0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]})

06:58:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x400000000000000}, 0x0)

06:58:27 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x59b, 0x1f}]}, 0xc, 0x3)
preadv(r0, &(0x7f0000000700), 0x13b, 0x0)

06:58:27 executing program 5:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000140)=""/148, 0x94}], 0xfffffffffffff6e, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r1, &(0x7f0000000700), 0x13b, 0x0)

06:58:28 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x500000000000000}, 0x0)

06:58:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

06:58:28 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
fdatasync(r0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/186, 0xba}], 0x1, 0x0)
preadv(r0, &(0x7f0000000700), 0x13b, 0x0)

[ 1278.205559] usb usb3: usbfs: process 24208 (syz-executor.3) did not claim interface 0 before use
[ 1278.266287] vhci_hcd: default hub control req: 010b v0000 i0000 l0
06:58:28 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x600000000000000}, 0x0)

06:58:28 executing program 5:
r0 = dup(0xffffffffffffff9c)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000001380), 0x57, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x8200, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, <r5=>0x0})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x81, &(0x7f0000000180)=""/139)
preadv(r3, &(0x7f0000000700), 0x13b, 0x0)

06:58:28 executing program 0:
r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x40000)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={<r1=>0x0, 0x10001}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0)=r1, 0x4)
inotify_init1(0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000540)={0x39, 0x6, 0x0, {0x5, 0x5, 0x10, 0x0, 'vboxnet1ppp0lo*#'}}, 0x39)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
sendto$isdn(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000003000000941795edbf4a3850cc6a055bfbfbefdce4a7762fcd69981e8ffeaa90c3a5d47c7be2c2fdb85b503f914c4558b5cb09080048c0386d9cdb2ccb30450bb5da15cc96583426aed971e335394d6e3ad589bfb79c0dd2404ec2c6ba2a0483aba9d6f2004aff9c5bf7ac7e6fbbfc278a905c2855c131321b394637bc6f"], 0x82, 0x20000001, &(0x7f0000000040)={0x22, 0xfffffffffffffff8, 0x81, 0xffffffffffffff7f, 0x7}, 0x6)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000500)={0xfffffffffffffffe, 0x40, 0x9, 0x81, 0x3, 0x1})
ioctl$VT_RELDISP(r3, 0x5605)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r6=>0x0})
r7 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="24000000060607031dff1d956fff07000000000000000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, <r8=>0x0}, &(0x7f0000000640)=0xc)
stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = getegid()
lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fstat(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
getgroups(0x4, &(0x7f0000000940)=[0x0, 0xee00, 0xee01, <r14=>0x0])
r15 = getgid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x1}, [{0x2, 0x1, r8}], {0x4, 0x2}, [{0x8, 0x3, r9}, {0x8, 0x2, r10}, {0x8, 0x382726b8c8e68421, r11}, {0x8, 0x2, r12}, {0x8, 0x7, r13}, {0x8, 0x2, r14}, {0x8, 0x4, r15}], {0x10, 0x2000000000002}, {0x20, 0x6}}, 0x64, 0x1)
write$P9_RATTACH(r2, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x4}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getpeername(r0, &(0x7f0000000400)=@nfc_llcp, &(0x7f00000004c0)=0x80)

06:58:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]})

06:58:28 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10)
preadv(r0, &(0x7f0000000700), 0x13b, 0x0)

06:58:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x700000000000000}, 0x0)

06:58:28 executing program 5:
r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x70, 0x6, 0xa8b7, 0x200, 0x7, 0x0, 0x401, 0x4010, 0x0, 0xf98, 0x800, 0x3, 0x7, 0x7, 0xfada, 0xffffffffffffff81, 0x6, 0x4, 0x9, 0x1, 0x837, 0x0, 0x456000, 0x63a3, 0x0, 0x8, 0x7, 0x80, 0x1230, 0x1, 0x1, 0x9, 0x5, 0x8, 0x6, 0x8, 0x400, 0x0, 0x81, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0xfe85c65, 0x9c0, 0x1, 0x2, 0x1, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x4)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x10}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc\x00')
preadv(r1, &(0x7f0000000700), 0x13b, 0x0)

[ 1278.693320] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
06:58:29 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

06:58:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x800000000000000}, 0x0)

06:58:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

06:58:29 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1f, 0x10080)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000140)={0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r1, &(0x7f0000000700), 0x13b, 0x0)

[ 1279.306353] usb usb3: usbfs: process 24265 (syz-executor.3) did not claim interface 0 before use
[ 1279.332635] vhci_hcd: default hub control req: 010b v0000 i0000 l0
06:58:29 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xa00000000000000}, 0x0)

06:58:29 executing program 5:
uname(&(0x7f00000002c0)=""/139)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f00000000c0), 0x0, 0x0)

[ 1279.471885] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
06:58:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]})

06:58:29 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
getpgrp(0xffffffffffffffff)
getpgid(0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
socketpair(0x4, 0x2, 0x5b39, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvfrom$inet(r1, &(0x7f00000002c0)=""/229, 0xe5, 0x10000, &(0x7f00000003c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000180)=""/242, &(0x7f0000000280)=0xf2)
r2 = syz_open_procfs(r0, &(0x7f00000000c0)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000700), 0x13b, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x40000, 0x0)

06:58:29 executing program 0:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8002, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xf00000000000000}, 0x0)

06:58:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x1000000000000000}, 0x0)

06:58:30 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

06:58:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

06:58:30 executing program 5:
r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x10b041)
clock_gettime(0x5, &(0x7f0000000740)={<r1=>0x0, <r2=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x5, 0x9, 0x2, '\x00', 0xffff}, 0x1, [0x80000001, 0x7, 0x81, 0xf0, 0x6, 0x2, 0x5, 0x1, 0x1, 0xfffffffffffffffd, 0x3ff, 0x4, 0x1, 0x0, 0x0, 0x100000001, 0x7, 0x762, 0x800, 0xd690, 0x100000001, 0x1, 0xa015, 0x7, 0x64, 0x7fff, 0x80, 0x7, 0x3ff, 0x6, 0x3, 0x5, 0x6, 0x8, 0x100000001, 0xffffffff, 0x7, 0x9, 0x5, 0x9, 0x2, 0x8, 0x66, 0xfc95, 0xd1, 0x2b, 0x9, 0x20000000000, 0x2, 0xcc0, 0x4, 0x1, 0xffffffff, 0xf33f, 0xa29, 0x0, 0x3f, 0x9, 0xffffffff80000001, 0x6, 0x7, 0xdec0, 0x81, 0x5, 0x88, 0x9, 0x2, 0x3, 0x9, 0x7, 0x6, 0x7, 0x8f30000000000, 0x9, 0x800, 0xffffffffffff7fff, 0x2, 0x5, 0x8000, 0x7, 0x8, 0x9e, 0x9, 0x0, 0x1, 0xe5f2, 0x3, 0x7, 0xffffffffffffffb4, 0x6d8, 0xfd, 0x10001, 0x0, 0xfffffffffffff3b5, 0x7, 0xd2, 0x10001, 0x6, 0xfbf, 0x1, 0x9, 0x10000, 0x1, 0x3, 0x3ff, 0xfff, 0x4, 0x7fff, 0x3cf, 0x9, 0x4, 0x8, 0x4, 0x1f, 0x7, 0xe38, 0x7f, 0x7ff, 0x9, 0x8, 0x9, 0x13ad, 0x6, 0xfffffffffffffff8, 0x2, 0x40, 0x3f, 0x180000000], {r1, r2+10000000}})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={<r3=>0x0, r0, 0x0, 0x10, &(0x7f0000000680)='net/ip_mr_cache\x00', 0xffffffffffffffff}, 0x30)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000700)='fdinfo\x00')
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x3000)=nil)
preadv(r5, &(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f00000007c0)=""/169)
ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000780)={0x4, &(0x7f0000000140)=[{}, {}, {}, {}]})

06:58:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x2000000000000000}, 0x0)

[ 1280.099353] net_ratelimit: 26 callbacks suppressed
[ 1280.099359] protocol 88fb is buggy, dev hsr_slave_0
[ 1280.109471] protocol 88fb is buggy, dev hsr_slave_1
[ 1280.180424] usb usb3: usbfs: process 24329 (syz-executor.3) did not claim interface 0 before use
[ 1280.214892] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1280.259380] protocol 88fb is buggy, dev hsr_slave_0
[ 1280.264592] protocol 88fb is buggy, dev hsr_slave_1
[ 1280.269780] protocol 88fb is buggy, dev hsr_slave_0
[ 1280.274851] protocol 88fb is buggy, dev hsr_slave_1
[ 1280.280037] protocol 88fb is buggy, dev hsr_slave_0
[ 1280.285099] protocol 88fb is buggy, dev hsr_slave_1
06:58:30 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x2800000000000000}, 0x0)

06:58:30 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

06:58:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x3f00000000000000}, 0x0)

