile(r7, r2, 0x0, 0x6f0a77bd) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x40, 0x1, 0x0, 0x0, 0x3, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x0, 0x1d, 0x0, 0xfffffffc, 0x10000800, 0x11, 0x2, 0x55, 0x76}) fallocate(r1, 0x0, 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x8a00) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) close(0xffffffffffffffff) socket(0x10, 0x5, 0x3f) connect$rose(r0, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 06:26:24 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 06:26:24 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) 06:26:24 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5407, 0x0) 06:26:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x200000002, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) close(r3) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x4e22, @local}, 0x10) [ 274.708069][ T29] tipc: TX() has been purged, node left! 06:26:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5408, 0x0) 06:26:24 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) 06:26:24 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x540a, 0x0) 06:26:24 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) 06:26:25 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x540b, 0x0) 06:26:25 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) 06:26:25 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:25 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x540c, 0x0) 06:26:25 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000100029bd5a00000000000000030000000c000100170000dfff000000"], 0x20}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x97, 0x4, 0x3, 0x9, 0xe1, 0x3f}) 06:26:25 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 275.865579][T10542] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:26:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x540d, 0x0) 06:26:25 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 06:26:25 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 277.768346][T10566] IPVS: ftp: loaded support on port[0] = 21 [ 277.945419][T10566] chnl_net:caif_netlink_parms(): no params data found [ 277.986305][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.993619][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.001904][T10566] device bridge_slave_0 entered promiscuous mode [ 278.010678][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.017910][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.025839][T10566] device bridge_slave_1 entered promiscuous mode [ 278.048617][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.062366][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.086839][T10566] team0: Port device team_slave_0 added [ 278.095672][T10566] team0: Port device team_slave_1 added [ 278.150218][T10566] device hsr_slave_0 entered promiscuous mode [ 278.188275][T10566] device hsr_slave_1 entered promiscuous mode [ 278.238085][T10566] debugfs: Directory 'hsr0' with parent '/' already present! [ 278.350320][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.357985][T10566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.365274][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.372423][T10566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.423187][T10566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.436801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.447719][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.457422][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.466425][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 278.481196][T10566] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.494695][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.504259][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.511404][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.529056][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.539521][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.546648][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.659954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.673449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.682589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.697335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.713061][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.723716][T10566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.744727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.752409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.769785][T10566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.841749][ T29] device bridge_slave_1 left promiscuous mode [ 278.849552][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.883282][ T29] device bridge_slave_0 left promiscuous mode [ 278.898376][ T29] bridge0: port 1(bridge_slave_0) entered disabled state 06:26:28 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) 06:26:28 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:28 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x540e, 0x0) 06:26:28 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) dup(r5) 06:26:28 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:28 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000016c0)={0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) fstat(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='bpf\x00', 0x1000000, &(0x7f00000064c0)={[{@mode={'mode', 0x3d, 0x20}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x4b}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x800}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_lt={'fowner<', r5}}, {@smackfsdef={'smackfsdef', 0x3d, 'lokeyring['}}, {@fsname={'fsname', 0x3d, 'cgroup.subtree_control\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}, {@uid_gt={'uid>', r6}}]}) r7 = getgid() r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000001740)=0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r12) fstat(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='bpf\x00', 0x1000000, &(0x7f00000064c0)={[{@mode={'mode', 0x3d, 0x20}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x4b}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x800}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_lt={'fowner<', r12}}, {@smackfsdef={'smackfsdef', 0x3d, 'lokeyring['}}, {@fsname={'fsname', 0x3d, 'cgroup.subtree_control\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}, {@uid_gt={'uid>', r13}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r16, 0xffffffffffffffff) getpid() r17 = inotify_init1(0x0) fcntl$setown(r17, 0x8, 0xffffffffffffffff) fcntl$getownex(r17, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r18, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) r19 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r19, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x0, 0x0, [], 0x0}) r20 = getpid() sched_setscheduler(r20, 0x5, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r19, 0xc1105517, &(0x7f0000000e80)={{0x9, 0x2, 0xfffff7d7, 0x1, '\x00', 0xffff7fff}, 0x2, 0x4, 0x7fffffff, r20, 0x8, 0x10001, 'syz0\x00', &(0x7f00000002c0)=['md5sumvboxnet1GPLem1\x00', '\x00', 'keyringwlan1wlan1[em0lo\x00', '\'\x00', ',mime_type[{vmnet1\x00', '&\x00', 'loppp1\x00', '\x00'], 0x4d, [], [0xfff, 0x7f, 0x6]}) r21 = getpgrp(r20) sendmsg$unix(r14, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r21, 0x0, r16}}}], 0x20}, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = dup(r22) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r24, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = dup(r25) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) r27 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r27, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) r28 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r28, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r28, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r28, 0x0, 0xa, 0x0, 0x0) r29 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r29, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r29, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r29, 0x0, 0xa, 0x0, 0x0) r30 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r31 = io_uring_setup(0x1ac, &(0x7f0000001780)={0x0, 0x0, 0x1, 0x1, 0x387}) r32 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r32, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) r33 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001800), &(0x7f0000001880)=0x60, 0x80400) r34 = openat$rtc(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/rtc0\x00', 0x800, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="100000002500aa2627bd7000ffdbdf25"], 0x10}, {&(0x7f00000000c0)={0x88, 0x33, 0x4, 0x70bd27, 0x25dfdbfe, "", [@nested={0x30, 0x2f, [@typed={0x24, 0x5d, @binary="e98e42b78027dd68564320a956e8eefa0cc16a6283d359d279b6ab2943e4e8a1"}, @typed={0x8, 0x63, @u32=0xfffffc01}]}, @generic="078a0ff4ee71cbc92348af1cc6208f5052c6395d3065318a55d634eaf1a237a9acd207b5a2d623460ba4d2923f73aa846124e52ce9640aa6bbb661cad06623577d4fce89ac2c14"]}, 0x88}, {&(0x7f0000000200)={0x146c, 0x37, 0x100, 0x70bd2c, 0x16, "", [@typed={0x8, 0x3a, @u32=0x7}, @nested={0x19c, 0x19, [@generic="e2921681c947194d6316e763b4a0380a02f286b35bccb07c00eb6ac300c67653154e8de8ec03247f4c65500f2808358a2bad744c6d95119311b285770260f39721a077c75c115e5669b255906b77bce40eac987ba15d7dc17a1b89af4fc5c4b46e51f21eb3c4361e922e7d0ef2f3fdd5e9750423e7ca11e1cb2e78c34c4fe860df308f87596d3c165ea9f9f99d8b4dc23d2622ecaf6d7e023ab5785e63610232150aa743c7f42f114df1a5da4c1507ea76835aed63e1307c7ed34d959dd4ffa27371abbdbbd08b724ddf433b99", @typed={0x8, 0x13, @pid=r2}, @generic="c696b694367189d301b64833c2e9e9749cf931fd140beac8abcf7bbca57c424db3237ca4de2e", @generic="16976a3db257b40708e371629f7d791f7afb88b8843efe4b139739f0bc8b5a350aefa87277ac2ebd03990b4167f9671c5ef7823d0e5a8fdd222a5ac7630f1ca0bcce7d4b2283b4f1fb3089206ae43f933995e272f557e8ae027ffc739ec44c224a73b4a07921b6f896af70f35fd512d2b9481e611a0be192adb6e52de9751561cb8c71619372e29f6a7a9be022a360e29fa6571b706db2222343bb"]}, @generic="e09a6b4ec7ec1ddd1d0c59b2103cd0e961bcef390617a6c5191e877148caf97becf805c51e8c457ee6f611274bc6a8fae1855e3223f7c1f3fb1ab4edc52eb1bb13ee6bfd4719bc88b6c8fd4063673d272ca925fc53d7957b28e8467e9222fa37d42db6753673074612b4d67bfaf3acb76fd9b09aac59203a34db99a56a37ab7d53a0c10bf0f503d3", @generic="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", @generic="f10ad7bcf51d0197293cc792cda1b84c47301b30259c3da4fae58803b4047da5b79fa67bd21b48c0e095a37a9993c0c292d7f5c4162594240d5135a8db7c45d3b7997469bf61fbcceeeba330b440d082ca97e315ef02ce0efad24a233e127c566dc0e981af79820e48745bc7ca0d8cdab2dd28067f385257da69155267e0cf5c212ab84fcf42aaa8fe611ee5f76cfbc1a3b546c0700a74386d5df1eac508b0c1", @typed={0x8, 0x40, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}, @typed={0x14, 0x2c, @ipv6=@loopback}, @generic="483c326bd4c03d1b144955f4a0744d56db54a30b738ccbfc1450881d6e4cfa6a24642189579492bc32e61bf45cb23e512761283a60727ee23c82be7ab2a2ec10bf6f83c2ff4508e68633310237e2f0866b5e32780a368bfa4a05f6a220e706351afd7548fa1365c41483d7f5bca3987c38556f73d5bb1dd9a0e750729aa8359f96dcb64e9a12b27fc6a2627a2f749dbf5801ba5e0af595f0b9dceb08c26b0a67247e50eac7dd034e18cedec5899b02afff8ca4b49486f9719aa8e4c3afb58a7589e0e8f78a21a6815397319f7de7b062c140b32a96b1ed719e", @generic="42abc9e67f8de70e07122167454289bc90316faca8879bcf29ceb267c9083bbcdc4048b363e38f6acc7c8c26650bf796bbd03a1167c7b955513a05d01b182a8bdea1cf7759977e738ce9c3328a81fca58b4df1ad766721d8fb3c5a4b34f9835400f1192b08cbc6690d5ff2e895b686de28b6c4235d4a3a096e3d988780c17e77a0e42a5483e57c4d54e4f85a805ee63d23f80ca84c986eb54252"]}, 0x146c}], 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000f7eef7815d583570b78a39142fe0000081000000000000000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r12, @ANYRES32=r16, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r26, @ANYRES32=r0, @ANYRES32=r27, @ANYRES32=r0, @ANYRES32=r28, @ANYRES32=r29, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r30, @ANYRES32=r1, @ANYRES32=r31, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r32, @ANYRES32=r1, @ANYRES32=r33, @ANYRES32=r34], 0xc8, 0x4008000}, 0x20f0fd7406d29aeb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r35 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r35, 0x84, 0x83, &(0x7f0000000000), 0x8) 06:26:28 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:28 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 06:26:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5410, 0x0) [ 279.085008][T10592] ptrace attach of "/root/syz-executor.0"[9872] was attempted by "/root/syz-executor.0"[10592] 06:26:29 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) 06:26:29 executing program 4: socket$inet6(0xa, 0x6, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:29 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 06:26:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5411, 0x0) 06:26:29 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:29 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) [ 282.319431][ T29] device hsr_slave_0 left promiscuous mode [ 282.379598][ T29] device hsr_slave_1 left promiscuous mode [ 282.436042][ T29] team0 (unregistering): Port device team_slave_1 removed [ 282.452566][ T29] team0 (unregistering): Port device team_slave_0 removed [ 282.465500][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.496267][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.657891][ T29] bond0 (unregistering): Released all slaves 06:26:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:32 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:32 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) 06:26:32 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5412, 0x0) 06:26:32 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) dup(r5) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:32 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:33 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5413, 0x0) [ 283.074748][T10649] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:33 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) socket$inet_dccp(0x2, 0x6, 0x0) [ 283.179679][T10649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) dup(r5) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:33 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) [ 283.378551][T10649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.418306][T10649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.636261][T10649] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 283.666739][T10649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:33 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:33 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5414, 0x0) 06:26:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) dup(r5) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:33 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) [ 283.680452][T10649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.688387][T10649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:33 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) 06:26:33 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) 06:26:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:33 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5415, 0x0) 06:26:33 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 283.927555][T10689] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 284.008508][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:33 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) [ 284.093806][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.182996][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:34 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:34 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) 06:26:34 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5416, 0x0) 06:26:34 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:34 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) 06:26:34 executing program 3: socket$inet6(0xa, 0x6, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:34 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:34 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 284.659755][T10729] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5418, 0x0) 06:26:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) [ 284.770686][T10729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 284.841119][T10729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.900741][T10729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:35 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x541d, 0x0) 06:26:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x541e, 0x0) 06:26:35 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 285.261809][T10763] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 