06:58:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
inotify_init1(0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r6=>0x0})
write$P9_RATTACH(r2, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000280)={0x3, 0x7, 0x100000001, 0x20, 'syz1\x00'})
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000001c0)=0x1e)

06:58:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]})

06:58:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x4000000000000000}, 0x0)

[ 1280.819392] protocol 88fb is buggy, dev hsr_slave_0
[ 1280.824511] protocol 88fb is buggy, dev hsr_slave_1
06:58:31 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

06:58:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x4800000000000000}, 0x0)

06:58:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

[ 1281.091103] usb usb3: usbfs: process 24386 (syz-executor.3) did not claim interface 0 before use
[ 1281.135605] vhci_hcd: default hub control req: 010b v0000 i0000 l0
06:58:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x4c00000000000000}, 0x0)

06:58:31 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x0)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:31 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8000, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x420080, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r5=>0x0)
r6 = getuid()
ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x1, 0xbc3000000000000, r5, 0x0, r6, 0x0, 0x9, 0x3ff})
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x6000000000000000}, 0x0)

06:58:31 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1281.673185] IPVS: ftp: loaded support on port[0] = 21
06:58:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x6800000000000000}, 0x0)

[ 1281.693976] IPVS: ftp: loaded support on port[0] = 21
06:58:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x88000)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r4, 0x1}}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x6c00000000000000}, 0x0)

06:58:32 executing program 0:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000002c0)="ce6d091c96466676f0cdfbcab13d29936668eb4c26a8e57097c3ac6a3789443f397ed8e358e05d74b779814206631ce5f728c0333be02ede860f114583db1eb6cde24e29fc931ca7592eb639", 0xffffff52)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={<r4=>0x0, 0x4, 0x30}, &(0x7f00000001c0)=0xc)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r4, 0xff}, 0x8)
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x6, 0x4)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:32 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:32 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1282.074575] usb usb3: usbfs: process 24436 (syz-executor.3) did not claim interface 0 before use
06:58:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x7400000000000000}, 0x0)

[ 1282.142526] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1282.178945] IPVS: ftp: loaded support on port[0] = 21
06:58:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2c8100)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x2, @local}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0x100000001, @mcast2, 0x5fd6}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x7}], 0x90)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x90, 0x2]})
socket$xdp(0x2c, 0x3, 0x0)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)={0x4, [0x80000001, 0x100, 0x8, 0x9]})

06:58:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x802, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
inotify_init1(0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r6=>0x0})
write$P9_RATTACH(r2, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000280)={0x3, 0x7, 0x100000001, 0x20, 'syz1\x00'})
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000001c0)=0x1e)

06:58:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x7a00000000000000}, 0x0)

06:58:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000400))
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="5d44f0bce0b04f39a19f874af1a3b4a946741438e213a40feab3106ddfcb8bb13357fd0db85042b70e8a6c0a480565765beceb26cfe741ea", 0x38}, {&(0x7f0000000180)="793ce081c4678c89b03685d4c5bcabe4986343ca9042c101c17f67620d64493fe00aaaad20bb7439914223b112bad0530577e351dec6b025923aec201a39561768a3666d3b23e064023e40fe98ecb63a47c3b0e3879f5b7fb145a80f11e67f6ad9ab5fb920086140bb1b8097b976889c8b32e3f9432570a939e49bc06c936f3042cb8b4f5c85fa143d4bfcba089be33733490bb259d9320a8ecf3b84a7f898ad936b245655f9da88015e898f1fbbcfbd51df0c60e6fd58c6496ae9f823c26d8f06eac45c35ff18", 0xc7}, {&(0x7f0000000080)="23a5735fef18ec8870f290042b78284f4228c0e762be7044d0bc0f532b6881c8c297", 0x22}, {&(0x7f00000000c0)="20df8d9992", 0x5}, {&(0x7f0000000280)="867be750b7cd237147c2e29b7a2bf2d2f557e11f6b3b2c37689edbcda2a77ed546744870779779f9d2becd7467d38aad0a6190defb8b8061e45973583e45adad63431c8cd4bdbfc5a70285c285c98e0e779aff37545036d602485ce8891e41a367ad373fddc7574cb5ae8fb9596246de8a1f8edcfcaec8d8e216358ae79de10cdff49f", 0x83}], 0x5)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:33 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:33 executing program 0:
inotify_init1(0x80003)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/42)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:33 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1282.987080] IPVS: ftp: loaded support on port[0] = 21
06:58:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x8100000000000000}, 0x0)

[ 1283.032317] usb usb3: usbfs: process 24480 (syz-executor.3) did not claim interface 0 before use
[ 1283.081948] vhci_hcd: default hub control req: 010b v0000 i0000 l0
06:58:33 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x200500, 0x0)
r4 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xf7, 0x40)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)={0x5, 0x0, [{0x9, 0x2, 0x0, 0x0, @msi={0x6, 0x4, 0x9}}, {0x1, 0x7, 0x0, 0x0, @irqchip={0x7, 0x4}}, {0x100000000, 0x3, 0x0, 0x0, @adapter={0x7, 0x6, 0x9, 0xe6ec, 0x9}}, {0x7f, 0x7, 0x0, 0x0, @msi={0xfffffffffffffffd, 0x0, 0x4}}, {0x101, 0x6, 0x0, 0x0, @sint={0x66}}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000002c0)={0x0, 0xfffffffffffffffc, 0xff, 0x13, 0x6})
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000000c0)=""/45)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x9effffff00000000}, 0x0)

06:58:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xd302000000000000}, 0x0)

06:58:33 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x640000, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1283.658940] IPVS: ftp: loaded support on port[0] = 21
06:58:34 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(0xffffffffffffffff, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

06:58:34 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:34 executing program 0:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x5, 0x1000000000000005, 0x40a, 0x2, 'syz1\x00', 0xff})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:34 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1284.110708] usb usb3: usbfs: process 24539 (syz-executor.3) did not claim interface 0 before use
06:58:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xffffff7f00000000}, 0x0)

[ 1284.157016] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1284.165621] IPVS: ftp: loaded support on port[0] = 21
[ 1284.223487] IPVS: ftp: loaded support on port[0] = 21
06:58:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2000, 0x0)

06:58:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xffffffff00000000}, 0x0)

06:58:34 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xfffffffffffff000}, 0x0)

06:58:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0)
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000100)=0x7fff)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x200000485, 0x1, 0x2, 0x4]})

[ 1284.798649] IPVS: ftp: loaded support on port[0] = 21
[ 1284.886527] Unknown ioctl 21526
[ 1284.926981] Unknown ioctl 21526
06:58:35 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200), 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:35 executing program 5:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4)
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x5, 0x1000000000000005, 0x40a, 0x2, 'syz1\x00', 0xff})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x2}, 0x0)

06:58:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x3)
fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0x200000485, 0x8000080005]})
keyctl$join(0x1, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000300)={@empty, 0x40, r3})
syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x20, 0x0)

06:58:35 executing program 0:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x1}}, 0x14)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000080), 0x3528a9c0}], 0x1000000000000035, 0x0)

06:58:35 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1285.274171] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1285.316660] IPVS: ftp: loaded support on port[0] = 21
[ 1285.331687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1285.345737] usb usb3: usbfs: process 24603 (syz-executor.3) did not claim interface 0 before use
[ 1285.396554] vhci_hcd: default hub control req: 010b v0000 i0000 l0
06:58:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x3}, 0x0)

[ 1285.552243] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1285.594560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1285.667023] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1285.715596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4}, 0x0)

[ 1285.954340] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1286.031030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:36 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
remap_file_pages(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x1, 0x1f, 0x1000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40200)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x58)

06:58:36 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200), 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1286.262565] IPVS: ftp: loaded support on port[0] = 21
[ 1286.275927] syz-executor.5 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[ 1286.305679] usb usb3: usbfs: process 24640 (syz-executor.3) did not claim interface 0 before use
[ 1286.331379] CPU: 0 PID: 24599 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1286.338281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1286.347644] Call Trace:
[ 1286.350242]  dump_stack+0x172/0x1f0
[ 1286.350264]  dump_header+0x10f/0xb6c
[ 1286.350283]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1286.350298]  ? ___ratelimit+0x60/0x595
[ 1286.366590]  ? do_raw_spin_unlock+0x57/0x270
[ 1286.371020]  oom_kill_process.cold+0x10/0x6f5
[ 1286.375533]  ? task_will_free_mem+0x139/0x6e0
[ 1286.380222]  out_of_memory+0x79a/0x1280
[ 1286.384212]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1286.389336]  ? oom_killer_disable+0x280/0x280
[ 1286.389351]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1286.389375]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1286.403612]  ? memcg_memory_event+0x40/0x40
[ 1286.407964]  ? _raw_spin_unlock+0x2d/0x50
[ 1286.407980]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1286.417234]  try_charge+0xfec/0x1570
[ 1286.420959]  ? find_held_lock+0x35/0x130
[ 1286.425035]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1286.429886]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 1286.434731]  ? find_held_lock+0x35/0x130
[ 1286.438806]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 1286.443668]  memcg_kmem_charge_memcg+0x7c/0x130
[ 1286.448343]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 1286.448367]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1286.457692]  memcg_kmem_charge+0x13b/0x340
[ 1286.461936]  __alloc_pages_nodemask+0x437/0x710
[ 1286.466619]  ? __alloc_pages_slowpath+0x2900/0x2900
[ 1286.471643]  ? ___might_sleep+0x163/0x280
[ 1286.475792]  ? copyin+0xb5/0x100
[ 1286.479161]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 1286.484703]  alloc_pages_current+0x107/0x210
[ 1286.489122]  pipe_write+0xa65/0xfb0
[ 1286.492745]  __vfs_write+0x613/0x8e0
[ 1286.496451]  ? kernel_read+0x120/0x120
[ 1286.500331]  ? common_file_perm+0x1d6/0x6f0
[ 1286.504644]  ? apparmor_file_permission+0x25/0x30
[ 1286.509480]  ? rw_verify_area+0x118/0x360
[ 1286.513623]  vfs_write+0x20c/0x580
[ 1286.517156]  ksys_write+0xea/0x1f0
[ 1286.520685]  ? __ia32_sys_read+0xb0/0xb0
[ 1286.524747]  ? do_syscall_64+0x26/0x610
[ 1286.528710]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1286.534062]  ? do_syscall_64+0x26/0x610
[ 1286.538029]  __x64_sys_write+0x73/0xb0
[ 1286.541919]  do_syscall_64+0x103/0x610
[ 1286.545798]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1286.550974] RIP: 0033:0x457f29
[ 1286.554155] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1286.573055] RSP: 002b:00007ff8443f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1286.580751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29
[ 1286.588105] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000006
[ 1286.595362] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1286.602631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8443f76d4
[ 1286.609887] R13: 00000000004c3cdf R14: 00000000004dc5e8 R15: 00000000ffffffff
[ 1286.619400] net_ratelimit: 26 callbacks suppressed
[ 1286.619407] protocol 88fb is buggy, dev hsr_slave_0
[ 1286.629459] protocol 88fb is buggy, dev hsr_slave_1
[ 1286.634837] protocol 88fb is buggy, dev hsr_slave_0
[ 1286.639926] protocol 88fb is buggy, dev hsr_slave_1
[ 1286.640027] protocol 88fb is buggy, dev hsr_slave_0
[ 1286.640063] protocol 88fb is buggy, dev hsr_slave_1
[ 1286.640149] protocol 88fb is buggy, dev hsr_slave_0
[ 1286.657455] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1286.660253] protocol 88fb is buggy, dev hsr_slave_1
[ 1286.767349] memory: usage 307136kB, limit 307200kB, failcnt 2946
[ 1286.778393] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1286.805939] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1286.826457] Memory cgroup stats for /syz5: cache:0KB rss:245804KB rss_huge:215040KB shmem:28KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:246036KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1286.874544] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24598,uid=0
[ 1286.896690] Memory cgroup out of memory: Kill process 24598 (syz-executor.5) score 1147 or sacrifice child
[ 1286.907194] Killed process 24599 (syz-executor.5) total-vm:72708kB, anon-rss:13568kB, file-rss:35680kB, shmem-rss:0kB
[ 1286.932458] oom_reaper: reaped process 24599 (syz-executor.5), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB
06:58:37 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x5}, 0x0)

06:58:37 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
mq_getsetattr(r1, &(0x7f0000000080)={0x43, 0x2, 0x2, 0x101, 0x7, 0x3, 0x400, 0x9}, &(0x7f00000000c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:37 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200), 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1287.059425] protocol 88fb is buggy, dev hsr_slave_0
[ 1287.064737] protocol 88fb is buggy, dev hsr_slave_1
[ 1287.144974] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1287.182823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1287.210639] IPVS: ftp: loaded support on port[0] = 21
[ 1287.225322] usb usb3: usbfs: process 24663 (syz-executor.3) did not claim interface 0 before use
[ 1287.265245] IPVS: ftp: loaded support on port[0] = 21
06:58:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6}, 0x0)

[ 1287.294585] vhci_hcd: default hub control req: 010b v0000 i0000 l0
06:58:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101000, 0x0)
r4 = socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000580)={r4, 0x5})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000005c0)={r4})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000600)={0x2, 0x2, [{0xfffffffeffffffff, 0x0, 0x401}, {0x1, 0x0, 0x3}]})
ioctl$TIOCSTI(r3, 0x5412, 0x4)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000180)={"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"})

[ 1287.413444] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1287.439730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x7}, 0x0)

06:58:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ustat(0x3, &(0x7f0000000080))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ff7000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1287.727191] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1287.749524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1287.818314] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1287.848527] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:38 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x8}, 0x0)

06:58:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000180)=""/214)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1288.056312] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1288.070806] IPVS: ftp: loaded support on port[0] = 21
[ 1288.119698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1288.247995] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1288.295154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:38 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:38 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x3d, {{0xa, 0x4e24, 0x400, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffffffffff3f}}, {{0xa, 0x4e24, 0x2, @mcast1, 0x10001}}}, 0x108)
r4 = shmget$private(0x0, 0x3000, 0x4000000801, &(0x7f0000ff0000/0x3000)=nil)
shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000080)=""/94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xa}, 0x0)

06:58:38 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf}, 0x0)

[ 1288.687381] usb usb3: usbfs: process 24726 (syz-executor.3) did not claim interface 0 before use
[ 1288.727615] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1288.743417] IPVS: ftp: loaded support on port[0] = 21
[ 1288.760265] IPVS: ftp: loaded support on port[0] = 21
06:58:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x10}, 0x0)

06:58:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x13d800, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007e, 0x0, [0x200000485, 0x8000080005]})

06:58:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x28}, 0x0)

06:58:39 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:39 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={<r2=>0x0, 0x54, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}, @in6={0xa, 0x9, 0x6, @rand_addr="f968cff63b920795d7828a9121a91a3e", 0x45e}, @in6={0xa, 0x4e21, 0x4, @empty, 0x5355}]}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r2, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x80, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @rand_addr=0x1}, {0x306, @broadcast}, 0x4, {0x2, 0x4e20, @multicast2}, 'veth1_to_bridge\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040))
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x2000000000007f, 0x0, [0x9, 0x8000080005]})

06:58:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x48}, 0x0)

[ 1289.394863] IPVS: ftp: loaded support on port[0] = 21
06:58:39 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294)
connect$inet6(r0, &(0x7f0000000340), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e0066420fe2e3660fa041d288766d0000d3196f")
clone(0x20407fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

06:58:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80000, 0x0)
flock(r0, 0x9)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x440, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x5}, 0x4)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4c}, 0x0)

06:58:39 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:40 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x60}, 0x0)

[ 1289.961858] usb usb3: usbfs: process 24790 (syz-executor.3) did not claim interface 0 before use
[ 1289.983376] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1290.060837] IPVS: ftp: loaded support on port[0] = 21
06:58:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x68}, 0x0)

06:58:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x81, 0x9, 0x493e8e92, 0xc72, 0x3, 0x5f, 0x7ff, 0x1, 0xfff, 0x1, 0x3, 0x1a4a, 0x7ff}, {0x4, 0x8, 0x3f, 0x800, 0x5, 0x1, 0x4, 0x4, 0xfffffffffffff7c7, 0x401, 0x6, 0x4, 0x2}, {0x4, 0xfffffffffffffff7, 0x331e, 0x6, 0xfffffffffffffffd, 0x4, 0x8, 0x5, 0x8, 0xf02e, 0x8000, 0x3919, 0x10001}], 0xfffffffffffffffe})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1290.292603] validate_nla: 8 callbacks suppressed
[ 1290.292610] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:58:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6c}, 0x0)

[ 1290.502950] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1290.553148] __nla_parse: 9 callbacks suppressed
[ 1290.553156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:40 executing program 0:

06:58:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2000000000007b, 0x0, [0x400, 0x8000080005]})

[ 1290.624228] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1290.655691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:40 executing program 0:

06:58:41 executing program 5:

06:58:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x74}, 0x0)

06:58:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005, 0x0, 0xffffffffffffffff]})

06:58:41 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:41 executing program 0:

06:58:41 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1291.213576] Unknown ioctl 44802
[ 1291.220228] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1291.245365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1291.245470] IPVS: ftp: loaded support on port[0] = 21
06:58:41 executing program 0:

[ 1291.262603] Unknown ioctl 44802
[ 1291.278702] usb usb3: usbfs: process 24857 (syz-executor.3) did not claim interface 0 before use
[ 1291.293341] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:58:41 executing program 5:

[ 1291.323825] vhci_hcd: default hub control req: 010b v0000 i0000 l0
06:58:41 executing program 5:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="4c200d5ae423ce003d6f070000000700eeff7494be615ab12fdc3674a9871204721fb499469ee999a06124f9f1ab24e7c541ea342ee4e3d2ef"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1291.367199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:41 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xfffffe72)
recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7ffff000}, {&(0x7f00000023c0)=""/49, 0x31}], 0x2}}], 0x1, 0x0, 0x0)

06:58:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x7a}, 0x0)

06:58:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0)
r4 = request_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffb)
keyctl$instantiate_iov(0x14, r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="076a9b0008de8870a431f615fbcd5174b7dc6b1c27cfc2910782354889de82b9d3ebb6a8965a002749273099cc8592b5908ecc03ae2af47a5f56f3d203bc73430a30bd6eaf7b86c5e407cca76a00cb8f9de4f05e1397ce8db6379d761e8fd0dce09c7755a3f303bcc87c9ac4a98a53e82ffc5a8d52e484c57f62f388a22ef9dd3946", 0x82}, {&(0x7f0000000240)="fba5e42e75634118cbf0500475cedc7a5247c2a5a04c1a09015786bd9b00c7f6947ef2fbe6a59cb6603a70e05f39d6f5827337f0e0210851efd9b0b97e4d75c61be669f517fe72f28a1503e04f53fee568eaf7abc3420760e5918761e8e552ce87e53a1c0d4accd012d0b4f8b3f978465c6d615008c36791bd8ae4cd51492918457f993428f7c2280d3e9e0cdeafc1e28d44dda339737fe5daeaa192c710f9674a50437d9472d13e3bfc7e280adae9636023ab492e76a52dd259935a2ac388187af762702c3df9", 0xc7}], 0x2, r4)
r5 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
setsockopt(r5, 0xbc4d, 0x6, &(0x7f0000000480)="7bbd8ea16eaa4ffd34f516f00c0e1857241ba383c5ce987032d0888dba6381855209fbe653949f5fb954733a9e90e724b89127787784476129dab8e40817caa4d20bdf81e9fc7f5493f0b7c3aafb5ad37cb60c41e894107df415adb1ff52226782fd4455e487f28938f4999ef6ae40b0", 0x70)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:41 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0xffffffffffffffff)
r1 = getpgid(0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
timerfd_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0))
r3 = getpgrp(r1)
ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100))
setpriority(0x0, r3, 0x10000)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x1)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x2)
ioctl$KVM_SMI(r4, 0xaeb7)
setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000100))
fcntl$getown(r4, 0x9)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0))

[ 1291.479061] ptrace attach of "/root/syz-executor.5"[24868] was attempted by "/root/syz-executor.5"[24869]
[ 1291.601543] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1291.624316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:41 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/11, 0x232)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140))
r3 = dup2(r2, r1)
syz_execute_func(&(0x7f0000000340)="3666440f50f564ff0941c30f0f441e04a4c4c27d794e0066420fe2e33e0f1110c442019dcc6f")
clone(0xb102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)

06:58:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf0}, 0x0)

[ 1291.816053] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1291.832112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:42 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:42 executing program 0:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080))
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
close(r0)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x8, {0x2, 0x4e22, @broadcast}, 'syzkaller0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xcc)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000010000841b64af8ba64027967e29da440002000000e000001a00000000000000000000000000000000000000000000000000000000000eaf1122e0af4730b28e126d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1)

[ 1292.139820] usb usb3: usbfs: process 24926 (syz-executor.3) did not claim interface 0 before use
06:58:42 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f00000000c0), {[{{@arp={@broadcast, @broadcast, 0xffffff00, 0x0, @mac=@random="13ea9eafb59a", {[0x0, 0xff, 0xff, 0xff]}, @mac=@link_local, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xc8cb, 0x6, 0x3ff, 0x7, 0x800, 0x4, 'rose0\x00', 'netdevsim0\x00', {0xff}}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x41ace128}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @local, 0x5, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @remote, 0x8, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r3 = syz_open_dev$radio(&(0x7f0000000700)='/dev/radio#\x00', 0x0, 0x2)
faccessat(r3, &(0x7f0000000740)='./file0\x00', 0x4, 0x200)
r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x101, 0x80000)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x8e78, 0x98, 0x80, 0x0, 0x97, 0xfffffffffffffeff, 0x1000, 0x8000}, 0xb)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={r4, r4, 0x9, 0x1}, 0x10)

06:58:42 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x2d3}, 0x0)

06:58:42 executing program 0:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1292.182318] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1292.258518] IPVS: ftp: loaded support on port[0] = 21
[ 1292.280532] usb usb3: usbfs: process 24941 (syz-executor.0) did not claim interface 0 before use
[ 1292.332605] IPVS: ftp: loaded support on port[0] = 21
06:58:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x410800)
ioctl$sock_ifreq(r3, 0x895f, &(0x7f0000000080)={'teql0\x00', @ifru_names='veth0_to_team\x00'})
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0))

[ 1292.445301] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1292.468262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x300}, 0x0)

06:58:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xfffffffffffffff7)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0))
r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000080)={0x3f, "42bae90411277740560dda7a36202a1d013a75c209ba61ddc81609f5f277c17f", 0x3, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x6, 0x400100)
r4 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000280))
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x40]})
fchdir(r2)

[ 1292.819394] net_ratelimit: 26 callbacks suppressed
[ 1292.819402] protocol 88fb is buggy, dev hsr_slave_0
[ 1292.829502] protocol 88fb is buggy, dev hsr_slave_1
[ 1292.834660] protocol 88fb is buggy, dev hsr_slave_0
[ 1292.839755] protocol 88fb is buggy, dev hsr_slave_1
[ 1292.844858] protocol 88fb is buggy, dev hsr_slave_0
[ 1292.849941] protocol 88fb is buggy, dev hsr_slave_1
[ 1292.899404] protocol 88fb is buggy, dev hsr_slave_0
[ 1292.904590] protocol 88fb is buggy, dev hsr_slave_1
[ 1292.936954] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:58:43 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1292.959469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x500}, 0x0)

06:58:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x2200, 0x0)
r1 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
setregid(r1, r2)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1293.128357] usb usb3: usbfs: process 24974 (syz-executor.3) did not claim interface 0 before use
[ 1293.172397] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1293.275050] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1293.287841] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1293.299396] protocol 88fb is buggy, dev hsr_slave_0
[ 1293.303000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1293.304544] protocol 88fb is buggy, dev hsr_slave_1
[ 1293.320366] CPU: 1 PID: 24944 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1293.327232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1293.336592] Call Trace:
[ 1293.339206]  dump_stack+0x172/0x1f0
[ 1293.342848]  dump_header+0x10f/0xb6c
[ 1293.346579]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1293.351696]  ? ___ratelimit+0x60/0x595
[ 1293.355596]  ? do_raw_spin_unlock+0x57/0x270
[ 1293.360030]  oom_kill_process.cold+0x10/0x6f5
[ 1293.364551]  ? task_will_free_mem+0x139/0x6e0
[ 1293.369068]  out_of_memory+0x79a/0x1280
[ 1293.373066]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1293.378187]  ? oom_killer_disable+0x280/0x280
[ 1293.382697]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1293.387829]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1293.392527]  ? memcg_memory_event+0x40/0x40
[ 1293.396875]  ? _raw_spin_unlock+0x2d/0x50
[ 1293.401045]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1293.406266]  try_charge+0xfec/0x1570
[ 1293.409987]  ? find_held_lock+0x35/0x130
[ 1293.414076]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1293.419031]  ? kasan_check_read+0x11/0x20
[ 1293.423193]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1293.428055]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1293.432669]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1293.437616]  shmem_getpage_gfp+0x69b/0x3520
[ 1293.441972]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1293.447095]  ? lock_downgrade+0x810/0x810
[ 1293.451263]  shmem_fault+0x22d/0x760
[ 1293.455015]  ? __handle_mm_fault+0x349d/0x3f20
[ 1293.459612]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1293.464905]  ? lock_downgrade+0x810/0x810
[ 1293.469072]  __do_fault+0x116/0x4e0
[ 1293.472719]  __handle_mm_fault+0x2cbd/0x3f20
[ 1293.477148]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1293.482008]  ? find_held_lock+0x35/0x130
[ 1293.486074]  ? handle_mm_fault+0x322/0xb30
[ 1293.486104]  ? kasan_check_read+0x11/0x20
[ 1293.494474]  handle_mm_fault+0x43f/0xb30
[ 1293.498559]  __get_user_pages+0x7b6/0x1a40
[ 1293.502824]  ? follow_page_mask+0x19a0/0x19a0
[ 1293.507330]  ? memset+0x32/0x40
[ 1293.507354]  populate_vma_page_range+0x20d/0x2a0
[ 1293.515389]  __mm_populate+0x204/0x380
[ 1293.519287]  ? populate_vma_page_range+0x2a0/0x2a0
06:58:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x48000, 0x0)
write$P9_RWALK(r3, &(0x7f0000001840)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="69632ea23ca752198331706457d9a63e872c2e6b6c8326df9ed4dc42b0d47483026d39bebdb9e7cb81db31239125c21d243a31d50ab6aa3acf62d4db8daf22a2dac862972d675be7802a8c89a57daae6dfbe746e2c8cb6d882341702fc546a1a7f54282ef41ec425c527c5959892878e5aa218643b3e71d2354fac36d8a7100e2e6dcb392fe6bdb18787829eb5daf82015d94c9ae99bc20e3dca70d1638a7e543c69b95eac55ac48fc345fbdf802e3dd73e485cf79001e556ddb2a2065b6d55f"], 0x34a)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x80000000, 0x6, 0x100000001})
mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x20, 0x4ed)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1293.524239]  vm_mmap_pgoff+0x213/0x230
[ 1293.528256]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1293.533113]  ? kasan_check_read+0x11/0x20
[ 1293.537261]  ? _copy_to_user+0xc9/0x120
[ 1293.541235]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1293.541256]  ksys_mmap_pgoff+0xf7/0x630
[ 1293.541276]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1293.541292]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1293.541306]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1293.541321]  ? do_syscall_64+0x26/0x610
[ 1293.541339]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1293.541358]  __x64_sys_mmap+0xe9/0x1b0
[ 1293.541377]  do_syscall_64+0x103/0x610
[ 1293.541397]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1293.541409] RIP: 0033:0x457f29
[ 1293.541424] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1293.541432] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1293.541446] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1293.541455] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1293.541463] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1293.541472] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1293.541490] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1293.664320] memory: usage 307200kB, limit 307200kB, failcnt 3002
[ 1293.679633] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1293.725562] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1293.725570] Memory cgroup stats for /syz5: cache:8876KB rss:236924KB rss_huge:208896KB shmem:8928KB mapped_file:8976KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9064KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1293.788924] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24930,uid=0
[ 1293.827319] Memory cgroup out of memory: Kill process 24930 (syz-executor.5) score 1132 or sacrifice child
[ 1293.844944] Killed process 24930 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:8972kB
[ 1293.860020] oom_reaper: reaped process 24930 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:8972kB
06:58:45 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:45 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x600}, 0x0)