285.401003][T10763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:35 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 285.478482][T10763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.514909][T10763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x541f, 0x0) 06:26:35 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:35 executing program 5: socket$inet6(0xa, 0x6, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:35 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5421, 0x0) 06:26:35 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:36 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5423, 0x0) 06:26:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:36 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5424, 0x0) 06:26:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:36 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:36 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5425, 0x0) 06:26:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 286.947389][T10860] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:36 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) [ 287.235598][T10860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) [ 287.355735][T10860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:26:37 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5427, 0x0) [ 287.410247][T10860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:37 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:37 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5428, 0x0) 06:26:37 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:37 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5437, 0x0) [ 287.989987][T10908] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:38 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 288.060080][T10908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) [ 288.113897][T10908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:26:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) [ 288.182498][T10908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:38 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5441, 0x0) 06:26:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:38 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 06:26:38 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5450, 0x0) [ 288.673360][T10951] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:38 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 06:26:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 288.720120][T10951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.820761][T10951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:26:38 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5451, 0x0) [ 288.862023][T10951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:39 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:39 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5452, 0x0) 06:26:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:39 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:39 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x545d, 0x0) 06:26:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:39 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:39 executing program 4: r0 = getpid() socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="230228ef4407771ed318061b4b26c0d8d21d5d01e0eb92552fba4784466ebedbcc3e2a012ecdb76658b7e06c0e09d1ede6c1f37b9c352e333700"], 0x3a) prctl$PR_SET_PTRACER(0x59616d61, r0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 06:26:39 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5460, 0x0) 06:26:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 06:26:39 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0x8800) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) 06:26:40 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x6364, 0x0) 06:26:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 290.333428][T11045] ion_buffer_destroy: buffer still mapped in the kernel 06:26:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:40 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) listen(r0, 0xc30) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 06:26:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 06:26:40 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x8912, 0x0) 06:26:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:26:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 06:26:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:40 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/160, 0xa0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) shutdown(r2, 0x0) 06:26:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x8933, 0x0) 06:26:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 06:26:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:26:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) 06:26:41 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 06:26:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:26:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x40042408, 0x0) 06:26:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:41 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:41 executing program 4: unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0xb, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x06\b'}) 06:26:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:26:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 06:26:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x400454ca, 0x0) 06:26:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:41 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x40049409, 0x0) [ 291.957702][T11131] bond0: (slave bond_slave_1): Releasing backup interface 06:26:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 06:26:43 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x40186366, 0x0) 06:26:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffedb, 0x0, 0x0, 0xaabe2117df621df5) 06:26:44 executing program 4: setresuid(0x0, 0xee01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x3055c0, 0x0) 06:26:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:26:44 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x4020940d, 0x0) 06:26:44 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:44 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:26:44 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/160, 0xa0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1006, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) shutdown(r2, 0x0) 06:26:44 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x80045432, 0x0) 06:26:44 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0xc30) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:44 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:44 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x80045440, 0x0) 06:26:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 06:26:44 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 06:26:44 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0xc30) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:44 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='selinux&\x00') 06:26:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 06:26:44 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x800454d2, 0x0) 06:26:44 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_delete(0x0) 06:26:45 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0xc30) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:45 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x80086301, 0x0) 06:26:45 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) listen(r0, 0xc30) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "a6fa2dcf1a85c7ccedbca8b752c9dc1611394a4adefa0855e441e4704d5c6e0fbf6690cdeda75e04bce88d55c160c0c80c02ff90647871e9328427479370a9ed"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) dup(r5) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 295.329627][T11245] netlink: 'syz-executor.3': attribute type 17 has an invalid length. 06:26:45 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 295.391545][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:45 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}]}, 0x28}}, 0x0) [ 295.450991][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.512230][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:45 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 295.638753][T11259] FAULT_INJECTION: forcing a failure. [ 295.638753][T11259] name failslab, interval 1, probability 0, space 0, times 0 06:26:45 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0xc0045878, 0x0) [ 295.768225][T11259] CPU: 1 PID: 11259 Comm: syz-executor.4 Not tainted 5.5.0-rc2-syzkaller #0 [ 295.776953][T11259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.787012][T11259] Call Trace: [ 295.787041][T11259] dump_stack+0x197/0x210 [ 295.787067][T11259] should_fail.cold+0xa/0x15 [ 295.787090][T11259] ? fault_create_debugfs_attr+0x180/0x180 [ 295.787111][T11259] ? ___might_sleep+0x163/0x2c0 [ 295.787133][T11259] __should_failslab+0x121/0x190 [ 295.787153][T11259] should_failslab+0x9/0x14 [ 295.787171][T11259] __kmalloc+0x2e0/0x770 [ 295.824902][T11259] ? mark_held_locks+0xf0/0xf0 [ 295.829675][T11259] ? mark_lock+0xc2/0x1220 [ 295.834114][T11259] ? _parse_integer+0x190/0x190 [ 295.838994][T11259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.845261][T11259] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 295.851000][T11259] tomoyo_realpath_from_path+0xcd/0x7b0 [ 295.856558][T11259] ? tomoyo_path_number_perm+0x193/0x520 [ 295.862225][T11259] tomoyo_path_number_perm+0x1dd/0x520 [ 295.867711][T11259] ? tomoyo_path_number_perm+0x193/0x520 [ 295.873378][T11259] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 295.879214][T11259] ? __f_unlock_pos+0x19/0x20 [ 295.883950][T11259] ? __fget+0x37f/0x550 [ 295.888129][T11259] ? ksys_dup3+0x3e0/0x3e0 [ 295.892571][T11259] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 295.898838][T11259] ? fput_many+0x12c/0x1a0 [ 295.903460][T11259] tomoyo_file_ioctl+0x23/0x30 [ 295.908332][T11259] security_file_ioctl+0x77/0xc0 [ 295.913286][T11259] ksys_ioctl+0x57/0xd0 [ 295.917462][T11259] __x64_sys_ioctl+0x73/0xb0 [ 295.922162][T11259] do_syscall_64+0xfa/0x790 [ 295.926703][T11259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 295.932611][T11259] RIP: 0033:0x45a919 [ 295.936530][T11259] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.956149][T11259] RSP: 002b:00007fd3c9fbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:26:45 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0xc0045878, 0x0) [ 295.964584][T11259] RAX: ffffffffffffffda RBX: 00007fd3c9fbec90 RCX: 000000000045a919 [ 295.972577][T11259] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000004 [ 295.980572][T11259] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 295.988591][T11259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3c9fbf6d4 [ 295.996588][T11259] R13: 00000000004c27ea R14: 00000000004d7a28 R15: 0000000000000005 [ 296.006335][T11260] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:45 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 296.061561][T11270] FAULT_INJECTION: forcing a failure. [ 296.061561][T11270] name failslab, interval 1, probability 0, space 0, times 0 [ 296.088025][T11259] ERROR: Out of memory at tomoyo_realpath_from_path. 06:26:46 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 296.118724][T11270] CPU: 1 PID: 11270 Comm: syz-executor.5 Not tainted 5.5.0-rc2-syzkaller #0 [ 296.127433][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.137506][T11270] Call Trace: [ 296.140826][T11270] dump_stack+0x197/0x210 [ 296.145188][T11270] should_fail.cold+0xa/0x15 [ 296.149819][T11270] ? fault_create_debugfs_attr+0x180/0x180 [ 296.155673][T11270] ? ___might_sleep+0x163/0x2c0 [ 296.160555][T11270] __should_failslab+0x121/0x190 [ 296.165501][T11270] should_failslab+0x9/0x14 [ 296.170026][T11270] __kmalloc+0x2e0/0x770 [ 296.174305][T11270] ? mark_held_locks+0xf0/0xf0 [ 296.179095][T11270] ? mark_lock+0xc2/0x1220 [ 296.183536][T11270] ? _parse_integer+0x190/0x190 [ 296.188413][T11270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.194707][T11270] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 296.200451][T11270] tomoyo_realpath_from_path+0xcd/0x7b0 [ 296.200469][T11270] ? tomoyo_path_number_perm+0x193/0x520 [ 296.200493][T11270] tomoyo_path_number_perm+0x1dd/0x520 [ 296.200506][T11270] ? tomoyo_path_number_perm+0x193/0x520 [ 296.200525][T11270] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 296.200541][T11270] ? __f_unlock_pos+0x19/0x20 [ 296.200596][T11270] ? __fget+0x37f/0x550 [ 296.233335][T11270] ? ksys_dup3+0x3e0/0x3e0 [ 296.233353][T11270] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 296.233373][T11270] ? fput_many+0x12c/0x1a0 [ 296.252746][T11270] tomoyo_file_ioctl+0x23/0x30 [ 296.257536][T11270] security_file_ioctl+0x77/0xc0 [ 296.262505][T11270] ksys_ioctl+0x57/0xd0 06:26:46 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 296.266679][T11270] __x64_sys_ioctl+0x73/0xb0 [ 296.271282][T11270] do_syscall_64+0xfa/0x790 [ 296.275792][T11270] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.281700][T11270] RIP: 0033:0x45a919 [ 296.285623][T11270] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.305252][T11270] RSP: 002b:00007f982b539c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:26:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}]}, 0x28}}, 0x0) [ 296.313692][T11270] RAX: ffffffffffffffda RBX: 00007f982b539c90 RCX: 000000000045a919 [ 296.321686][T11270] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000004 [ 296.329680][T11270] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 296.337677][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f982b53a6d4 [ 296.345669][T11270] R13: 00000000004c27ea R14: 00000000004d7a28 R15: 0000000000000005 06:26:46 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0xc0189436, 0x0) [ 296.420413][T11282] FAULT_INJECTION: forcing a failure. [ 296.420413][T11282] name failslab, interval 1, probability 0, space 0, times 0 [ 296.422150][T11284] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 296.433322][T11270] ERROR: Out of memory at tomoyo_realpath_from_path. 06:26:46 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 296.518154][T11282] CPU: 1 PID: 11282 Comm: syz-executor.3 Not tainted 5.5.0-rc2-syzkaller #0 [ 296.526933][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.537139][T11282] Call Trace: [ 296.540473][T11282] dump_stack+0x197/0x210 [ 296.544847][T11282] should_fail.cold+0xa/0x15 [ 296.549556][T11282] ? fault_create_debugfs_attr+0x180/0x180 [ 296.555396][T11282] ? ___might_sleep+0x163/0x2c0 [ 296.560289][T11282] __should_failslab+0x121/0x190 [ 296.565265][T11282] should_failslab+0x9/0x14 [ 296.569802][T11282] __kmalloc+0x2e0/0x770 [ 296.574077][T11282] ? mark_held_locks+0xf0/0xf0 [ 296.578871][T11282] ? mark_lock+0xc2/0x1220 [ 296.583428][T11282] ? _parse_integer+0x190/0x190 [ 296.588314][T11282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.594591][T11282] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 296.600346][T11282] tomoyo_realpath_from_path+0xcd/0x7b0 [ 296.605923][T11282] ? tomoyo_path_number_perm+0x193/0x520 [ 296.611584][T11282] tomoyo_path_number_perm+0x1dd/0x520 [ 296.617074][T11282] ? tomoyo_path_number_perm+0x193/0x520 [ 296.622744][T11282] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 296.628575][T11282] ? __f_unlock_pos+0x19/0x20 [ 296.633313][T11282] ? __fget+0x37f/0x550 [ 296.637511][T11282] ? ksys_dup3+0x3e0/0x3e0 [ 296.641960][T11282] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 296.648224][T11282] ? fput_many+0x12c/0x1a0 [ 296.652672][T11282] tomoyo_file_ioctl+0x23/0x30 [ 296.657465][T11282] security_file_ioctl+0x77/0xc0 [ 296.662426][T11282] ksys_ioctl+0x57/0xd0 [ 296.666589][T11282] __x64_sys_ioctl+0x73/0xb0 [ 296.671202][T11282] do_syscall_64+0xfa/0x790 [ 296.675743][T11282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.681662][T11282] RIP: 0033:0x45a919 [ 296.685573][T11282] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.704276][T11293] FAULT_INJECTION: forcing a failure. [ 296.704276][T11293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 296.705185][T11282] RSP: 002b:00007f74bf297c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.726781][T11282] RAX: ffffffffffffffda RBX: 00007f74bf297c90 RCX: 000000000045a919 [ 296.734755][T11282] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000004 [ 296.742725][T11282] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 296.750686][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f74bf2986d4 [ 296.758646][T11282] R13: 00000000004c27ea R14: 