06:58:45 executing program 0:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x3c, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x200, 0x101000)
fcntl$getflags(r1, 0x401)
write$UHID_CREATE(r3, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/255, 0xff, 0x1, 0x1, 0x27, 0x8, 0xbf75}, 0x120)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KDSETLED(r3, 0x4b32, 0x3)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080001, 0x4]})

06:58:45 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1295.670957] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1295.687706] IPVS: ftp: loaded support on port[0] = 21
[ 1295.710961] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1295.742842] usb usb3: usbfs: process 25011 (syz-executor.0) did not claim interface 0 before use
[ 1295.758094] IPVS: ftp: loaded support on port[0] = 21
06:58:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x700}, 0x0)

[ 1295.826088] vhci_hcd: default hub control req: 010b v0000 i0000 l0
06:58:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0)
ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000080))

[ 1296.038905] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1296.059649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

[ 1296.269197] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1296.302136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf00}, 0x0)

06:58:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3ff, 0x800)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000180)={<r2=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r2, 0x13}, &(0x7f0000000240)=0x8)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x48a, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]})

[ 1296.487674] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1296.529474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1296.563846] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1296.591885] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1296.611028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1296.668190] CPU: 0 PID: 25007 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1296.675102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1296.684468] Call Trace:
[ 1296.687084]  dump_stack+0x172/0x1f0
[ 1296.690728]  dump_header+0x10f/0xb6c
[ 1296.694463]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1296.699575]  ? ___ratelimit+0x60/0x595
[ 1296.703471]  ? do_raw_spin_unlock+0x57/0x270
[ 1296.707894]  oom_kill_process.cold+0x10/0x6f5
[ 1296.712409]  ? task_will_free_mem+0x139/0x6e0
[ 1296.716928]  out_of_memory+0x79a/0x1280
[ 1296.720928]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1296.726060]  ? oom_killer_disable+0x280/0x280
[ 1296.730550]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1296.730574]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1296.730588]  ? memcg_memory_event+0x40/0x40
[ 1296.730613]  ? _raw_spin_unlock+0x2d/0x50
[ 1296.740477]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1296.740491]  try_charge+0xfec/0x1570
[ 1296.740504]  ? find_held_lock+0x35/0x130
[ 1296.740525]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1296.748968]  ? kasan_check_read+0x11/0x20
[ 1296.748989]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1296.775684]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1296.780282]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1296.785208]  shmem_getpage_gfp+0x69b/0x3520
[ 1296.789558]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1296.794652]  ? lock_downgrade+0x810/0x810
[ 1296.798896]  shmem_fault+0x22d/0x760
[ 1296.802600]  ? __handle_mm_fault+0x349d/0x3f20
[ 1296.807174]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1296.812560]  ? lock_downgrade+0x810/0x810
[ 1296.816721]  __do_fault+0x116/0x4e0
[ 1296.820344]  __handle_mm_fault+0x2cbd/0x3f20
[ 1296.824744]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1296.829573]  ? find_held_lock+0x35/0x130
[ 1296.833623]  ? handle_mm_fault+0x322/0xb30
[ 1296.837857]  ? kasan_check_read+0x11/0x20
[ 1296.841997]  handle_mm_fault+0x43f/0xb30
[ 1296.846051]  __get_user_pages+0x7b6/0x1a40
[ 1296.850281]  ? follow_page_mask+0x19a0/0x19a0
[ 1296.854769]  ? memset+0x32/0x40
[ 1296.858051]  populate_vma_page_range+0x20d/0x2a0
[ 1296.862800]  __mm_populate+0x204/0x380
[ 1296.866678]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1296.871603]  vm_mmap_pgoff+0x213/0x230
[ 1296.875494]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1296.880348]  ? kasan_check_read+0x11/0x20
[ 1296.884496]  ? _copy_to_user+0xc9/0x120
[ 1296.888461]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1296.893987]  ksys_mmap_pgoff+0xf7/0x630
[ 1296.897950]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1296.902868]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1296.907608]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1296.912349]  ? do_syscall_64+0x26/0x610
[ 1296.916444]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1296.921798]  __x64_sys_mmap+0xe9/0x1b0
[ 1296.925678]  do_syscall_64+0x103/0x610
[ 1296.929556]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1296.934731] RIP: 0033:0x457f29
[ 1296.937911] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1296.956802] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1296.964498] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1296.971754] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1296.979010] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1296.986275] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1296.993534] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
06:58:47 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x2000}, 0x0)

06:58:47 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xffffffffffffff28, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:47 executing program 0:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1297.121499] memory: usage 307200kB, limit 307200kB, failcnt 3016
[ 1297.127697] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1297.167657] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1297.199558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1297.209483] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1297.216594] Memory cgroup stats for /syz5: cache:9160KB rss:236828KB rss_huge:208896KB shmem:9212KB mapped_file:9240KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9340KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1297.247997] usb usb3: usbfs: process 25078 (syz-executor.0) did not claim interface 0 before use
[ 1297.276412] IPVS: ftp: loaded support on port[0] = 21
[ 1297.277763] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1297.312132] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24991,uid=0
[ 1297.378386] Memory cgroup out of memory: Kill process 24991 (syz-executor.5) score 1133 or sacrifice child
[ 1297.449035] Killed process 24991 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9236kB
[ 1297.514370] oom_reaper: reaped process 24991 (syz-executor.5), now anon-rss:0kB, file-rss:34704kB, shmem-rss:9236kB
06:58:47 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x2800}, 0x0)

06:58:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000)
write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1297.728097] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1297.800978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1297.827252] IPVS: ftp: loaded support on port[0] = 21
06:58:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @ioapic={0x5000, 0x2, 0x5, 0x1, 0x0, [{0x6, 0x1, 0x6, [], 0x3a20000}, {0x3ff, 0x3, 0x9, [], 0x4}, {0x7, 0x7fffffff, 0x7, [], 0x7}, {0x1, 0x0, 0x6, [], 0x8e}, {0x7c4, 0xffffffff, 0xfffffffffffffff9, [], 0x80}, {0x5, 0x7ff, 0x0, [], 0x353efaab}, {0xffffffff, 0x4, 0x232, [], 0x4}, {0x3e0000000000000, 0x21e68e8f, 0x200, [], 0xdc}, {0x7, 0x5, 0x544, [], 0x9e32}, {0x916, 0x1, 0x2, [], 0x1}, {0x6, 0xfffffffffffffff9, 0x4, [], 0xfffffff000000000}, {0x7fffffff, 0xffff, 0x38, [], 0xfffffffffffeffff}, {0x8, 0xba, 0x5, [], 0x8000000000}, {0x32, 0x9, 0x7f, [], 0x100000001}, {0x3, 0x50e58539, 0x74f40000, [], 0x4}, {0xfffffffeffffffff, 0xdf, 0x0, [], 0x9}, {0x1ff, 0x2, 0x6, [], 0x20}, {0x73, 0x100000001, 0x0, [], 0x3f}, {0x2, 0x4, 0x2, [], 0xf4}, {0x1f, 0x8000, 0x401, [], 0xf3}, {0x4c4, 0x4, 0x7, [], 0x7}, {0x9a1a, 0x4, 0x197, [], 0x6}, {0xfffffffffffffff8, 0x9, 0x0, [], 0x40}, {0x401, 0x9, 0x1}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x3f00}, 0x0)