00000000004d7a28 R15: 0000000000000005 [ 296.766748][T11293] CPU: 0 PID: 11293 Comm: syz-executor.4 Not tainted 5.5.0-rc2-syzkaller #0 [ 296.775448][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.785520][T11293] Call Trace: [ 296.788814][T11293] dump_stack+0x197/0x210 [ 296.793157][T11293] should_fail.cold+0xa/0x15 [ 296.797745][T11293] ? fault_create_debugfs_attr+0x180/0x180 [ 296.803542][T11293] ? __kasan_check_read+0x11/0x20 [ 296.808579][T11293] ? mark_lock+0xc2/0x1220 [ 296.812988][T11293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.819325][T11293] should_fail_alloc_page+0x50/0x60 [ 296.824515][T11293] __alloc_pages_nodemask+0x1a1/0x910 [ 296.829880][T11293] ? __lockdep_free_key_range+0x120/0x120 [ 296.835588][T11293] ? __alloc_pages_slowpath+0x2920/0x2920 [ 296.841303][T11293] ? __kasan_check_read+0x11/0x20 [ 296.846326][T11293] ? fault_create_debugfs_attr+0x180/0x180 [ 296.852474][T11293] cache_grow_begin+0x90/0xc60 [ 296.857228][T11293] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 296.862941][T11293] ? trace_hardirqs_off+0x62/0x240 [ 296.868046][T11293] __kmalloc+0x6b2/0x770 [ 296.872276][T11293] ? mark_held_locks+0xf0/0xf0 [ 296.877052][T11293] ? mark_lock+0xc2/0x1220 [ 296.881462][T11293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.887698][T11293] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 296.893426][T11293] tomoyo_realpath_from_path+0xcd/0x7b0 [ 296.898974][T11293] ? tomoyo_path_number_perm+0x193/0x520 [ 296.904602][T11293] tomoyo_path_number_perm+0x1dd/0x520 [ 296.910050][T11293] ? tomoyo_path_number_perm+0x193/0x520 [ 296.915675][T11293] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 296.921469][T11293] ? __f_unlock_pos+0x19/0x20 [ 296.926159][T11293] ? __fget+0x37f/0x550 [ 296.930314][T11293] ? ksys_dup3+0x3e0/0x3e0 [ 296.934743][T11293] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 296.940973][T11293] ? fput_many+0x12c/0x1a0 [ 296.945402][T11293] tomoyo_file_ioctl+0x23/0x30 [ 296.950204][T11293] security_file_ioctl+0x77/0xc0 [ 296.955137][T11293] ksys_ioctl+0x57/0xd0 [ 296.959291][T11293] __x64_sys_ioctl+0x73/0xb0 [ 296.963886][T11293] do_syscall_64+0xfa/0x790 [ 296.968385][T11293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.974275][T11293] RIP: 0033:0x45a919 [ 296.978177][T11293] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.997783][T11293] RSP: 002b:00007fd3c9fbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.006191][T11293] RAX: ffffffffffffffda RBX: 00007fd3c9fbec90 RCX: 000000000045a919 06:26:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}]}, 0x28}}, 0x0) [ 297.014149][T11293] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000004 [ 297.022110][T11293] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 297.030070][T11293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3c9fbf6d4 [ 297.038028][T11293] R13: 00000000004c27ea R14: 00000000004d7a28 R15: 0000000000000005 06:26:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0xc020660b, 0x0) [ 297.124717][T11301] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:47 executing program 4 (fault-call:2 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:26:47 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x2) [ 297.327102][T11282] ERROR: Out of memory at tomoyo_realpath_from_path. 06:26:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 297.437141][T11314] FAULT_INJECTION: forcing a failure. [ 297.437141][T11314] name failslab, interval 1, probability 0, space 0, times 0 [ 297.461017][T11315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.489395][T11314] CPU: 0 PID: 11314 Comm: syz-executor.4 Not tainted 5.5.0-rc2-syzkaller #0 [ 297.498116][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.501484][T11315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.508180][T11314] Call Trace: [ 297.508207][T11314] dump_stack+0x197/0x210 [ 297.508234][T11314] should_fail.cold+0xa/0x15 [ 297.508258][T11314] ? fault_create_debugfs_attr+0x180/0x180 [ 297.508278][T11314] ? ___might_sleep+0x163/0x2c0 [ 297.508298][T11314] __should_failslab+0x121/0x190 [ 297.508315][T11314] should_failslab+0x9/0x14 [ 297.508333][T11314] __kmalloc+0x2e0/0x770 [ 297.523315][T11314] ? dmabuffs_dname+0x279/0x560 [ 297.538559][T11314] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 297.538584][T11314] ? tomoyo_encode2.part.0+0xf5/0x400 [ 297.538606][T11314] tomoyo_encode2.part.0+0xf5/0x400 [ 297.538626][T11314] tomoyo_encode+0x2b/0x50 [ 297.538641][T11314] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 297.538661][T11314] ? tomoyo_path_number_perm+0x193/0x520 [ 297.568394][T11314] tomoyo_path_number_perm+0x1dd/0x520 [ 297.568409][T11314] ? tomoyo_path_number_perm+0x193/0x520 [ 297.568427][T11314] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 297.568448][T11314] ? __f_unlock_pos+0x19/0x20 [ 297.578248][T11315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.579063][T11314] ? __fget+0x37f/0x550 [ 297.579086][T11314] ? ksys_dup3+0x3e0/0x3e0 [ 297.579111][T11314] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 297.612311][T11314] ? fput_many+0x12c/0x1a0 [ 297.638841][T11314] tomoyo_file_ioctl+0x23/0x30 [ 297.643636][T11314] security_file_ioctl+0x77/0xc0 [ 297.648606][T11314] ksys_ioctl+0x57/0xd0 [ 297.652935][T11314] __x64_sys_ioctl+0x73/0xb0 [ 297.657563][T11314] do_syscall_64+0xfa/0x790 [ 297.662102][T11314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.668027][T11314] RIP: 0033:0x45a919 06:26:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x2, &(0x7f0000000000)=0x5) 06:26:47 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x2, &(0x7f0000000000)=0x5) 06:26:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 297.671943][T11314] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.691568][T11314] RSP: 002b:00007fd3c9fbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.700001][T11314] RAX: ffffffffffffffda RBX: 00007fd3c9fbec90 RCX: 000000000045a919 [ 297.708000][T11314] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000004 [ 297.716013][T11314] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 297.724011][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3c9fbf6d4 [ 297.732001][T11314] R13: 00000000004c27ea R14: 00000000004d7a28 R15: 0000000000000005 06:26:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x3) 06:26:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x10, &(0x7f0000000000)=0x5) [ 297.988885][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.010184][T11314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.046906][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.082942][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:48 executing program 4 (fault-call:2 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:48 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x4) 06:26:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x10, &(0x7f0000000000)=0x5) 06:26:48 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4112, &(0x7f0000000000)=0x5) 06:26:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:26:48 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4c01, &(0x7f0000000000)=0x5) 06:26:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x227d, &(0x7f0000000000)=0x5) 06:26:48 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x5) 06:26:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 298.449475][T11364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.509230][T11364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.521721][T11364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x541c, &(0x7f0000000000)=0x5) 06:26:48 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x6) 06:26:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x2, &(0x7f0000000000)=0x5) 06:26:48 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4c00, &(0x7f0000000000)=0x5) 06:26:48 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5421, &(0x7f0000000000)=0x5) [ 298.904433][T11400] FAULT_INJECTION: forcing a failure. [ 298.904433][T11400] name failslab, interval 1, probability 0, space 0, times 0 06:26:48 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x10, &(0x7f0000000000)=0x5) [ 299.002131][T11400] CPU: 1 PID: 11400 Comm: syz-executor.0 Not tainted 5.5.0-rc2-syzkaller #0 [ 299.010881][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.020962][T11400] Call Trace: [ 299.024316][T11400] dump_stack+0x197/0x210 [ 299.028668][T11400] should_fail.cold+0xa/0x15 [ 299.028758][T11400] ? release_sock+0x156/0x1c0 [ 299.028779][T11400] ? fault_create_debugfs_attr+0x180/0x180 [ 299.028804][T11400] ? ___might_sleep+0x163/0x2c0 [ 299.049167][T11400] __should_failslab+0x121/0x190 [ 299.049187][T11400] should_failslab+0x9/0x14 [ 299.049206][T11400] kmem_cache_alloc_node+0x268/0x740 [ 299.049297][T11400] __alloc_skb+0xd5/0x5e0 [ 299.049319][T11400] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 299.074443][T11400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.080776][T11400] ? netlink_autobind.isra.0+0x223/0x300 [ 299.086438][T11400] netlink_sendmsg+0xa1b/0xea0 [ 299.091244][T11400] ? netlink_unicast+0x7d0/0x7d0 [ 299.096263][T11400] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 299.101931][T11400] ? apparmor_socket_sendmsg+0x2a/0x30 [ 299.107434][T11400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.113768][T11400] ? security_socket_sendmsg+0x8d/0xc0 [ 299.119259][T11400] ? netlink_unicast+0x7d0/0x7d0 [ 299.124968][T11400] sock_sendmsg+0xd7/0x130 [ 299.129413][T11400] ____sys_sendmsg+0x753/0x880 [ 299.134217][T11400] ? kernel_sendmsg+0x50/0x50 [ 299.138918][T11400] ? __fget+0x35d/0x550 [ 299.143103][T11400] ? find_held_lock+0x35/0x130 [ 299.147904][T11400] ___sys_sendmsg+0x100/0x170 06:26:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4c00, &(0x7f0000000000)=0x5) [ 299.152622][T11400] ? sendmsg_copy_msghdr+0x70/0x70 [ 299.157751][T11400] ? __kasan_check_read+0x11/0x20 [ 299.162804][T11400] ? __fget+0x37f/0x550 [ 299.166989][T11400] ? ksys_dup3+0x3e0/0x3e0 [ 299.171446][T11400] ? __fget_light+0x1a9/0x230 [ 299.176148][T11400] ? __fdget+0x1b/0x20 [ 299.180246][T11400] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 299.186943][T11400] __sys_sendmsg+0x105/0x1d0 [ 299.191555][T11400] ? __sys_sendmsg_sock+0xc0/0xc0 [ 299.196620][T11400] ? trace_hardirqs_on_thunk+0x1a/0x1c 06:26:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4c01, &(0x7f0000000000)=0x5) [ 299.202109][T11400] ? do_syscall_64+0x26/0x790 [ 299.206820][T11400] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.212898][T11400] ? do_syscall_64+0x26/0x790 [ 299.212921][T11400] __x64_sys_sendmsg+0x78/0xb0 [ 299.212938][T11400] do_syscall_64+0xfa/0x790 [ 299.212957][T11400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.212968][T11400] RIP: 0033:0x45a919 [ 299.212984][T11400] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.212992][T11400] RSP: 002b:00007f6e0b5f1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.257193][T11400] RAX: ffffffffffffffda RBX: 00007f6e0b5f1c90 RCX: 000000000045a919 [ 299.257204][T11400] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 299.257212][T11400] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 299.257220][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e0b5f26d4 06:26:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5450, &(0x7f0000000000)=0x5) 06:26:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7) [ 299.257228][T11400] R13: 00000000004c9a1e R14: 00000000004e18f8 R15: 0000000000000004 06:26:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:49 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4c01, &(0x7f0000000000)=0x5) 06:26:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x300) 06:26:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5451, &(0x7f0000000000)=0x5) 06:26:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5421, &(0x7f0000000000)=0x5) 06:26:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5421, &(0x7f0000000000)=0x5) [ 299.548554][T11434] FAULT_INJECTION: forcing a failure. [ 299.548554][T11434] name failslab, interval 1, probability 0, space 0, times 0 06:26:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x500) [ 299.696590][T11434] CPU: 0 PID: 11434 Comm: syz-executor.0 Not tainted 5.5.0-rc2-syzkaller #0 [ 299.705332][T11434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.705339][T11434] Call Trace: [ 299.705362][T11434] dump_stack+0x197/0x210 [ 299.705388][T11434] should_fail.cold+0xa/0x15 [ 299.705414][T11434] ? fault_create_debugfs_attr+0x180/0x180 [ 299.733593][T11434] ? ___might_sleep+0x163/0x2c0 [ 299.738475][T11434] __should_failslab+0x121/0x190 [ 299.743454][T11434] should_failslab+0x9/0x14 [ 299.747982][T11434] kmem_cache_alloc_node_trace+0x274/0x750 [ 299.753813][T11434] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 299.759836][T11434] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 299.765687][T11434] __kmalloc_node_track_caller+0x3d/0x70 [ 299.771356][T11434] __kmalloc_reserve.isra.0+0x40/0xf0 [ 299.776766][T11434] __alloc_skb+0x10b/0x5e0 [ 299.781243][T11434] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 299.786821][T11434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.793085][T11434] ? netlink_autobind.isra.0+0x223/0x300 [ 299.793110][T11434] netlink_sendmsg+0xa1b/0xea0 [ 299.793134][T11434] ? netlink_unicast+0x7d0/0x7d0 [ 299.808469][T11434] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 299.814160][T11434] ? apparmor_socket_sendmsg+0x2a/0x30 [ 299.819659][T11434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.825944][T11434] ? security_socket_sendmsg+0x8d/0xc0 [ 299.832000][T11434] ? netlink_unicast+0x7d0/0x7d0 [ 299.836962][T11434] sock_sendmsg+0xd7/0x130 [ 299.841411][T11434] ____sys_sendmsg+0x753/0x880 [ 299.846200][T11434] ? kernel_sendmsg+0x50/0x50 [ 299.850902][T11434] ? __fget+0x35d/0x550 [ 299.855082][T11434] ? find_held_lock+0x35/0x130 [ 299.859885][T11434] ___sys_sendmsg+0x100/0x170 [ 299.864604][T11434] ? sendmsg_copy_msghdr+0x70/0x70 [ 299.869750][T11434] ? __kasan_check_read+0x11/0x20 [ 299.874806][T11434] ? __fget+0x37f/0x550 [ 299.879002][T11434] ? ksys_dup3+0x3e0/0x3e0 [ 299.883459][T11434] ? __fget_light+0x1a9/0x230 [ 299.888165][T11434] ? __fdget+0x1b/0x20 [ 299.892268][T11434] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 299.898537][T11434] __sys_sendmsg+0x105/0x1d0 [ 299.903156][T11434] ? __sys_sendmsg_sock+0xc0/0xc0 [ 299.908223][T11434] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 299.913713][T11434] ? do_syscall_64+0x26/0x790 [ 299.918422][T11434] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.924521][T11434] ? do_syscall_64+0x26/0x790 [ 299.929237][T11434] __x64_sys_sendmsg+0x78/0xb0 [ 299.934035][T11434] do_syscall_64+0xfa/0x790 [ 299.938569][T11434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.944489][T11434] RIP: 0033:0x45a919 [ 299.948407][T11434] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.968031][T11434] RSP: 002b:00007f6e0b5f1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.976470][T11434] RAX: ffffffffffffffda RBX: 00007f6e0b5f1c90 RCX: 000000000045a919 [ 299.984468][T11434] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 06:26:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5452, &(0x7f0000000000)=0x5) 06:26:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5450, &(0x7f0000000000)=0x5) 06:26:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5460, &(0x7f0000000000)=0x5) 06:26:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x600) [ 299.992459][T11434] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 300.000480][T11434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e0b5f26d4 [ 300.008471][T11434] R13: 00000000004c9a1e R14: 00000000004e18f8 R15: 0000000000000004 06:26:50 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:50 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5451, &(0x7f0000000000)=0x5) 06:26:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x6364, &(0x7f0000000000)=0x5) 06:26:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x700) 06:26:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5450, &(0x7f0000000000)=0x5) 06:26:50 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:50 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5452, &(0x7f0000000000)=0x5) 06:26:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8903, &(0x7f0000000000)=0x5) 06:26:50 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5451, &(0x7f0000000000)=0x5) 06:26:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x4000) [ 300.434316][T11487] FAULT_INJECTION: forcing a failure. [ 300.434316][T11487] name failslab, interval 1, probability 0, space 0, times 0 [ 300.503400][T11487] CPU: 0 PID: 11487 Comm: syz-executor.0 Not tainted 5.5.0-rc2-syzkaller #0 [ 300.512151][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.522252][T11487] Call Trace: [ 300.525566][T11487] dump_stack+0x197/0x210 [ 300.529914][T11487] should_fail.cold+0xa/0x15 [ 300.534518][T11487] ? fault_create_debugfs_attr+0x180/0x180 [ 300.540361][T11487] __should_failslab+0x121/0x190 [ 300.545333][T11487] should_failslab+0x9/0x14 [ 300.549861][T11487] kmem_cache_alloc+0x47/0x710 [ 300.554633][T11487] ? lock_acquire+0x190/0x410 [ 300.559338][T11487] ? netlink_deliver_tap+0x146/0xbe0 [ 300.564657][T11487] skb_clone+0x154/0x3d0 [ 300.568937][T11487] netlink_deliver_tap+0x943/0xbe0 [ 300.574087][T11487] netlink_unicast+0x643/0x7d0 [ 300.578889][T11487] ? netlink_attachskb+0x870/0x870 [ 300.584035][T11487] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 300.589783][T11487] ? __check_object_size+0x3d/0x437 [ 300.595019][T11487] netlink_sendmsg+0x91c/0xea0 [ 300.599818][T11487] ? netlink_unicast+0x7d0/0x7d0 [ 300.604785][T11487] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 300.610364][T11487] ? apparmor_socket_sendmsg+0x2a/0x30 [ 300.615850][T11487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.622111][T11487] ? security_socket_sendmsg+0x8d/0xc0 [ 300.627596][T11487] ? netlink_unicast+0x7d0/0x7d0 [ 300.632560][T11487] sock_sendmsg+0xd7/0x130 [ 300.637004][T11487] ____sys_sendmsg+0x753/0x880 [ 300.641800][T11487] ? kernel_sendmsg+0x50/0x50 [ 300.646500][T11487] ? __fget+0x35d/0x550 [ 300.650680][T11487] ? find_held_lock+0x35/0x130 [ 300.650709][T11487] ___sys_sendmsg+0x100/0x170 [ 300.650728][T11487] ? sendmsg_copy_msghdr+0x70/0x70 [ 300.650747][T11487] ? __kasan_check_read+0x11/0x20 [ 300.670328][T11487] ? __fget+0x37f/0x550 [ 300.674524][T11487] ? ksys_dup3+0x3e0/0x3e0 [ 300.678978][T11487] ? __fget_light+0x1a9/0x230 [ 300.683683][T11487] ? __fdget+0x1b/0x20 [ 300.687784][T11487] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 300.694050][T11487] __sys_sendmsg+0x105/0x1d0 [ 300.698676][T11487] ? __sys_sendmsg_sock+0xc0/0xc0 [ 300.703744][T11487] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 300.709225][T11487] ? do_syscall_64+0x26/0x790 [ 300.713928][T11487] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.720020][T11487] ? do_syscall_64+0x26/0x790 [ 300.724766][T11487] __x64_sys_sendmsg+0x78/0xb0 [ 300.729559][T11487] do_syscall_64+0xfa/0x790 [ 300.734091][T11487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.740005][T11487] RIP: 0033:0x45a919 [ 300.743923][T11487] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.763544][T11487] RSP: 002b:00007f6e0b5f1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.771980][T11487] RAX: ffffffffffffffda RBX: 00007f6e0b5f1c90 RCX: 000000000045a919 [ 300.779974][T11487] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 300.787965][T11487] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 300.795951][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e0b5f26d4 06:26:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5452, &(0x7f0000000000)=0x5) [ 300.803943][T11487] R13: 00000000004c9a1e R14: 00000000004e18f8 R15: 0000000000000004 [ 300.819735][T11487] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 300.887775][T11487] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.914660][T11487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.940088][T11487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:50 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x890b, &(0x7f0000000000)=0x5) 06:26:50 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5460, &(0x7f0000000000)=0x5) 06:26:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1000000) 06:26:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x5460, &(0x7f0000000000)=0x5) 06:26:50 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x6364, &(0x7f0000000000)=0x5) 06:26:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8912, &(0x7f0000000000)=0x5) 06:26:51 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x2000000) 06:26:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x6364, &(0x7f0000000000)=0x5) [ 301.203570][T11529] FAULT_INJECTION: forcing a failure. [ 301.203570][T11529] name failslab, interval 1, probability 0, space 0, times 0 [ 301.349568][T11529] CPU: 1 PID: 11529 Comm: syz-executor.0 Not tainted 5.5.0-rc2-syzkaller #0 [ 301.358402][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.368477][T11529] Call Trace: [ 301.371805][T11529] dump_stack+0x197/0x210 [ 301.376177][T11529] should_fail.cold+0xa/0x15 [ 301.380814][T11529] ? fault_create_debugfs_attr+0x180/0x180 [ 301.386662][T11529] ? ___might_sleep+0x163/0x2c0 [ 301.391550][T11529] __should_failslab+0x121/0x190 06:26:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8933, &(0x7f0000000000)=0x5) [ 301.396526][T11529] should_failslab+0x9/0x14 [ 301.401073][T11529] kmem_cache_alloc_trace+0x2d3/0x790 [ 301.406577][T11529] rtnl_newlink+0x4b/0xa0 [ 301.410942][T11529] ? __rtnl_newlink+0x1790/0x1790 [ 301.416525][T11529] rtnetlink_rcv_msg+0x45e/0xaf0 [ 301.421501][T11529] ? rtnl_bridge_getlink+0x910/0x910 [ 301.426826][T11529] ? netlink_deliver_tap+0x228/0xbe0 [ 301.432148][T11529] ? find_held_lock+0x35/0x130 [ 301.436957][T11529] netlink_rcv_skb+0x177/0x450 [ 301.441754][T11529] ? rtnl_bridge_getlink+0x910/0x910 [ 301.447075][T11529] ? netlink_ack+0xb50/0xb50 [ 301.451703][T11529] ? __kasan_check_read+0x11/0x20 [ 301.456769][T11529] ? netlink_deliver_tap+0x24a/0xbe0 [ 301.462096][T11529] rtnetlink_rcv+0x1d/0x30 [ 301.466648][T11529] netlink_unicast+0x58c/0x7d0 [ 301.471457][T11529] ? netlink_attachskb+0x870/0x870 [ 301.476609][T11529] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 301.482361][T11529] ? __check_object_size+0x3d/0x437 [ 301.487605][T11529] netlink_sendmsg+0x91c/0xea0 [ 301.492416][T11529] ? netlink_unicast+0x7d0/0x7d0 [ 301.497386][T11529] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 301.503061][T11529] ? apparmor_socket_sendmsg+0x2a/0x30 [ 301.508546][T11529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.514820][T11529] ? security_socket_sendmsg+0x8d/0xc0 [ 301.520348][T11529] ? netlink_unicast+0x7d0/0x7d0 [ 301.525312][T11529] sock_sendmsg+0xd7/0x130 [ 301.529760][T11529] ____sys_sendmsg+0x753/0x880 [ 301.534561][T11529] ? kernel_sendmsg+0x50/0x50 [ 301.539268][T11529] ? __fget+0x35d/0x550 [ 301.543452][T11529] ? find_held_lock+0x35/0x130 [ 301.548351][T11529] ___sys_sendmsg+0x100/0x170 [ 301.553055][T11529] ? sendmsg_copy_msghdr+0x70/0x70 [ 301.558184][T11529] ? __kasan_check_read+0x11/0x20 [ 301.563232][T11529] ? __fget+0x37f/0x550 [ 301.567421][T11529] ? ksys_dup3+0x3e0/0x3e0 [ 301.571862][T11529] ? __fget_light+0x1a9/0x230 [ 301.576565][T11529] ? __fdget+0x1b/0x20 [ 301.580665][T11529] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 301.586929][T11529] __sys_sendmsg+0x105/0x1d0 [ 301.591547][T11529] ? __sys_sendmsg_sock+0xc0/0xc0 [ 301.596600][T11529] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 301.602526][T11529] ? do_syscall_64+0x26/0x790 [ 301.607233][T11529] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.613311][T11529] ? do_syscall_64+0x26/0x790 [ 301.618023][T11529] __x64_sys_sendmsg+0x78/0xb0 [ 301.623342][T11529] do_syscall_64+0xfa/0x790 [ 301.627876][T11529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.633778][T11529] RIP: 0033:0x45a919 [ 301.637687][T11529] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.657309][T11529] RSP: 002b:00007f6e0b5f1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.665745][T11529] RAX: ffffffffffffffda RBX: 00007f6e0b5f1c90 RCX: 000000000045a919 [ 301.673738][T11529] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 301.681733][T11529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 301.689731][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e0b5f26d4 [ 301.697726][T11529] R13: 00000000004c9a1e R14: 00000000004e18f8 R15: 0000000000000004 06:26:51 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8910, &(0x7f0000000000)=0x5) 06:26:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x89f1, &(0x7f0000000000)=0x5) 06:26:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8933, &(0x7f0000000000)=0x5) 06:26:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x3000000) 06:26:51 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xae01, &(0x7f0000000000)=0x5) 06:26:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8912, &(0x7f0000000000)=0x5) 06:26:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x400454ca, &(0x7f0000000000)=0x5) 06:26:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x4000000) [ 301.939720][T11571] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 301.964455][T11571] FAULT_INJECTION: forcing a failure. [ 301.964455][T11571] name failslab, interval 1, probability 0, space 0, times 0 [ 301.988454][T11571] CPU: 0 PID: 11571 Comm: syz-executor.0 Not tainted 5.5.0-rc2-syzkaller #0 [ 301.997310][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.007371][T11571] Call Trace: [ 302.007396][T11571] dump_stack+0x197/0x210 [ 302.007424][T11571] should_fail.cold+0xa/0x15 [ 302.007445][T11571] ? fault_create_debugfs_attr+0x180/0x180 [ 302.007464][T11571] ? ___might_sleep+0x163/0x2c0 [ 302.007486][T11571] __should_failslab+0x121/0x190 [ 302.007504][T11571] should_failslab+0x9/0x14 [ 302.007518][T11571] kmem_cache_alloc_node+0x268/0x740 [ 302.007545][T11571] __alloc_skb+0xd5/0x5e0 [ 302.007566][T11571] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 302.007588][T11571] ? if_nlmsg_size+0x54a/0xa80 [ 302.007613][T11571] rtmsg_ifinfo_build_skb+0x74/0x1a0 [ 302.007637][T11571] rtmsg_ifinfo_event.part.0+0x43/0xe0 [ 302.007659][T11571] rtmsg_ifinfo+0x8d/0xa0 [ 302.007750][T11571] netdev_state_change+0x121/0x140 [ 302.007772][T11571] ? netdev_notify_peers+0xc0/0xc0 [ 302.065286][T11571] ? do_setlink+0xf64/0x3720 [ 302.065310][T11571] ? do_setlink+0xf64/0x3720 [ 302.065392][T11571] ? __local_bh_enable_ip+0x15a/0x270 [ 302.065413][T11571] do_setlink+0x166a/0x3720 [ 302.104724][T11571] ? vprintk_default+0x28/0x30 [ 302.104751][T11571] ? rtnl_getlink+0xb40/0xb40 [ 302.114194][T11571] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 302.119700][T11571] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 302.125534][T11571] ? ___ratelimit+0x60/0x595 [ 302.130244][T11571] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 302.136173][T11571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.142695][T11571] ? __nla_validate_parse+0x2d0/0x1ee0 [ 302.142723][T11571] ? nla_memcpy+0xb0/0xb0 [ 302.142807][T11571] ? is_bpf_text_address+0xac/0x160 [ 302.142830][T11571] ? __nla_parse+0x43/0x60 [ 302.162249][T11571] __rtnl_newlink+0xdd2/0x1790 [ 302.167062][T11571] ? rtnl_link_unregister+0x250/0x250 [ 302.172474][T11571] ? is_bpf_text_address+0xce/0x160 [ 302.177774][T11571] ? kernel_text_address+0x73/0xf0 [ 302.182942][T11571] ? unwind_get_return_address+0x61/0xa0 [ 302.183014][T11571] ? profile_setup.cold+0xbb/0xbb [ 302.183063][T11571] ? arch_stack_walk+0x97/0xf0 [ 302.198528][T11571] ? stack_trace_save+0xac/0xe0 [ 302.203443][T11571] ? stack_trace_consume_entry+0x190/0x190 [ 302.209275][T11571] ? mark_lock+0xc2/0x1220 [ 302.213725][T11571] ? save_stack+0x5c/0x90 [ 302.218079][T11571] ? save_stack+0x23/0x90 [ 302.222441][T11571] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 302.228285][T11571] ? kasan_kmalloc+0x9/0x10 [ 302.232816][T11571] ? kmem_cache_alloc_trace+0x158/0x790 [ 302.238438][T11571] ? rtnl_newlink+0x4b/0xa0 [ 302.243098][T11571] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 302.243117][T11571] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 302.243135][T11571] ? __kasan_kmalloc.constprop.0+0xa0/0xe0 [ 302.243157][T11571] ? kmem_cache_alloc_trace+0x397/0x790 [ 302.243185][T11571] rtnl_newlink+0x69/0xa0 [ 302.270387][T11571] ? __rtnl_newlink+0x1790/0x1790 [ 302.275446][T11571] rtnetlink_rcv_msg+0x45e/0xaf0 [ 302.280421][T11571] ? rtnl_bridge_getlink+0x910/0x910 [ 302.285746][T11571] ? netlink_deliver_tap+0x228/0xbe0 [ 302.291049][T11571] ? find_held_lock+0x35/0x130 [ 302.295941][T11571] netlink_rcv_skb+0x177/0x450 [ 302.300730][T11571] ? rtnl_bridge_getlink+0x910/0x910 [ 302.300754][T11571] ? netlink_ack+0xb50/0xb50 [ 302.300771][T11571] ? __kasan_check_read+0x11/0x20 [ 302.300792][T11571] ? netlink_deliver_tap+0x24a/0xbe0 [ 302.300814][T11571] rtnetlink_rcv+0x1d/0x30 [ 302.300829][T11571] netlink_unicast+0x58c/0x7d0 [ 302.300851][T11571] ? netlink_attachskb+0x870/0x870 [ 302.330227][T11571] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 302.330249][T11571] ? __check_object_size+0x3d/0x437 [ 302.330275][T11571] netlink_sendmsg+0x91c/0xea0 [ 302.330300][T11571] ? netlink_unicast+0x7d0/0x7d0 [ 302.330315][T11571] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 302.330337][T11571] ? apparmor_socket_sendmsg+0x2a/0x30 [ 302.367111][T11571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.373380][T11571] ? security_socket_sendmsg+0x8d/0xc0 [ 302.373401][T11571] ? netlink_unicast+0x7d0/0x7d0 [ 302.373423][T11571] sock_sendmsg+0xd7/0x130 [ 302.388239][T11571] ____sys_sendmsg+0x753/0x880 [ 302.393297][T11571] ? kernel_sendmsg+0x50/0x50 [ 302.398007][T11571] ? __fget+0x35d/0x550 [ 302.402196][T11571] ? find_held_lock+0x35/0x130 [ 302.407009][T11571] ___sys_sendmsg+0x100/0x170 [ 302.411730][T11571] ? sendmsg_copy_msghdr+0x70/0x70 [ 302.416874][T11571] ? __kasan_check_read+0x11/0x20 [ 302.416903][T11571] ? __fget+0x37f/0x550 [ 302.416925][T11571] ? ksys_dup3+0x3e0/0x3e0 [ 302.430549][T11571] ? __fget_light+0x1a9/0x230 [ 302.435273][T11571] ? __fdget+0x1b/0x20 [ 302.439375][T11571] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 302.445666][T11571] __sys_sendmsg+0x105/0x1d0 [ 302.450290][T11571] ? __sys_sendmsg_sock+0xc0/0xc0 [ 302.455358][T11571] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 302.460848][T11571] ? do_syscall_64+0x26/0x790 [ 302.465675][T11571] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.471761][T11571] ? do_syscall_64+0x26/0x790 [ 302.471789][T11571] __x64_sys_sendmsg+0x78/0xb0 [ 302.471809][T11571] do_syscall_64+0xfa/0x790 [ 302.471831][T11571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.492303][T11571] RIP: 0033:0x45a919 [ 302.492323][T11571] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.492333][T11571] RSP: 002b:00007f6e0b5f1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.492347][T11571] RAX: ffffffffffffffda RBX: 00007f6e0b5f1c90 RCX: 000000000045a919 [ 302.492361][T11571] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 06:26:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xae41, &(0x7f0000000000)=0x5) 06:26:52 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x5000000) [ 302.515853][T11571] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.515863][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e0b5f26d4 [ 302.515873][T11571] R13: 00000000004c9a1e R14: 00000000004e18f8 R15: 0000000000000004 [ 302.597244][T11571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 302.677196][T11571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.711478][T11571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:52 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40049409, &(0x7f0000000000)=0x5) 06:26:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8933, &(0x7f0000000000)=0x5) 06:26:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xae80, &(0x7f0000000000)=0x5) 06:26:52 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x6000000) 06:26:52 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:52 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:52 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40085c00, &(0x7f0000000000)=0x5) 06:26:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x400454ca, &(0x7f0000000000)=0x5) 06:26:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8991, &(0x7f0000000000)=0x5) 06:26:52 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7000000) [ 302.926334][T11614] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 303.012553][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.088179][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:26:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40049409, &(0x7f0000000000)=0x5) [ 303.141162][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:53 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x40000000) 06:26:53 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086201, &(0x7f0000000000)=0x5) 06:26:53 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x89a2, &(0x7f0000000000)=0x5) 06:26:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40085c00, &(0x7f0000000000)=0x5) 06:26:53 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xfdfdffff) 06:26:53 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:53 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086202, &(0x7f0000000000)=0x5) [ 303.570516][T11657] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086201, &(0x7f0000000000)=0x5) 