06:58:48 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1298.092390] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:58:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r3=>0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='/dev/kvm\x00'}, 0x30)
ioprio_set$pid(0x3, r3, 0x401)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1298.139714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

06:58:48 executing program 0:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
ioctl$sock_inet_SIOCRTMSG(r3, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}})
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r4=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:48 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r2=>0x0)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x10)
perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x9, 0x2, 0xff, 0x3, 0x0, 0x1, 0xf78b6fcd4ae599bd, 0x4, 0x0, 0x5, 0x5, 0x5fb, 0xff, 0x71e4, 0x5, 0x81, 0x6a, 0x1c81901b, 0x3f, 0x3, 0x7, 0x0, 0x100000000, 0x8, 0x100, 0x3, 0x8a, 0x5, 0x7, 0x9, 0x9, 0x1, 0xff, 0xfff, 0x80000001, 0xde6, 0x0, 0x400, 0x5, @perf_config_ext={0x6, 0x2}, 0x808, 0x7, 0x4, 0x2, 0x46cb, 0x8000}, r2, 0x10, r3, 0x2)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1298.623410] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1298.624738] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1298.674667] CPU: 1 PID: 25098 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1298.681563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1298.690920] Call Trace:
[ 1298.693521]  dump_stack+0x172/0x1f0
[ 1298.697171]  dump_header+0x10f/0xb6c
[ 1298.700898]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1298.706008]  ? ___ratelimit+0x60/0x595
[ 1298.709914]  ? do_raw_spin_unlock+0x57/0x270
[ 1298.714341]  oom_kill_process.cold+0x10/0x6f5
[ 1298.718875]  ? task_will_free_mem+0x139/0x6e0
[ 1298.723392]  out_of_memory+0x79a/0x1280
[ 1298.727381]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1298.732496]  ? oom_killer_disable+0x280/0x280
[ 1298.735336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1298.736995]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1298.737024]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1298.737047]  ? memcg_memory_event+0x40/0x40
[ 1298.737072]  ? _raw_spin_unlock+0x2d/0x50
[ 1298.737088]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1298.759870] usb usb3: usbfs: process 25137 (syz-executor.0) did not claim interface 0 before use
[ 1298.763795]  try_charge+0xfec/0x1570
[ 1298.763809]  ? find_held_lock+0x35/0x130
[ 1298.763830]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1298.777838]  ? kasan_check_read+0x11/0x20
[ 1298.777861]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1298.799412]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1298.804013]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1298.808960]  shmem_getpage_gfp+0x69b/0x3520
[ 1298.813305]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1298.818417]  ? finish_task_switch+0x146/0x790
[ 1298.822913]  ? finish_task_switch+0x118/0x790
[ 1298.827425]  ? __switch_to_asm+0x34/0x70
[ 1298.831599]  ? __switch_to_asm+0x40/0x70
[ 1298.835673]  ? __schedule+0x81f/0x1cc0
[ 1298.839574]  shmem_fault+0x22d/0x760
[ 1298.843291]  ? pci_mmcfg_check_reserved+0x170/0x170
[ 1298.848336]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1298.853623]  ? preempt_schedule+0x4b/0x60
[ 1298.857866]  ? preempt_schedule_common+0x4f/0xe0
[ 1298.862638]  ? preempt_schedule+0x4b/0x60
[ 1298.866799]  __do_fault+0x116/0x4e0
[ 1298.870533]  __handle_mm_fault+0x2cbd/0x3f20
[ 1298.874957]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1298.879801]  ? find_held_lock+0x35/0x130
[ 1298.883874]  ? handle_mm_fault+0x322/0xb30
[ 1298.888130]  ? kasan_check_read+0x11/0x20
[ 1298.889072] vhci_hcd: default hub control req: 010b v0000 i0000 l0
[ 1298.892282]  handle_mm_fault+0x43f/0xb30
[ 1298.902648]  __get_user_pages+0x7b6/0x1a40
[ 1298.906894]  ? follow_page_mask+0x19a0/0x19a0
[ 1298.911408]  ? memset+0x32/0x40
[ 1298.914699]  populate_vma_page_range+0x20d/0x2a0
[ 1298.919468]  __mm_populate+0x204/0x380
06:58:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4800}, 0x0)

[ 1298.923376]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1298.928319]  vm_mmap_pgoff+0x213/0x230
[ 1298.932225]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1298.937068]  ? kasan_check_read+0x11/0x20
[ 1298.941216]  ? _copy_to_user+0xc9/0x120
[ 1298.941234]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1298.941254]  ksys_mmap_pgoff+0xf7/0x630
[ 1298.941272]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1298.941289]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1298.964610]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1298.969392]  ? do_syscall_64+0x26/0x610
[ 1298.973381]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1298.978761]  __x64_sys_mmap+0xe9/0x1b0
[ 1298.982665]  do_syscall_64+0x103/0x610
[ 1298.986571]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1298.991773] RIP: 0033:0x457f29
[ 1298.994979] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1299.012527] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1299.013890] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1299.013906] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1299.013918] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1299.043497] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1299.043508] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1299.058039] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1299.065632] net_ratelimit: 26 callbacks suppressed
[ 1299.065639] protocol 88fb is buggy, dev hsr_slave_0
[ 1299.070680] protocol 88fb is buggy, dev hsr_slave_1
[ 1299.070766] protocol 88fb is buggy, dev hsr_slave_0
[ 1299.085802] protocol 88fb is buggy, dev hsr_slave_1
[ 1299.090139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1299.090979] protocol 88fb is buggy, dev hsr_slave_0
[ 1299.104414] protocol 88fb is buggy, dev hsr_slave_1
[ 1299.119561] memory: usage 307200kB, limit 307200kB, failcnt 3050
[ 1299.125763] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1299.139417] protocol 88fb is buggy, dev hsr_slave_0
[ 1299.144535] protocol 88fb is buggy, dev hsr_slave_1
[ 1299.173134] IPVS: ftp: loaded support on port[0] = 21
[ 1299.192202] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1299.230027] Memory cgroup stats for /syz5: cache:9108KB rss:236828KB rss_huge:208896KB shmem:9136KB mapped_file:9108KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9352KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1299.379392] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25092,uid=0
[ 1299.432725] Memory cgroup out of memory: Kill process 25092 (syz-executor.5) score 1133 or sacrifice child
[ 1299.519512] Killed process 25092 (syz-executor.5) total-vm:72576kB, anon-rss:116kB, file-rss:34816kB, shmem-rss:9236kB
[ 1299.539451] protocol 88fb is buggy, dev hsr_slave_0
[ 1299.544558] protocol 88fb is buggy, dev hsr_slave_1
[ 1299.624785] oom_reaper: reaped process 25092 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9356kB
06:58:49 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:49 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4c00}, 0x0)

06:58:49 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:49 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1299.856431] IPVS: ftp: loaded support on port[0] = 21
06:58:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[ 1299.946160] IPVS: ftp: loaded support on port[0] = 21
[ 1299.967896] IPVS: ftp: loaded support on port[0] = 21
06:58:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffdf7, 0x0, 0x0, 0x10000007a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005, 0x6]})
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x12b, 0x1})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000180)={0x80, 0x0, 'client1\x00', 0xffffffff80000000, "d0efee731ebef67b", "d7af24ac990731859799099b1651b6f897c3595baaeb010efa50421487bcba1d", 0x848, 0x2})

06:58:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6800}, 0x0)

06:58:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080))
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000001ac0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000001840)={0x21c, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe000000000000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb814}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd68}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcea9}]}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffff7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x54}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/83, 0x53}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x7, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001740)={0x4, &(0x7f0000001700)=[{0x3f, 0x2, 0x8, 0x6}, {0xed9, 0x4, 0x2, 0x7}, {0x6, 0xfffffffffffffff8, 0x80000000, 0x3}, {0x7f, 0x7, 0x81, 0x5f66e34e}]}, 0x10)
write$P9_RFLUSH(r1, &(0x7f0000001780)={0x7, 0x6d, 0x1}, 0x7)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=<r6=>0x0)
move_pages(r6, 0x3, &(0x7f0000001640)=[&(0x7f0000fee000/0x1000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000fe5000/0xa000)=nil], &(0x7f0000001680)=[0x1f, 0x9], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000001540)=ANY=[@ANYBLOB="8903000000000000040103040187c91084cd3d165b0a5b9e9e2f893431dfffce0b3957deb457d1f1ed06d38ee6203409c8d96cb95d37802f28ee10d39340a522ad123b3984eb556c71bb161db2eb8950393dd0e661b989fc8e3e92ed552008a9111d292548ab740036c045fa5e12c43e7f152436800cfcff286668922409bec61c757908518e1b1d96fb74305719330e5b2270c83958409b342aeb4e4acea70898e88001e23087e248153c0694fe58bb90121578b1aff1868683c9117a51608a7916af3420caff7a7a"], 0x20)