06:26:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x400454ca, &(0x7f0000000000)=0x5) [ 303.639475][T11657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.698990][T11657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.763319][T11657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:53 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xfffffdfd) 06:26:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086202, &(0x7f0000000000)=0x5) 06:26:53 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086203, &(0x7f0000000000)=0x5) 06:26:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40049409, &(0x7f0000000000)=0x5) 06:26:53 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086204, &(0x7f0000000000)=0x5) 06:26:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086203, &(0x7f0000000000)=0x5) 06:26:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x100000000000000) [ 304.149928][T11695] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:54 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40085c00, &(0x7f0000000000)=0x5) [ 304.231117][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086204, &(0x7f0000000000)=0x5) 06:26:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086205, &(0x7f0000000000)=0x5) [ 304.385115][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:26:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x200000000000000) [ 304.470404][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086201, &(0x7f0000000000)=0x5) 06:26:54 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086206, &(0x7f0000000000)=0x5) 06:26:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086205, &(0x7f0000000000)=0x5) 06:26:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x300000000000000) 06:26:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086202, &(0x7f0000000000)=0x5) [ 304.810095][T11738] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:54 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x0, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 304.901457][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086207, &(0x7f0000000000)=0x5) 06:26:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086206, &(0x7f0000000000)=0x5) [ 304.989388][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.996987][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x400000000000000) 06:26:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40186366, &(0x7f0000000000)=0x5) 06:26:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086203, &(0x7f0000000000)=0x5) 06:26:55 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x500000000000000) 06:26:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086207, &(0x7f0000000000)=0x5) 06:26:55 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086204, &(0x7f0000000000)=0x5) 06:26:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4020940d, &(0x7f0000000000)=0x5) 06:26:55 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x600000000000000) 06:26:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4008ae89, &(0x7f0000000000)=0x5) 06:26:55 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 305.571579][T11790] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 305.669683][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086205, &(0x7f0000000000)=0x5) 06:26:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x800454d2, &(0x7f0000000000)=0x5) 06:26:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4008ae90, &(0x7f0000000000)=0x5) [ 305.736006][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.758257][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:55 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x700000000000000) 06:26:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:55 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40186366, &(0x7f0000000000)=0x5) 06:26:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x80086301, &(0x7f0000000000)=0x5) 06:26:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086206, &(0x7f0000000000)=0x5) 06:26:56 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x4000000000000000) [ 306.234385][T11839] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:56 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:56 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0045878, &(0x7f0000000000)=0x5) 06:26:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4020940d, &(0x7f0000000000)=0x5) [ 306.298062][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086207, &(0x7f0000000000)=0x5) [ 306.370489][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:26:56 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xfdfdffff00000000) [ 306.428296][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4020ae46, &(0x7f0000000000)=0x5) 06:26:56 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0045878, &(0x7f0000000000)=0x5) 06:26:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:56 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40186366, &(0x7f0000000000)=0x5) 06:26:56 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xffffffff00000000) 06:26:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4090ae82, &(0x7f0000000000)=0x5) 06:26:56 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0184900, &(0x7f0000000000)=0x5) [ 306.874558][T11880] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:56 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4020940d, &(0x7f0000000000)=0x5) 06:26:56 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSBRK(r2, 0x5427) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0xfffffffffffffff9, 0x10) ioctl$TCSBRK(r0, 0x5409, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000080)=""/4088) [ 307.008638][T11880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x4138ae84, &(0x7f0000000000)=0x5) [ 307.068277][T11880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.118197][T11880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0189436, &(0x7f0000000000)=0x5) 06:26:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x800454d2, &(0x7f0000000000)=0x5) [ 307.208762][T11902] mmap: syz-executor.1 (11902) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 06:26:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:57 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x800454d2, &(0x7f0000000000)=0x5) 06:26:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc020660b, &(0x7f0000000000)=0x5) 06:26:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x80086301, &(0x7f0000000000)=0x5) [ 307.483271][T11923] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:57 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 307.553344][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x80086301, &(0x7f0000000000)=0x5) [ 307.601742][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.665099][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x8) 06:26:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0045878, &(0x7f0000000000)=0x5) 06:26:57 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r3, 0xffffffffffffffff) r4 = getpgrp(0x0) sendmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r3}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r7, 0xffffffffffffffff) r8 = getpgrp(0x0) sendmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r7}}}], 0x20}, 0x0) setregid(r3, r7) 06:26:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x8138ae83, &(0x7f0000000000)=0x5) 06:26:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:57 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0045878, &(0x7f0000000000)=0x5) 06:26:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0045878, &(0x7f0000000000)=0x5) 06:26:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x12000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x402, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000140)={0x1, 0x2000, 0xffffffd6, 0x9, 0x3b00}) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x5) write$P9_RRENAMEAT(r3, &(0x7f0000000180)={0x7, 0x4b, 0x1}, 0x7) [ 308.061187][T11963] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 308.117191][T11963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) socket$nl_route(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 308.171333][T11963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.208291][T11963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:58 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400e0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 06:26:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0045878, &(0x7f0000000000)=0x5) 06:26:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000380200009000000090000000900000009000000090000000a0010000a0010000a0010000a0010000a001000003000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/48], @ANYBLOB="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"], 0x298) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) socket$nl_route(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0184900, &(0x7f0000000000)=0x5) [ 308.563935][T11995] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc004743e, &(0x7f0000000000)=0x5) 06:26:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) timerfd_create(0x4, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x0, 0x1ff, 0x8001, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x5, 0x5, 0x1000, r4}, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/178}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSETXF(r6, 0x5434, &(0x7f0000000380)={0x7, 0x0, [0x800, 0x8001, 0x5, 0x3, 0x4], 0x2}) r7 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x80100) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 308.635503][T11995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0189436, &(0x7f0000000000)=0x5) [ 308.705616][T11995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:26:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) socket$nl_route(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:58 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x800, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) [ 308.778328][T11995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc008ae05, &(0x7f0000000000)=0x5) 06:26:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)) 06:26:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc020660b, &(0x7f0000000000)=0x5) 06:26:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0184900, &(0x7f0000000000)=0x5) 06:26:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200), 0x11400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000000c0)={0x990000, 0x5, 0x5, [], &(0x7f0000000080)={0x990af6, 0x6, [], @ptr=0x1}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, r4}) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000180)=@rose) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x5) [ 309.208322][T12036] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:26:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc054561d, &(0x7f0000000000)=0x5) [ 309.263849][T12036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:59 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 309.311360][T12036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.341272][T12036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0189436, &(0x7f0000000000)=0x5) 06:26:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000080)={0x3, 0x2, 'client0\x00', 0xffffffff80000000, "d7b8243653464448", "22adba2b2e20da58e6a7d9d10d449319acfbf1bb01dd9dab3500b426d2ed4e35", 0xfffffffc, 0x7}) 06:26:59 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 06:26:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:26:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) 06:26:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc020660b, &(0x7f0000000000)=0x5) 06:26:59 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 309.660883][T12063] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 309.751000][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:26:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x8) [ 309.799482][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.818357][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:26:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0c0583b, &(0x7f0000000000)=0x5) 06:26:59 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:26:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x6, 0x7, 0x0, r0}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttynull\x00', 0x58164d3cb1a86d88, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000240)={0x0, 0x0}) process_vm_readv(r5, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) getpriority(0x1, r5) r6 = dup(r3) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x800, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) dup(r8) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$isdn_base(r6, &(0x7f00000000c0)={0x22, 0x10, 0x46, 0x1, 0x2}, 0x6) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f00000001c0)=0x7, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:26:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:00 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TCSBRK(r0, 0x5409, 0x0) [ 310.134228][T12096] ptrace attach of "/root/syz-executor.4"[9883] was attempted by "/root/syz-executor.4"[12096] 06:27:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x8) [ 310.182249][T12097] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:27:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 310.280593][T12097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.335555][T12097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.349185][T12097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a6676e252922cb18f6e2e2a0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff04005400"}, 0x80) getsockname$packet(r3, &(0x7f0000000100), &(0x7f00000002c0)=0x14) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14000240}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x15c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1e}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x712afe5b6707822c}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6a, 0x2}}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x800}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc02}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x62, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000001c0)={r9, 0x7f, 0x6, 0x8}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)) 06:27:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 310.418458][T12096] ptrace attach of "/root/syz-executor.4"[9883] was attempted by "/root/syz-executor.4"[12096] 06:27:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = semget$private(0x0, 0x8, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x7, 0x13, 0xf424, 0x162, "e29c173104d4d5136d30993cab336efc6010ebaacb0f8c36f567b72ab60fb1ca"}) semop(r2, &(0x7f0000000100), 0x2d) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000140)=""/72) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x9, 0x79da}, {0x400, 0xfffffffb}]}, 0x14, 0xd1a81f6befde163e) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f00000001c0)) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x5) 06:27:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000080)=0x3) prctl$PR_GET_THP_DISABLE(0x2a) socket$nl_crypto(0x10, 0x3, 0x15) 06:27:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000140)="f1982ee23668d013f39d8a25391898040100bf50c98dbef4", 0x18}, {&(0x7f0000000240)="9ee6cfbf5dd2096bbf84216f42137cebdf17e57c3246bb955978ea33e37fc60205fbe34f98b48a5bfbe89eb298c4b85f494f69f5834d8cbc4e05867114b3d77af16ba86b11deb500573a3a2c8c0b2ba77d41cb44016e0f24e890f8a09f170951ee53cf0ba5ee889672294e19abfa69a3d75f61cac56d43071c723e020751d7146a9cb064d1223f90807716d51751a55db08c0a09e1b71083e6c804c2003a81cc99994cea05597ed6e55d6d354835759a5b5d42ec057ba8f1ad7052ae", 0xbc}, {&(0x7f0000000300)="af99659beea77a0ccbbca9cc8761dcb430674c85c63ce1dcf56c063503ce7ca7595e2c7cff3b3564b0b1c59b62fa5dbd46427b3410b7da779f50e2223124d5693fa633cd93c496deb53c618a6d5839ec20d9b10bd6a3a86dd9da3cef3146eea3e0683b3e8505fe34ebcc47768d291df4e4eee08bddc2c400f269d279e772f604a2cefc2f6805244238cfc7cdb6798b9fbf4a2ba8264daaab08db06a5b4f3e15b7fee9d1dfcf5ab79d19a42f722ffd79b239fd4f7cd6e9ca9f5a323c6e4b8cfc49590891da95cc66403bf113b1c051491dff0d78dc6133b5b052bd7533e27e3ebbf6cd895dc30a68f", 