06:58:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6c00}, 0x0)

06:58:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

[ 1300.833904] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1300.849431] CPU: 1 PID: 25179 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1300.856305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1300.865666] Call Trace:
[ 1300.868266]  dump_stack+0x172/0x1f0
[ 1300.871925]  dump_header+0x10f/0xb6c
[ 1300.875649]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1300.880758]  ? ___ratelimit+0x60/0x595
[ 1300.884657]  ? do_raw_spin_unlock+0x57/0x270
[ 1300.889085]  oom_kill_process.cold+0x10/0x6f5
[ 1300.893600]  ? task_will_free_mem+0x139/0x6e0
[ 1300.898114]  out_of_memory+0x79a/0x1280
[ 1300.902102]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1300.907212]  ? oom_killer_disable+0x280/0x280
[ 1300.911798]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1300.916917]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1300.921592]  ? memcg_memory_event+0x40/0x40
[ 1300.925930]  ? _raw_spin_unlock+0x2d/0x50
[ 1300.930082]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1300.935210]  try_charge+0xfec/0x1570
[ 1300.938940]  ? find_held_lock+0x35/0x130
[ 1300.943015]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1300.947875]  ? kasan_check_read+0x11/0x20
[ 1300.952037]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1300.956917]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1300.961510]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1300.966448]  shmem_getpage_gfp+0x69b/0x3520
[ 1300.970798]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1300.975923]  ? lock_downgrade+0x810/0x810
[ 1300.980086]  shmem_fault+0x22d/0x760
[ 1300.983810]  ? __handle_mm_fault+0x349d/0x3f20
[ 1300.988425]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1300.993722]  ? lock_downgrade+0x810/0x810
[ 1300.997888]  __do_fault+0x116/0x4e0
[ 1301.001527]  __handle_mm_fault+0x2cbd/0x3f20
[ 1301.005951]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1301.010804]  ? find_held_lock+0x35/0x130
[ 1301.014889]  ? handle_mm_fault+0x322/0xb30
[ 1301.019147]  ? kasan_check_read+0x11/0x20
[ 1301.023313]  handle_mm_fault+0x43f/0xb30
[ 1301.027398]  __get_user_pages+0x7b6/0x1a40
[ 1301.031655]  ? follow_page_mask+0x19a0/0x19a0
[ 1301.036166]  ? memset+0x32/0x40
[ 1301.039461]  populate_vma_page_range+0x20d/0x2a0
[ 1301.044368]  __mm_populate+0x204/0x380
[ 1301.048268]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1301.053225]  vm_mmap_pgoff+0x213/0x230
[ 1301.057128]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1301.061991]  ? kasan_check_read+0x11/0x20
[ 1301.066145]  ? _copy_to_user+0xc9/0x120
[ 1301.070134]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1301.075698]  ksys_mmap_pgoff+0xf7/0x630
[ 1301.079684]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1301.084620]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1301.089386]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1301.094144]  ? do_syscall_64+0x26/0x610
[ 1301.098135]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1301.103528]  __x64_sys_mmap+0xe9/0x1b0
[ 1301.107427]  do_syscall_64+0x103/0x610
[ 1301.111323]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1301.116519] RIP: 0033:0x457f29
[ 1301.119714] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1301.138638] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1301.146374] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1301.153648] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1301.160929] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1301.168216] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1301.175494] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1301.216333] memory: usage 307200kB, limit 307200kB, failcnt 3069
[ 1301.223295] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1301.237731] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1301.244074] Memory cgroup stats for /syz5: cache:9388KB rss:236816KB rss_huge:208896KB shmem:9416KB mapped_file:9372KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9468KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1301.275533] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25167,uid=0
[ 1301.296896] Memory cgroup out of memory: Kill process 25167 (syz-executor.5) score 1133 or sacrifice child
[ 1301.316505] Killed process 25167 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9236kB
[ 1301.328774] oom_reaper: reaped process 25167 (syz-executor.5), now anon-rss:0kB, file-rss:34704kB, shmem-rss:9236kB
06:58:51 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="640f21f666b8eb000f00d0b9800000c00f3235010000000f300f06b9800000c00f3235004000000f3066baf80cb8506ff088ef66bafc0cb800000000ef3e66650f060f0866b832000f00d864360f01d1", 0x50}], 0x1, 0x78, &(0x7f0000000180), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2)
r4 = semget$private(0x0, 0x3, 0x8)
semctl$IPC_INFO(r4, 0x3, 0x3, &(0x7f0000000200)=""/118)
execveat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000600)='\x00', &(0x7f0000000500)='/dev/kvm\x00', &(0x7f00000005c0)='#@],%\x1b{\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/kvm\x00'], &(0x7f0000000480)=[&(0x7f0000000380)='\x00', &(0x7f0000000540)='/dev\x8d\x80\xb3-&h', &(0x7f0000000400)='userlolowlan1$trustedproceth0\x00', &(0x7f00000004c0)='/dev/kvm\x00'], 0x1000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000640)={0xf0, 0xa4c, 0x7, 0x0, 0x0, [], [], [], 0xf2c9, 0x8})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x7a00}, 0x0)

06:58:51 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:51 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:51 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1301.443545] validate_nla: 6 callbacks suppressed
[ 1301.443553] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1301.446165] IPVS: ftp: loaded support on port[0] = 21
[ 1301.448400] __nla_parse: 6 callbacks suppressed
[ 1301.448408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1301.521642] IPVS: ftp: loaded support on port[0] = 21
[ 1301.582713] IPVS: ftp: loaded support on port[0] = 21
[ 1301.692535] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1301.708212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffeff, 0x80080)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={<r3=>0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x1000, 0x9}, &(0x7f00000011c0)=0x8)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001200)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000001280)={{0x7, 0x6, 0x800, 0x1, '\x00', 0xd3}, 0x6, 0x30000400, 0x7, r4, 0x5, 0x9, 'syz0\x00', &(0x7f0000001240)=['%vboxnet1selinuxppp1md5sum\x00', '(\x00', '+vboxnet0vboxnet1\x00', '/dev/kvm\x00', '\x00'], 0x39, [], [0x1f, 0x5, 0x1ff, 0x9]})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x8100}, 0x0)

[ 1302.175798] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1302.206271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1302.260401] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:58:52 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
fchown(r0, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
socket$isdn_base(0x22, 0x3, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000340))
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1302.325604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xd302}, 0x0)

[ 1302.442137] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1302.488225] CPU: 1 PID: 25239 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1302.495110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1302.504472] Call Trace:
[ 1302.507066]  dump_stack+0x172/0x1f0
[ 1302.510716]  dump_header+0x10f/0xb6c
[ 1302.514462]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1302.519563]  ? ___ratelimit+0x60/0x595
[ 1302.523442]  ? do_raw_spin_unlock+0x57/0x270
[ 1302.527844]  oom_kill_process.cold+0x10/0x6f5
[ 1302.532335]  ? task_will_free_mem+0x139/0x6e0
[ 1302.536827]  out_of_memory+0x79a/0x1280
[ 1302.540800]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1302.545895]  ? oom_killer_disable+0x280/0x280
[ 1302.550389]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1302.555489]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1302.560150]  ? memcg_memory_event+0x40/0x40
[ 1302.564468]  ? _raw_spin_unlock+0x2d/0x50
[ 1302.568622]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1302.573726]  try_charge+0xfec/0x1570
[ 1302.577433]  ? find_held_lock+0x35/0x130
[ 1302.581493]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1302.586332]  ? kasan_check_read+0x11/0x20
[ 1302.590477]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1302.595312]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1302.599889]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1302.604810]  shmem_getpage_gfp+0x69b/0x3520
[ 1302.609134]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1302.614244]  ? lock_downgrade+0x810/0x810
[ 1302.618390]  shmem_fault+0x22d/0x760
[ 1302.622096]  ? __handle_mm_fault+0x349d/0x3f20
[ 1302.626673]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1302.632038]  ? lock_downgrade+0x810/0x810
[ 1302.636183]  __do_fault+0x116/0x4e0
[ 1302.639809]  __handle_mm_fault+0x2cbd/0x3f20
[ 1302.644217]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1302.649050]  ? find_held_lock+0x35/0x130
[ 1302.653103]  ? handle_mm_fault+0x322/0xb30
[ 1302.657337]  ? kasan_check_read+0x11/0x20
[ 1302.661476]  handle_mm_fault+0x43f/0xb30
[ 1302.665529]  __get_user_pages+0x7b6/0x1a40
[ 1302.669763]  ? follow_page_mask+0x19a0/0x19a0
[ 1302.674266]  ? memset+0x32/0x40
[ 1302.677540]  populate_vma_page_range+0x20d/0x2a0
[ 1302.682440]  __mm_populate+0x204/0x380
[ 1302.686324]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1302.691251]  vm_mmap_pgoff+0x213/0x230
[ 1302.695145]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1302.699980]  ? kasan_check_read+0x11/0x20
[ 1302.704128]  ? _copy_to_user+0xc9/0x120
[ 1302.708093]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1302.713626]  ksys_mmap_pgoff+0xf7/0x630
[ 1302.717594]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1302.722515]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1302.727262]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1302.732008]  ? do_syscall_64+0x26/0x610
[ 1302.736062]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1302.741419]  __x64_sys_mmap+0xe9/0x1b0
[ 1302.745298]  do_syscall_64+0x103/0x610
[ 1302.749185]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1302.754365] RIP: 0033:0x457f29
[ 1302.757549] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1302.776440] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1302.784237] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1302.792006] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1302.799282] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1302.806541] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1302.813798] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1302.842599] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1302.876780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf000}, 0x0)