0xe8}, {&(0x7f0000000400)="8ec4f910435e0b7044127a695b603bc56341b8b540874fd82ff280c3492f22fa8be8d039117167c8f6b1ec0430c2f5c309ee532633fe963f45568cd8e3a1e6730df40ecbe5004deb5c5afa9540d11099b11110cac8cfb64a7baf8adbc718eb7168186a682cb1791d3d6aeb226d9bf7984286ff7b43bbc7df9c5ffa62d6fbb5e23c6b0b98f027eab0464fbb699765339c67deeabad5cb4c5cf0a3cf5af2e229d1a28dda108029dce694336905e392025c85c10319483ea51aeb05f857156a8dfd76e8c870cc3a97d41a5042b041d2498475daa2c5d9a11f82238f81f8f8a5de42d55fa8712f0de5f97ea1f6e883b30845824fd0dd8e824b99439ea4c93bb2406604e04a538a6900371c964a3fcb77e0fc8f2ddc036131b1da7cea0102ffce8a89df0e3c215918e7b1a3f560c3cb65a160fd9339a84d7b0e182dc8d42b95b0390b99203ff883e38aa048270e9c5bca69ea350d2e90987f999ad562b3796b252f7dcefa478664232cf936812b33cd74893e1f7f795217c516150be5e5f8ee2945c420a362b3abaa084ca5d841d6574201eae50ae8b2f14f5466b081851f1a492bcfff613ca7001846816ca87e46f943c44b02c6624450265caa7a58c948bb1ff38cc9defbef3a21efb0f08eae6631f0a67c2fbcd66b513576d55a204e779c0d1ac0119ff796aac781aa60e55381eb617858294855ad14fd0a146184c53821527ad6fcfbdb6f9cd9aef3bf91494fd117b9e61bf7c1a5d279061e341242c31065bad71f8f0577270005a8a7eb86abf8a3f1516e97de00b7e9a1055a00bcc4c68b76dd7d03a7cb883e539cde41042f31c1878d4ac1042ab7f0bc1f7c78ce9dec60b9f7ae2f1e71eea3f0dead50cb0fd9a6eb92bf86b0880db4fb5cebb6447462ef6f1426f0b88ac47f8d0dc7f7ea15bae3ed4eb273c995b241ea4ea332b025773db60edff4d6cdb23f3ab0c0aa16c5f12be2dde0102c0476b762c231f784455ee5b42d646d2f8ff5ca439a14657b37e4b3b83513c8593eab01008b10eaf18561e6d2e3e83a54c7933be6bc251589e5ddd0aa819efc5acd61f623724e2f3f466415331ae50459d6d7f0e49e48cb8aa8ca23ae0097ff1523ad42f399f9b8e85fb95e152fcfe3688ee06a4d206e76c284965aea30b2c154de194683283829e47f51d7e5c7b116090d0e9de320a651e83f78cfd1f92c4de0364dd3d7963b820a3fe271278b6d94148e94b828d9b6c7b89915cd5d49258a337fa29f7e6cc8af52cbde6330caa0fca809a0f5669f514b7a10d9044f6da860990605d297bad69b237fc6f4ef876ff26c4d793de13375b1ce0cefe028ec1c0d846e4d4cda1013742381eb21a9b1d727969127a3b199435c2a51bae823d4acddc047540cdf4f80fa5d69612977d8d9757c04e9b44ea66451c048c863d0b8edd0ed4617e7a1963dab35a42f089faae3dba35be5a878901bcc753989296136e14749a9fd349a5ef6111445c7beb077de92ef4f459df2e328a81e194f5fda44eba64fb9c35640a741bded5f92b11afcd0aa58fea69af1e30e8cabd0e0c92f0f1006c41d0b19b245a46b890a91f3a5cdf508bc7c0ffcc7962784d2db569b5842832f3ae7079ad65cebf88ac9ffd0a57cd82a025a80a84826574f5b4a6fcfb59e627ffd60f342fac09f0d10409b50e1cc704f2b2144596e76fcdacb54404e823a48731d233e365c5dab434fbb6ca9d8d71b3a7f72123d2a8760de83fd28d6b3683787b0a44623009d5088d08d402afd49c4656884c6e219a6476a10184d4f782a4ba30b2e46d302f1d8157637867e72b0acc49da08651986140547027cf11e580ba10df1a12486aaa879f12d41e3d56c5a310d73e7340cfafc47249f8f97ff3c33f37d19b50462903cd192e80ff2242c27f406ee2f4a91365bccaa3cb2f3d32b9f82a77baf5c90d40124dd20fe514e4141469dd9b0df0b7fa102e14542e3ff33dcd0a2c6abe0296c14f10e38b3a6cca2726ecbd1b5155bb45d3ae7d2123e900573e2d091ca104d0804f3bceac21549766b56c8d0cfed662a112884d89106c490e1a508679f51befa9f9061aadc668daefce5c02b1dc6610132464dd6589c9f2fe614fba211290a9f337b2aa616159a15465e0905099acc352e9cb98aa919097a5aa5e6b6d565e9df0416aead60c3dd6e71db7f1856b270677a3a7216618ae6a8ebd3132ebec6062abd564d55c4878c2bca851a107bec3e2ae06b2f1cdbc421203a363572b4b52904faa22dcab227157cd39bc3cbb4f9fec8d558d62f6e4d0da30926c8785ca96405110f26fd2d3cfe716949c855d626e5a280d87875c38464ac55c5d12dacfa84ead0c2474db12dfb7d2d0bd5a7107b1e5be696e2933eb15b0b6cd75a6817291fcfc02c10e0fd23ee6d101962cafb692e7de0cfb0baf765164a76d79899825b01b060d9c92de7db6393e17d7cd9575bcb2172dcbe271491eab5e1e0943094cb2c3fb0caf2ddc352e46ca2864a93bc95ab7014392fd193116f704d362418492946d6260f90c33fa735d07f5d57fafc7c4d599cb0dbe2b248f771e5a3adb2fbbc885b2bbf3638e0ff08586c93ca3452817e8c28a5961fe32fce1fa4458f5e82bbe603336d73f32f7b98cd7680be81e0e65f9d7b9ba3a2afa9b9ba37045ea828f5191c5a3ccc5e874568187f5300c0dd762f781a581193ee4b950a22673b698a5cd18e2c81f5ba59a8e0bedd6339c851b9e581220551d6d5b06a3f70aa158abb831b5b2d897ee29552ed730f73b589b2a85f7b9c7a58c3e4c05f7defb79512179c4d2fa2cde0af0c35b6579104a159789dcaa2c3521f1c11e70f3074943418c970b7d012711571cdd1446d14adc24945f08f796aa89d151c6368684f732804a3f9adb073c113f1f6ec87cad70616f3f5af5357feaad831ca0438177587b4f74cbb66ece9fe5ba8493ff7e467b5decb796cbdcaa179958ed5701efe7d5835eb6d5d20b1f7534bbc257d35046dbd5a98e94ee1149fecf81d0c38e5e3635d4793e7dab553b41a4904767d182b95a61ca56aa95c9346dc532dd96dfe43eb8281cf96e390ecde57bdd61b6a775f9f3c87b745c887b1f94b9ed18e7ac92ae512d5fe8d8abee0234fc0040deb3d4dcb3465ca74aa4be0a403b8ed3fa305f6a9d7ec123316bd707ab36785f0d341b8c7a81d6b390d3ece082b33b43370d20c1d62224e43fd78ab651a9fd04a0d543c3c4a3b5493d7dcae76f514542318eca1347f15d96265b05f957b899a38fac07881b24e137dd2779e70248c1b670d36fe927f9f994ef76fb431c7d8c00d2da82984f2610c4317dcd9b99825604a33f5d9d4fbe66386a59c7e85a44758d1b9dcc174c7fbe28118dd34eb2734eecd94fd724a91d593b23025071430a037b442096540bb584400352442048ffcfb5d6dff0ddf33691861f30488528d15342ce1c65ae7b5c6d441057fb9826477a105d98a2b951e8b1a633bdbbb2f6d3ece4d17383faba394c6d4dd282a7bc6f26fbdb7a5644219ec9ecf9db6a62d6062302297bb7549baa8c988629ec7d89c4755c185ed64200311a7c81a8b5b5ffde59d5d143fbf6f573a83f8398eaaa0b6f16580a43cc4d651c4e6d7af230a37f5e7b9a7109bec14fa08c881c1d14cd9fe4f6e5a9878b03016c465afcb021a5c60d398411d54c80343c9082709aa231640d3eaa71c5e1cbdc90b2a8d0af7ef5adf09e3418e911a87a7353c64062f071722b963cc3a222c44acdc9fec3ec941060f292bdb555fc4785185cb33158823b1ec726a3bfc598efcf5a2a4ff67120e406038463b455256b3adfed2752fbda5f1e80beab44be033a32da1243171b7771cde20ad1e3aedf7e8efb7745954407b98178a4af7330a9b8cf3378c919a30dc44c4db78dcc5e33b0a6ecf47481c310d72709e3bae10eba6f7cb7a3fbd194f7d1f967252c038e57ca0b7ba67604fdc8496fedf6408163f24d24545b81eb719a1fa60caff50cdf208094c2c4981239fd70de0d3176cad0745b4010c3bef3f325bf0317430419c5140584d820d62ee990a35901507092329723a35821d05afb50f3da6211de80b489a56e92daf0259b96ee46f233d0c2e3fd5999d70a7a21465c482a0bcf25e8cb2a3de82b04a7253cd4975921a80390253f24417fad4c292d9c9eb9aac8f97d415ee715df1f5bcdc40dba665d0727a211f3752aa11858811ae435a4940eda4810d550baf00323d0ea6a2ae41ccee321bbd3889be8379a48e6b54ac485f4e8d00a85b56e53737c1b5dc456c41b038e6dbc3b27e6387313a4ca4838a97a4bb2d646bc36cceafcb452cd2d1e19737783c4a648a9b3bc22d933c0afbe1d5bd1c8b4055eac8770c1a8546e19578ecd088b6f6223421e5daebe747c9bd37602105af282250f05cca94ae7df70ae8479735c62f00714379e55a17fe49e9082b2d721b48e288c964c98a56844a55c62f1ba1c224d02eec2bd0055e3553e154cc18da4d980a54cf9265f26973613fb2c20f178ad74ce2caa2e86005746e29aa492a6b9d9dda57361d2021ee6cc5e00abf75539bf5e0d3b78c888f00a4bb9bbab05912010b3ba6de97d6759ba728b57603ad0d27c6bd5201d83efc61065fbca1c77d983391e0358a1f89b68f3ca21d412eb28b3ae68fa541098a369ed3c42ca59487eb7e393277607d45fc50f7f2a67b967258f70da81ee11de2d13d0ca3ffa0023455b31a324d7a42a02b71e3b7a3136c10a45f95ebe2ddfff39da4c613265a4465bd4e9a313ca2e12d130818454c3dc5abcf169adf2a2c7a9c87bdedfb16916a9a577ebbaba1390dd155a9e472e0d7d78f35985a6db4de0f2cd831702634c6912e6c7fb42cd96b08656128fe0c61d237e3858754ddce55dbde55319bdf5171370240a3dc1795205ca04b5e9e7ea3b9cf40338eb700048cc83a25d1937bf3862bcd6d5ee48047cce53b8ae8ba13900aedfd553030d0d5444f3f8899f17bab5622f60b99da7a8bd4b212b1402e4fc54ecc47b6aa8794245d84e44c5958f68da7fdae4a6f50d50103430f4702efbf7a927606f20c9d7085218202de1dff3b4cffbc7416ea0462a3bdf1402fdfe3af42317ce076616052cbfbfdcc54a9dd4863eb62aaadb507e142c81527c553810b7f680a7d4c89125cafa02a12676facabcfd3d280d933826e3be8cc45d1a480bfdcbdd8d2d691d34636dcfb2b7491a4e054c694f41a75ee45262bea29a22f2305af219719d55291f84ebf45f44ca8f2bb43d1f33d92ada9a5de2b20707cd328a6c799087cd87fa45d6b0f15a6c849a88776cee7316b8c714fd979464280ba1bf93222a1dd8f822f137c639cea99b04cab786c13b84afd4a85a067aa41990bfb313e7d653a80e2d6bd453ecd222825be57ea0e7927e54484eeca417db6c2b91f39014d2d514a3050349c9d8bc20ffbce7b6a3aeb9817fd48344f1cf7f79e8536b4a1509cc99bed9756647bfceda1262fa04109bf05241851a5eceb85b44b914bfa99829dfde58434ad225c425bc69917bda113eff5fb85bb89cd2cf626736f62532756562b77e6dba14f59cb9d82de58806fdee23e85f0d420b0898d16ad584947f3c0d74943a061c123262f77de6832496fe39744587f93ce9b3fdc58fc64ee4ee9097dc2542d7cc3c258b7a82e6ace4f4822335feb841b458668e07b40acbc896f4e5e2cd9b5ea262de8962e83f0d050bfc3410e4d43af087e84c8fe1387ccae8da04f993f9fdb08eb8c45ff7334db4ca2657fb5ee5d0a7bed91df1870c6946211b94ebcb6ac54996b927ba388662512cf3d0a8aa02eb097f17", 0x1000}, {&(0x7f0000000180)="aca0f6e76482840c848de1d889e5c80819ff0e21ad456a8637668233b269eae3ddf65e4ff0d5165bfabac85f361dfc20d9497d9a28720d86d465945a0755b895ea6489240271ae1f288f640bb4f2fc44472aabf42d3da6d158c598f6f4099fb7d668d9ab1dcbf68aff64", 0x6a}, {&(0x7f0000001400)="e45e1c08aa0ad33667b74fe4b91a489384de4db6f73b1a17a60e3dd6adc436ec55243c8a900be22bb9a56f5d68ba8bc8e9e895cbf1a9afd110519f1ceda52227184550cf58d114ff43268a2b80b10520802484da7067f8256dd2660ef3bedb7b47915970643007080edd246e945a9241c0cb2c2abdba2e5aad2482592aa658af3489752194e1b30f8faaa3927fc2e02b1e50c5da45f5735611a9a0cdf422cfb8e5c52c6e77577ca99f0633e02de8e8522dff58c8cc12f5f701ed78b3a23ad520848c6d3fc275ff3783536a", 0xcb}], 0x6, &(0x7f0000001580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}], 0x1, 0xc0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000000c0)) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x5, 0x1, 0x2, 0x0, 0x2, 0x1}, 0x20) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:00 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/4\xd7\xa4\xcdttyS3\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7ff, @remote, 0x6}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x5}], 0x48) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) [ 310.699877][T12126] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:27:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 310.800771][T12126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:27:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x1e, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x8}, 0x10) [ 310.866472][T12126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.898214][T12126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:00 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syncfs(r1) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:27:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:01 executing program 5: r0 = eventfd(0x2) sync_file_range(r0, 0x1, 0x7f, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) 06:27:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xc, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) io_setup(0x80000000, &(0x7f0000000080)=0x0) io_destroy(r2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:01 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 311.303504][T12167] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:27:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x6) connect$inet(r3, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r3, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000000240)={0xa0, 0xfffffffffffffffe, 0x1, {{0x5, 0x1, 0x3, 0x4, 0x9e, 0x8001, {0x3, 0x80, 0xfff, 0xff, 0x8001, 0x200000000000000, 0x401, 0x5, 0x8, 0x8, 0x0, r4, r5, 0x1, 0x3}}, {0x0, 0x2}}}, 0xa0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0xd309b0445b1b2f8) [ 311.350612][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:27:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7, 0x2, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x6, 0x2, 0x1, r1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000140)={0x87, &(0x7f0000000080)="706174898459ab768bdf45b09bfa6efffc7f6272dc3101f448bfbe8e6826d95050deaf89d711e9fffc54fbf6e77f33498a7ef7b19b6a2fe0165b8ff2a9f9a5d2fffc21b318a2ca8d51278ca828a1e0d7de316379b0434a6b1500bd8c424acff9c11d5b1ceb692e38a2d3946e13b11fcdfbf92e8f33aa183553209cbf65e8056f94d68ca2a7f68b"}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$rds(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000280)=""/176, 0xb0}], 0x3, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8efd, 0x4}, &(0x7f0000000380), &(0x7f00000003c0)=0x7fffffff, 0x8, 0x10000000, 0x8, 0x3f, 0x12, 0x8}}], 0x58, 0x42820}, 0xa8810) 06:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000080)={0x6000, 0x3, 0x4, 0xd0, 0x80}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) 06:27:01 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x400000, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) [ 311.490982][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.535858][T12167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x30, r2, 0x9000) 06:27:01 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x8, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x80, 0x800) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000140)) 06:27:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:01 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x21c000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x9, 0x1, 0x1017, 0x9, 0x5, 0x6, 0x7, 0x4}}) [ 311.914835][T12207] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:27:01 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xfff, 0x12}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0xfffffffffffffffc, 0xf214d57a2bb39370, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCGETX(r4, 0x5432, &(0x7f0000000080)) [ 312.000818][T12207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:27:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r2, 0x5, 0x8}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat(r4, &(0x7f0000000080)='./file0\x00', 0x202200, 0x2) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000140)=""/38) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f00000000c0)={{0xf1, @broadcast, 0x4e21, 0x0, 'lblcr\x00', 0x1, 0x5, 0x65}, {@local, 0x4e23, 0x2000, 0x0, 0x2, 0xffff}}, 0x44) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000280)=r11) 06:27:01 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x2, 0x1, 0x1, 0x8, 0x1, 0xc000}, 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) [ 312.088714][T12207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.130698][T12207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:02 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x3ff, 0x200001) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = semget(0x1, 0x1, 0x1) semctl$GETNCNT(r2, 0x3, 0xe, &(0x7f0000000080)=""/202) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x5) 06:27:02 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x960c0, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x28, &(0x7f0000000140)}, 0x10) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = dup(r2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x8101, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f0000000240)={0x0, 0x0, [0x4, 0xd736, 0x80000000, 0x1815]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 06:27:02 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 312.479952][T12237] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:27:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x505142, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) semget(0x0, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) dup(r13) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r15, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r15, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r15, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000680)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000008c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000900)=0xc) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$netlink(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r23}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r23, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r23, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r27}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r24, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r27, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r25, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r27, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) r29 = socket$netlink(0x10, 0x3, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r29, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800002e5301432e60b1807ee25628e2f3ddfe7f", @ANYRES32=r31, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r28, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r31, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r29, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r31, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000940)={0x458, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x84, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6b}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r16}, {0x130, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r19}, {0x278, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x2, 0x0, 0x4, 0x4}, {0x40, 0x7, 0x6, 0x97}, {0x6d, 0xb3, 0x4, 0x9394}, {0xd0, 0x0, 0x7f, 0xb9}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r23}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r27}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r31}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x4800}, 0x40004000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 06:27:02 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='\xe4\x00', 0x91d22, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) write$vnet(r2, &(0x7f00000011c0)={0x1, {&(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/197, 0x3, 0x3}}, 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) [ 312.588313][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 312.622564][ T27] kauditd_printk_skb: 4 callbacks suppressed 06:27:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x2c00, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000000c0)={0x217, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e22, @rand_addr=0x9}}}, 0x108) [ 312.622580][ T27] audit: type=1800 audit(1576736822.510:31): pid=12244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16908 res=0 [ 312.649930][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.650094][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:02 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) prctl$PR_CAPBSET_DROP(0x18, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xff9c) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x462de1a4eb233c53}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x2000002) 06:27:02 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x42100, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) 06:27:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x68, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:02 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) [ 313.004257][T12271] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 313.045017][T12271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.083761][T12271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:27:03 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:03 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10000, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x800}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000400)={0x3, 0x80a2fc99714666b4, [0x37, 0x1f, 0x3, 0x686, 0x101, 0x1, 0x7fff, 0x3]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r5, 0xe0f33dfc22cd36d7, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="84ce48363f51f671ce037a1609599b7f"}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}]}, 0x6c}}, 0x4004011) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x325041, 0x0) accept$alg(r9, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x5) [ 313.101541][T12271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:03 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x738, 0x4, 0xffff, 0xcf, 0x13, 0x2, 0x0, 0x0, 0xafb1, 0x6}) 06:27:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 313.463731][T12297] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 313.500509][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.510503][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.545262][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:03 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x101000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r5, 0x1ff}, 0x8) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:03 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev\x1attyS3\x00', 0x102200, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:27:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x101000) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x80, 0x1, 0x2, 0xc4c, 0x1, 0x3e, 0xff, 0xcc, 0x40, 0x385, 0x6, 0x1, 0x38, 0x2, 0x1, 0xffe0, 0x6}, [{0x4, 0x7, 0x81, 0x8, 0x8, 0x0, 0x1, 0x1ff}], "3c718ce279533be57985f705bcf7a71238b47cef11e3949d0f66c3d92b56c09f2f46ceab0ee9a39c689ce9383e596c2ebe22177892ad5a6989ec44bfee7154f0739299a3812a390d8c0e0966d896c4d8c655134b6aa2d159fdab4e0702383df276ae7469d83fb5e30d6395e91357165fef7057cc74097c60ebf9b61d8040f920566de798cf8c5fe3fa86e2b2935bab328b92ccf13224", [[], [], [], []]}, 0x50e) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x20000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x3) 06:27:03 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x200000000009, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x5) 06:27:03 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='\b\x00\x02\x01\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x4000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4002, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDDELIO(r3, 0x4b35, 0x200) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) 06:27:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000000c0)={'ip6erspan0\x00', {0x2, 0x4e24, @remote}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200240, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\xe4', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 313.819350][T12321] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:27:03 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 313.939590][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:27:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_acct\x00') connect$netlink(r1, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f00000002c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000c0080eb8600000075701000200002001c0002000500000000000800050062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792ac1f351b2483d67b19c323679afde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={&(0x7f0000000180), 0xc, &(0x7f0000000a40)={&(0x7f0000000300)=@newtfilter={0x720, 0x2c, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0xb}, {0xffff, 0x6}, {0x7, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x279}, @TCA_RATE={0x8, 0x5, {0x0, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x6d4, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xf105}, @TCA_FLOW_POLICE={0x408, 0xa, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x1, 0x101, 0x0, 0x90, 0x1ff, 0x4, 0x5, 0x1f, 0x7fff, 0xfffffffa, 0x770, 0x9, 0x1ff, 0x2, 0x4, 0xd8, 0x2, 0x800, 0xa412, 0x90, 0xfffffff7, 0x0, 0x1f, 0x9, 0x9, 0x2, 0x0, 0x401, 0x2, 0x1, 0x5, 0x5, 0xfffffe00, 0x3, 0x2, 0x400, 0x1000, 0x7, 0x5, 0xb4, 0xda56, 0x8, 0x5, 0xe7bc, 0xffffffff, 0x6, 0x5, 0x0, 0x401, 0x5, 0x4, 0xfffffeff, 0x8, 0x9, 0x62, 0x7, 0xfffffffd, 0x0, 0x2, 0x2400000, 0x2, 0x81, 0x9, 0xc293, 0x7e74de74, 0x3, 0x0, 0x8000, 0x5, 0x80000000, 0x3, 0x33, 0x7, 0x57d, 0x2, 0xfd, 0x2, 0x4, 0x5d59, 0x1, 0xa4, 0x9, 0x3fa, 0xcae4, 0x2, 0x4, 0x6, 0x10000, 0xb7, 0x9f68, 0x4, 0x80000000, 0x7, 0x594, 0x0, 0xfffff001, 0x9a, 0x7, 0x2, 0x5, 0x80, 0x0, 0x8, 0x0, 0x3, 0x2, 0xba, 0x6, 0xa01, 0x7, 0x80000000, 0x2, 0x200, 0x9, 0x8000, 0x20, 0x7, 0x2, 0x7b95a319, 0x1, 0x10000, 0x200, 0x3f, 0xffffffff, 0x7fff, 0x100, 0x952, 0x100, 0xfffffffa, 0x10001, 0x8ce, 0x7, 0x6, 0xfffffffb, 0xdbf5, 0x1000, 0x4, 0x8a3, 0x7fff, 0x5, 0x1ff, 0x620, 0x5, 0x4, 0x1000, 0x6, 0xffffffff, 0x0, 0x7, 0x800, 0xfffffdc9, 0x800, 0x9, 0x0, 0x200, 0x0, 0x99, 0xa0, 0x401, 0xdb6, 0xffff5ac2, 0x7fff, 0x0, 0x7, 0x2, 0x0, 0x6, 0x38f, 0x1, 0x81, 0x1, 0x1, 0x101, 0x3c, 0x3, 0x2, 0x20, 0x2, 0x7fff, 0x9, 0x7f07, 0x3, 0x4, 0xfffffffb, 0x3f75, 0xffff841c, 0x1, 0x10000, 0x6, 0x1f, 0x3f, 0x6, 0xc618, 0x1f, 0x0, 0x0, 0x2, 0x3, 0x8, 0x7fff, 0x800, 0x2, 0xfffffff8, 0x9b66, 0x9, 0x3, 0x2, 0x4, 0x9, 0x0, 0x2c461afb, 0x1, 0xfacd, 0x400, 0x2db, 0x261396bb, 0x80000000, 0x401, 0x5, 0x1f, 0xff, 0x1ff, 0xffffffff, 0x5, 0x3, 0x81, 0x8, 0x2, 0x0, 0x4, 0x100, 0x8, 0xffffff00, 0x3533, 0x3, 0x200, 0x2, 0x1, 0x6, 0x6, 0x4, 0x4, 0x6d1, 0xedea, 0xffffffff, 0x7fffffff, 0x1ff, 0x7, 0x1f, 0x3, 0x15d3, 0xee57, 0x10000, 0x2]}}, @TCA_FLOW_ACT={0x134, 0x9, @m_mirred={0x130, 0x19, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7ff, 0x7, 0x0, 0x9}, 0x3, r8}}}, {0xf8, 0x6, "1e7f30f595b8376b4f914d6b73083c4ef71eb4d3055c9f9633867f7ba2f3b77a47e89b9d648a4e044e5f7ddca2b6a842de631fe8c0023ddf10edaa2126b932974cec5505db0b22bd444747689ee8b5cfbd514a69538bd398054f96ecbe43bacceccb93877bb8f05445ef256baad2f14e78c6a564955a9c4bb047567d853a30d1a08aa4128ce41836d6afd4f82d33bdd341aa456df0604ede928ef1ea74471b13ad7a2f9c6aed5ec35f583fc7c5606e1a4d750390ca38609cdf1d41f9b45dd0f456a7e00b7a54cf2c692e6e5eed750b35daf40365acac45404f297181c3d216e7cf8f7de0b017d858232bae0479724f346de06f"}}}}, @TCA_FLOW_XOR={0x8, 0x7, 0x101}, @TCA_FLOW_ACT={0x130, 0x9, @m_mirred={0x12c, 0x18, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9d84, 0xffffffffffffffff, 0x5}, 0x2, r12}}}, {0xf4, 0x6, "707b065428714f225e8c8b7751f4044bd6d5d96c8380f246ac5b051a989d160163d7f66564e59933306bc80c7f133322d2802db08aa46fffef10e702663d2c472044546af80d24065589b9f1c76184ae7d308c9247192c43772c43866a5d969fecc9854d4e6823d344ed10783440349f1e1838bfedeab458953ef53f1e7a9f6768f6bfdaf2f491e3f7052f16e3b2a72709b3b5204f17efa2b528a7e0f027fb60be21f0c1cf3afb61dd4ab5a017a713f426829919b584dc234028562fe64d8e66a4e7caf4c36261613d533845363525abbeae7a0006f008dcf0f9c0c9186b58b93e20ce6ca2f4e445f69fd8e9f0227de2"}}}}, @TCA_FLOW_EMATCHES={0x44, 0xb, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff8}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_CONTAINER={0x14, 0x7, {0x9, 0x0, 0x8, 0x0, "11c5972b"}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x2, 0xa}}]}}]}, 0x720}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) [ 314.029786][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:27:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, r1}) r3 = getpgid(0xffffffffffffffff) ptrace$getsig(0x4202, r3, 0xffffffff, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f00000001c0)={0x5f, 0x1, 0x5, 0x200}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000280)={0x3, {{0x2, 0x4e24, @multicast1}}}, 0x88) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000140)={0x93f, 0x8}) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/adsp1\x00', 0x10040, 0x0) dup(r8) r9 = fcntl$dupfd(r8, 0x406, r1) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000180)=0x1) [ 314.072114][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = msgget$private(0x0, 0x8) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000180)=@bpq0='bpq0\x00', 0x10) msgrcv(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000fc00"/103], 0x6c, 0x3, 0x2000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000240)=""/157) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x28, &(0x7f0000000000), 0x20a154cc) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:27:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) fcntl$addseals(r1, 0x409, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r4, 0x0, 0xa, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, &(0x7f0000000140)=0x8) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x161400, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r7, 0x4) 06:27:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8180) r3 = gettid() fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x9, r3}) [ 314.424025][T12356] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 314.475224][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.501402][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.526908][T12356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x6, 0x4) 06:27:04 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x200000000000009, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5) r3 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r3, &(0x7f0000000140)={0x22, 0x0, 0x1f, 0xdd, 0xff}, 0x6) 06:27:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 06:27:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa8, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1d00, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)='vmnet1(%}\'\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000140)={0x522f, 0xbea, &(0x7f0000000240)="47a75238847f73036e56312e14cfe2015087e9ded9711c93e1189d0d5ca3956bbed70e567ce978766eec964b2797cc72061254560d87d35cd24ed5d7dc5d39e6ee7a79b172261f72b73e408be8c077b87576fc60e0626508ee329badf1899a566ce41094212e1231e957f6172780edbc295f98ef5efcec8abbb57ed793078d85b12846f82eefe6c9eceff9d8d9f4bb48c554ac87a47f48655b29dddc87cbdac48ae66558bc4e55bda5fd6bfed506dfa6d20a9721d8f38afa03cc284fe50b63471131c3bb8b1034a39f7b4adec2e65be296", &(0x7f0000000000)="0fc64f6e2a7ee5861cafde02c39cbb0542f1526c2d8177591acadf9207a031024b562a6cf707bc2efe743b0ae5df4e13b0f278", 0xd1, 0x33}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000340)='!\\]/\x00') [ 314.787196][T12381] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 314.803550][T12381] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 314.817141][T12381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.848556][T12381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 315.016094][T12392] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 315.030147][T12392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 315.063625][T12392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.097768][T12392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:05 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x80000000, 0x5, 0x40000006}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x0, 0xff, 0x1}, {0x4, 0x1, 0x1}, 0x0, 0xfd}], 0x20) r6 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0xfffffffffffffe00, 0x80000) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000400)={0xf, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000640)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='nat\x00', &(0x7f00000006c0)='./file0\x00', r9) ioctl$USBDEVFS_RESET(r5, 0x5514) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x101006, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x3f, 0xa8, 0x2, 0x7f, 0x0, 0x4533, 0x8000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x100000001, 0x8}, 0x0, 0x9, 0xffffff38, 0x6, 0x62, 0x401, 0x5d}, 0x0, 0x2, r10, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = dup(r11) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r12, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:05 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x8, 0x214002) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000140)=0x8001) r8 = syz_open_procfs(r6, &(0x7f00000000c0)='limits\x00') ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000100)={0xfffffffbffffffe0, 0x27, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000000)=0x5) 06:27:05 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x101242, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x20008444}, 0x2000c808) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x122) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000480)={0x0, @aes128}) ioctl$TCSBRK(r0, 0x5409, 0x0) mlockall(0x7) 06:27:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x40000) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000100)=0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000080)={0x0, 0x99e1, 0x2002}) 06:27:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:05 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, 0x0, 0x0) [ 315.309376][T12407] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 06:27:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x400020, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x49080, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0)=0x1, 0x4) [ 315.370102][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 315.414214][T12417] ptrace attach of "/root/syz-executor.3"[10566] was attempted by "/root/syz-executor.3"[12417] [ 315.445596][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.470979][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:05 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, 0x0, 0x0) 06:27:05 executing program 5: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x2, 0x58, 0x7, 0x8}}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa1, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x5) 06:27:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r3, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r3, 0x0, 0xa, 0x0, 0x0) dup(r3) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x21, 0x2, 0x5, "011abccfd2567d58f9caac3d51ff2163", "3b8fbb2f1988da7c8557c6b2"}, 0x21, 0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000100)) 06:27:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$kcm(0x29, 0x6, 0x0) setsockopt(r9, 0x7, 0x3ff, &(0x7f00000002c0)="fa8a0cfedb5682ac5dfb3cecc03765193bd71d37bb8ccf05224e34686fb29d37747e75339a3087c3dba067d0ba826b8c75f04f7c0cb715032bad389dbefe190b35ea253b591c611c11930e3b63a96904236b", 0x52) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665026800004e5f5de79c000018000200fd0001000000000023c0306554362dddcc17f8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6c9e3833275e370d1515d2e1f", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x400, 0x0) fcntl$getflags(r10, 0x408) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x3, 0x0, r8}}, 0x20}}, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000240), &(0x7f00000003c0)=0x4) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000680)={0x1, {{0x2, 0x4e24, @rand_addr=0x1f}}, 0x1, 0x6, [{{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x390) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) 06:27:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x0) [ 315.834412][T12436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:27:05 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, 0x0, 0x0) 06:27:05 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 315.918735][T12436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:27:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) dup3(r1, r2, 0x80000) [ 315.965556][T12436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.023010][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 06:27:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:06 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 06:27:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x9, 0x40000) 06:27:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x24) 06:27:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(0x0, r3, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4a0}, r3, 0x5, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r5, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) setpgid(r3, r5) [ 316.301525][T12468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.366004][T12468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:27:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) fstat(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='bpf\x00', 0x1000000, &(0x7f00000064c0)={[{@mode={'mode', 0x3d, 0x20}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x4b}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x800}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_lt={'fowner<', r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'lokeyring['}}, {@fsname={'fsname', 0x3d, 'cgroup.subtree_control\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}, {@uid_gt={'uid>', r4}}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x400, 0x6, &(0x7f0000000540)=[{&(0x7f0000000100)="be11581dfd12a55bde41f8be0a5bfa58a6815c21a41286a92d6c32a99ce184ac02114526154bb13b8fac437a5e4a3b27fa68e9e055a9c04ae16b887d378359f163b3421aaa617d1775116f354211c03eb7b7e57fb6e75a1bd45b98b096add253aa18d90ef910295b689b392c995ab93d5d3cd54f1893151c91ebcfe6f6b3ef441950103e217b1e71f1ff1187d2e9f48acdf6eac91869c546a3ea37", 0x9b, 0x9}, {&(0x7f00000001c0)="493a1a9a87f064466a2c78c71b", 0xd, 0x81}, {&(0x7f0000000240)="1b70ed1f70e337dfe4f732a67ce34241f301366892a2e4b912c9c584f8b5d5e2451e15e5ba89131a5af92e8ade36de34ddf9a4368c68a0c2255b4de66223d4feeb3fd02066de53845ca0ed46552c8d4fe8e62910caead6135bd099810378c6471298629c30b6e568972a2c9e0e99bea1bae01e4864e2cd82fec8c15c25d5681012b179a0e17db6a6e7f3e6b4f84c41b9af28d4d9bb733196a301e56f8c5e044b4cf4491ca0a413d6af4c0dddb58b3f28d554017c776dd9eb", 0xb8, 0x3}, {&(0x7f0000000300)="9ab0de8b2a7d139e5d9fde66c1893181d74255bd49fe3bb995678817f1e930e9b3f1b963d99c016c531f7a652d2b925718d28feb4b55b1a2dcd74b70a5216faacf9b62fdd4a5ef2f6f15d2500ec2bb8b98f0ab1dfa3b1e31155b2b0018834ca8f3cf9fc699bdeaa4c5e7531f", 0x6c, 0x301}, {&(0x7f0000000380)="ce30f16486b2b34237016aecb39b0d3d9759594fcb93991762e0b9173a9f2e0802c94bd0fd9228d1e9949ea14376f6e01424ebe8c9a25585d841a9ca450d790e18e16fa609ca8c7b9bfcc83bd6354f613837b9631411d3eb5e024c1c9912b356229426b9beea080ca3f89ce843e0a3c6040fefa7fb1fe38232b9e28d45b253789bfdba570c6db2f03c356d9507fe9e5dfc19dcfd8179c13e74d4fb46f358ea74b93b99c689bebc6b4a7b6242cbd3f4cd572d1d49a9a3c25267475ec561eea6eb5d40230a05fa1b1485ae2c746b3f81f927054df4b15a6ab54bca126ad58f962f5e2c8cabea2268a2d8d71d84c09113", 0xef, 0x200}, {&(0x7f0000000480)="a1be9af3e0269982b17572bbd21c37582aa5d6dcf26a91e72dcc82ffadc0cc4dc92865b057df14d559c76a1395f31f4e3b1afb2a04590f1140e1ad4302a30f0b142b87a0d8ab0898c4cd37b4ad4e9a0a5bba86c7e02bc80222333c68d493a8c259d0dac1df0cc2b701fb5c15b0fb74f6c05cee8cecba7892aaa7f1c7a70440359af3e0821253ab8d9c176bc0407c225b4879cc", 0x93, 0x250}], 0x1000, &(0x7f0000000740)={[{@grpquota={'grpquota'}}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@four_active_logs='active_logs=4'}, {@test_dummy_encryption='test_dummy_encryption'}, {@inline_dentry='inline_dentry'}, {@background_gc_sync='background_gc=sync'}, {@inline_xattr='inline_xattr'}, {@grpjquota={'grpjquota', 0x3d, '/dev/ion\x00'}}, {@noacl='noacl'}, {@two_active_logs='active_logs=2'}], [{@uid_lt={'uid<', r4}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) [ 316.406798][T12468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:06 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x388) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x8ef, 0x1, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) [ 316.484927][T12480] ptrace attach of "/root/syz-executor.3"[10566] was attempted by "/root/syz-executor.3"[12480] 06:27:06 executing program 1: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/txyS:\x00', 0x100000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2000000000001002, 0x200000) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x1, 0x0, 0x3, {0xa, 0x4e23, 0x3f, @mcast2, 0x5}}}, 0x80) 06:27:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 316.542746][T12483] ptrace attach of "/root/syz-executor.3"[10566] was attempted by "/root/syz-executor.3"[12483] 06:27:06 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 06:27:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080)=0xf22, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x20, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x5) 06:27:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x1, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x101000) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) fstat(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='bpf\x00', 0x1000000, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000000040,mode=00000000000000000000010,mode=00000000000000000000002,mode=00000000000000000000006,mode=00000000000000000000113,mode=00000000000000000000004,mode=00000000000000000004000,mask=^MAY_EXEC,fowner<', @ANYRESDEC=r6, @ANYBLOB=',smackfsdef=lokeyring[,fsname=cgroup.subtree_control\x00,defcontext=system_u,seclabel,dont_appraise,seclabel,uid>', @ANYRESDEC=r7, @ANYBLOB="2c005a62498cbe33684134bd97ad76db04031145b221aecc55c6f9ecd5cf68b12e357af019f5e09eb95e27f7a0b96d817a46a76dafc2f8d85e6899df1027ca9e5c85f1d2f1d5d97545026963419d3d800b14cc4acaff72d521861b3c8380febf5b08a930d97a51242ec117ec9608b367363f52b5787e8a7dd1b0e83e9521d5f42e37c29fc265e16b531e4b0667314f340bcf5f40971d9fd3f39af1ab32811aae42b96eb6b5d858961cb44f0e05110113a728208efe990345c74f16918a4b68213b941d44b8017267020b"]) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in6=@rand_addr="e4241913baff0fb0a23f3379ee6021e9", 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x0, 0xff, 0x0, r7}, {0x9, 0x3fffffff8000000, 0x2, 0x1ff, 0x6, 0x8743, 0x10001, 0xffffffff}, {0x55e, 0xfffffffffffffffd, 0x80000001, 0x7}, 0x800, 0x6e6bbe, 0x3, 0x0, 0x1}, {{@in=@broadcast, 0x4d3, 0xff}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x2, 0x1e25, 0x4, 0x6}}, 0xe8) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) r3 = dup2(0xffffffffffffffff, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r6, 0x0, 0xa, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) ioctl$SNDRV_PCM_IOCTL_DROP(r5, 0x4143, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000080)) [ 316.800093][T12496] validate_nla: 2 callbacks suppressed [ 316.800105][T12496] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 316.847685][T12496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.881227][T12496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.895830][T12496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:06 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x6200, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:27:06 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 06:27:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x5, 0x7}]}, 0xc, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ff8000/0x4000)=nil) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5) 06:27:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x6b) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000080)=""/152) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xfff, 0x10000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x7530}, 0xe) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x9, 0x2, 0x0, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fcntl$dupfd(r5, 0x406, r7) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x5) [ 317.204091][T12524] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 317.248553][T12524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.273122][T12524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.288612][T12524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:27:07 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCCONS(r5, 0x541d) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r1, &(0x7f0000000240)={@void, @val={0x2, 0x3, 0xfffc, 0x8001, 0x2, 0x57c6}, @mpls={[{0x8, 0x0, 0x1}, {0x8}, {0x2}, {0xff}, {0xfff7f}, {0x0, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x7f, 0x0, 0x1}], @ipv4={{0x26, 0x4, 0x2, 0x1a, 0x10c8, 0x64, 0x3, 0xe1, 0x16, 0x0, @remote, @empty, {[@ssrr={0x89, 0x1f, 0xe1, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @ssrr={0x89, 0xf, 0x98, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @cipso={0x86, 0x1b, 0x6, [{0x7, 0xe, "23e9cbf9ffa13da44187b71e"}, {0x1, 0x7, "b3b1c6fa26"}]}, @ra={0x94, 0x6, 0x9}, @generic={0x1, 0xb, "2d5b1250ef08e77230"}, @timestamp={0x44, 0x10, 0x4, 0x0, 0x9, [{[@dev={0xac, 0x14, 0x14, 0x1d}], 0x8}, {[], 0x4}]}, @cipso={0x86, 0x8, 0x4, [{0xe, 0x2}]}, @ssrr={0x89, 0xf, 0x1, [@multicast2, @remote, @broadcast]}]}}, @udp={0x4e21, 0x4e20, 0x1030, 0x0, [@guehdr={0x2, 0x1, 0x0, 0x81, 0x100, [0x80]}, @guehdr={0x2, 0x0, 0x1, 0x0, 0x100, [0x0]}, @guehdr={0x1, 0x1, 0x3, 0x8}, @guehdr={0x2, 0x0, 0x3, 0x8, 0x0, [0x80]}, @guehdr={0x1, 0x1, 0x2, 0x7, 0x180}, @guehdr={0x2, 0x1, 0x3, 0x31, 0x80, [0x0]}], "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"}}}}, 0x10f2) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000080)=0x653) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000080)={0x39d3, 0x2, 0x0, r1}) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x181400, 0x0) write$P9_RCLUNK(r9, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) fsetxattr$trusted_overlay_opaque(r9, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) 06:27:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000080)=""/145) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x1, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x5) 06:27:07 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000a, &(0x7f00001c9fff)="03", 0x3bc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 06:27:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 06:27:07 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x3000000000004) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000004c0)={0x5, 0x2522, 0x40, 0x40, 0x11, 0x0, 0x9, 0x7, 0x7fff, 0x1, 0x885, 0x101}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000480)={0x0, 0x0, 0xfff, 0x0, 0x67, &(0x7f0000000080)="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"}) 06:27:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0xa, 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000180)=""/123) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0xd1) connect$inet(r3, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreqn(r3, 0x0, 0xa, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000240)="daff258155c7ea76872e9e37498b55daea5a279e3553fb04840c4c1f66c9f4c3b4cf66b2bd2013fae877cce4fbe5f0ee6333e65637a347479cf041499e608a3f26d3eea5a9c368ed0f2167409ab0a59f79fef80b5dc50d6283a5a4c6ab67e982884c98d41e49e65bbe3af4b94bf38376cbbf90001e7632c3d95f07ee18798a8a936524433142e0f985d64d6b05f324fc7e2c8ac79a522944b7bd83977fc6cb3cf60adfc51e86c5f1f6fba848e97d3a00a8e2f04879aebce4191049ff90acdd1df2be94ec36fe3f18a5fd3bc2112e236d464b87be42a2228a6f4aebe69d9d1b50ff7cd858a3893336c86aa08e360c4aa3f1244c747df6", 0xf6}], 0x1, 0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)) [ 317.565630][ T3670] BUG: unable to handle page fault for address: fffff52002e00000 [ 317.573412][ T3670] #PF: supervisor read access in kernel mode [ 317.579425][ T3670] #PF: error_code(0x0000) - not-present page [ 317.585496][ T3670] PGD 21ffee067 P4D 21ffee067 PUD aa51c067 PMD 8ec1b067 PTE 0 [ 317.592981][ T3670] Oops: 0000 [#1] PREEMPT SMP KASAN [ 317.598188][ T3670] CPU: 0 PID: 3670 Comm: ion_system_heap Not tainted 5.5.0-rc2-syzkaller #0 [ 317.606871][ T3670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.613776][T12549] QAT: Invalid ioctl [ 317.616947][ T3670] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 317.616971][ T3670] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 317.646356][ T3670] RSP: 0018:ffffc9000d017ab8 EFLAGS: 00010216 [ 317.652438][ T3670] RAX: fffff52002e00000 RBX: fffff52002e00200 RCX: ffffffff85de6999 [ 317.660591][ T3670] RDX: 0000000000000001 RSI: 0000000000001000 RDI: ffffc90017000000 [ 317.668595][ T3670] RBP: ffffc9000d017ad0 R08: fffff52002e00200 R09: 0000000000000200 [ 317.676584][ T3670] R10: fffff52002e001ff R11: ffffc90017000fff R12: fffff52002e00000 [ 317.683898][T12556] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 317.684575][ T3670] R13: 0000000000001000 R14: 0000000000000000 R15: ffffc9000d017d08 [ 317.700714][ T3670] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 317.709658][ T3670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.716258][ T3670] CR2: fffff52002e00000 CR3: 00000000a4ae6000 CR4: 00000000001406f0 [ 317.724254][ T3670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.728031][T12556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.732245][ T3670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.732251][ T3670] Call Trace: [ 317.732275][ T3670] memset+0x24/0x40 [ 317.732339][ T3670] ion_heap_clear_pages+0x49/0x70 [ 317.732358][ T3670] ion_heap_sglist_zero+0x245/0x270 [ 317.755972][T12556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.759842][ T3670] ? ion_heap_deferred_free+0x630/0x630 [ 317.759857][ T3670] ? mark_lock+0xc2/0x1220 [ 317.759873][ T3670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.759887][ T3670] ? __kasan_check_read+0x11/0x20 [ 317.759905][ T3670] ? mark_lock+0xc2/0x1220 [ 317.766358][T12556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.772389][ T3670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.772404][ T3670] ? debug_smp_processor_id+0x33/0x18a [ 317.772416][ T3670] ? perf_trace_lock+0xeb/0x4c0 [ 317.772429][ T3670] ? __kasan_check_read+0x11/0x20 [ 317.772452][ T3670] ? __lockdep_free_key_range+0x120/0x120 [ 317.832804][ T3670] ? find_held_lock+0x35/0x130 [ 317.837612][ T3670] ? ion_heap_deferred_free+0x295/0x630 [ 317.843186][ T3670] ? pgprot_writecombine+0x5e/0xf0 [ 317.848368][ T3670] ? pagerange_is_ram_callback+0x130/0x130 [ 317.854481][ T3670] ? ion_heap_deferred_free+0x295/0x630 [ 317.860056][ T3670] ion_heap_buffer_zero+0xf5/0x150 [ 317.865576][ T3670] ion_system_heap_free+0x1eb/0x250 [ 317.870772][ T3670] ion_buffer_destroy+0x159/0x2d0 [ 317.875891][ T3670] ion_heap_deferred_free+0x29d/0x630 [ 317.881260][ T3670] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 317.886614][ T3670] ? trace_hardirqs_on+0x67/0x240 [ 317.891625][ T3670] ? finish_wait+0x260/0x260 [ 317.896574][ T3670] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 317.902922][ T3670] ? __kthread_parkme+0x108/0x1c0 [ 317.907934][ T3670] ? __kasan_check_read+0x11/0x20 [ 317.912937][ T3670] kthread+0x361/0x430 [ 317.916997][ T3670] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 317.922347][ T3670] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 317.928061][ T3670] ret_from_fork+0x24/0x30 [ 317.932465][ T3670] Modules linked in: [ 317.936341][ T3670] CR2: fffff52002e00000 [ 317.940482][ T3670] ---[ end trace 9c20c21358182892 ]--- [ 317.945927][ T3670] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 317.951718][ T3670] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 317.971302][ T3670] RSP: 0018:ffffc9000d017ab8 EFLAGS: 00010216 [ 317.977364][ T3670] RAX: fffff52002e00000 RBX: fffff52002e00200 RCX: ffffffff85de6999 [ 317.985315][ T3670] RDX: 0000000000000001 RSI: 0000000000001000 RDI: ffffc90017000000 [ 317.996157][ T3670] RBP: ffffc9000d017ad0 R08: fffff52002e00200 R09: 0000000000000200 [ 318.004211][ T3670] R10: fffff52002e001ff R11: ffffc90017000fff R12: fffff52002e00000 [ 318.012173][ T3670] R13: 0000000000001000 R14: 0000000000000000 R15: ffffc9000d017d08 [ 318.020131][ T3670] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 318.029042][ T3670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.035649][ T3670] CR2: fffff52002e00000 CR3: 00000000a4ae6000 CR4: 00000000001406f0 [ 318.043807][ T3670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.051897][ T3670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.059867][ T3670] Kernel panic - not syncing: Fatal exception [ 318.067168][ T3670] Kernel Offset: disabled [ 318.071502][ T3670] Rebooting in 86400 seconds..