[ 1303.087002] memory: usage 307168kB, limit 307200kB, failcnt 3083
[ 1303.107376] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1303.120317] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1303.142017] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1303.150412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1303.155426] Memory cgroup stats for /syz5: cache:9408KB rss:236816KB rss_huge:208896KB shmem:9336KB mapped_file:9372KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9544KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1303.192410] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1303.231466] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25231,uid=0
[ 1303.233528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1303.265736] Memory cgroup out of memory: Kill process 25231 (syz-executor.5) score 1134 or sacrifice child
[ 1303.311889] Killed process 25231 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1303.326785] oom_reaper: reaped process 25231 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9500kB
06:58:53 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:53 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:53 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:53 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x34000}, 0x0)

06:58:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
eventfd(0xff)
r3 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x1, 0x0, 0x2, 0x401}, 0x6, 0x0, 0x5})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x40, 0x8000080005, 0x6]})
r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x0)
accept4$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800)

[ 1303.434772] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1303.450522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1303.496574] IPVS: ftp: loaded support on port[0] = 21
[ 1303.498316] IPVS: ftp: loaded support on port[0] = 21
[ 1303.516909] IPVS: ftp: loaded support on port[0] = 21
06:58:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x400300}, 0x0)

06:58:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x604000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f00000001c0))
getpeername(r3, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000180)=0x80)

06:58:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x199102)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1303.839013] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1303.857107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)

06:58:54 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r3=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x7b, 0x0, [0x200000485, 0x8000080005, 0x5]})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x3000, 0x100000})

[ 1304.165589] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1304.220542] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1304.278789] CPU: 0 PID: 25300 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1304.285679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1304.295042] Call Trace:
[ 1304.297650]  dump_stack+0x172/0x1f0
[ 1304.301573]  dump_header+0x10f/0xb6c
[ 1304.305308]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1304.305325]  ? ___ratelimit+0x60/0x595
[ 1304.305342]  ? do_raw_spin_unlock+0x57/0x270
[ 1304.305363]  oom_kill_process.cold+0x10/0x6f5
[ 1304.323451]  ? task_will_free_mem+0x139/0x6e0
[ 1304.327972]  out_of_memory+0x79a/0x1280
[ 1304.331966]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1304.337089]  ? oom_killer_disable+0x280/0x280
[ 1304.341604]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1304.346748]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1304.351430]  ? memcg_memory_event+0x40/0x40
[ 1304.355769]  ? _raw_spin_unlock+0x2d/0x50
[ 1304.355786]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1304.355801]  try_charge+0xfec/0x1570
[ 1304.368740]  ? find_held_lock+0x35/0x130
[ 1304.372829]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1304.377815]  ? kasan_check_read+0x11/0x20
[ 1304.381983]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1304.386928]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1304.391557]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1304.396497]  shmem_getpage_gfp+0x69b/0x3520
[ 1304.396534]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1304.396565]  ? lock_downgrade+0x810/0x810
[ 1304.396585]  shmem_fault+0x22d/0x760
[ 1304.413831]  ? __handle_mm_fault+0x349d/0x3f20
[ 1304.418444]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1304.418470]  ? lock_downgrade+0x810/0x810
[ 1304.418492]  __do_fault+0x116/0x4e0
[ 1304.418510]  __handle_mm_fault+0x2cbd/0x3f20
[ 1304.436064]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1304.440916]  ? find_held_lock+0x35/0x130
[ 1304.444991]  ? handle_mm_fault+0x322/0xb30
[ 1304.449252]  ? kasan_check_read+0x11/0x20
[ 1304.453409]  handle_mm_fault+0x43f/0xb30
[ 1304.457473]  __get_user_pages+0x7b6/0x1a40
[ 1304.461706]  ? follow_page_mask+0x19a0/0x19a0
[ 1304.466196]  ? memset+0x32/0x40
[ 1304.469471]  populate_vma_page_range+0x20d/0x2a0
[ 1304.474220]  __mm_populate+0x204/0x380
[ 1304.478200]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1304.483142]  vm_mmap_pgoff+0x213/0x230
[ 1304.487024]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1304.491855]  ? kasan_check_read+0x11/0x20
[ 1304.495994]  ? _copy_to_user+0xc9/0x120
[ 1304.499976]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1304.505509]  ksys_mmap_pgoff+0xf7/0x630
[ 1304.509486]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1304.514405]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1304.519162]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1304.523918]  ? do_syscall_64+0x26/0x610
[ 1304.527885]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1304.533241]  __x64_sys_mmap+0xe9/0x1b0
[ 1304.537126]  do_syscall_64+0x103/0x610
[ 1304.541008]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1304.546184] RIP: 0033:0x457f29
[ 1304.549365] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1304.568343] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1304.576041] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1304.583295] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1304.590567] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1304.597834] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1304.605090] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1304.664750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1304.752803] memory: usage 307200kB, limit 307200kB, failcnt 3104
[ 1304.762753] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1304.783440] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1304.800660] Memory cgroup stats for /syz5: cache:9440KB rss:236924KB rss_huge:208896KB shmem:9428KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9660KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1304.830117] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25294,uid=0
[ 1304.848592] Memory cgroup out of memory: Kill process 25294 (syz-executor.5) score 1134 or sacrifice child
[ 1304.865537] Killed process 25294 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
06:58:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)

06:58:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)

[ 1305.299381] net_ratelimit: 26 callbacks suppressed
[ 1305.299389] protocol 88fb is buggy, dev hsr_slave_0
[ 1305.309454] protocol 88fb is buggy, dev hsr_slave_1
[ 1305.314578] protocol 88fb is buggy, dev hsr_slave_0
[ 1305.319642] protocol 88fb is buggy, dev hsr_slave_1
[ 1305.324719] protocol 88fb is buggy, dev hsr_slave_0
[ 1305.329781] protocol 88fb is buggy, dev hsr_slave_1
[ 1305.379367] protocol 88fb is buggy, dev hsr_slave_0
[ 1305.384582] protocol 88fb is buggy, dev hsr_slave_1
[ 1305.779404] protocol 88fb is buggy, dev hsr_slave_0
[ 1305.784523] protocol 88fb is buggy, dev hsr_slave_1
06:58:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)

06:58:57 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r3 = dup2(r2, r1)
ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e)

06:58:57 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

06:58:57 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1306.962190] validate_nla: 1 callbacks suppressed
[ 1306.962199] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1306.980001] __nla_parse: 1 callbacks suppressed
[ 1306.980010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1307.018725] IPVS: ftp: loaded support on port[0] = 21
[ 1307.031689] IPVS: ftp: loaded support on port[0] = 21
06:58:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x3000000}, 0x0)

06:58:57 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000003, 0x7)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000000000000000000000000000000000000000000001000000000000000000000000000000000000000017f3b04087a7ba3e39c49daa173921f"]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:57 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1307.308881] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1307.326369] IPVS: ftp: loaded support on port[0] = 21
[ 1307.377210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)

06:58:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080), 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x8000, 0x0)
timer_create(0x4, &(0x7f0000000180)={0x0, 0x1a, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r4=>0x0)
timer_getoverrun(r4)

[ 1307.594430] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1307.608888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)

06:58:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:57 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1307.835172] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1307.899931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1307.972331] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1307.999479] CPU: 1 PID: 25366 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1308.006360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1308.015717] Call Trace:
[ 1308.018321]  dump_stack+0x172/0x1f0
[ 1308.021968]  dump_header+0x10f/0xb6c
[ 1308.025694]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1308.030806]  ? ___ratelimit+0x60/0x595
[ 1308.034701]  ? do_raw_spin_unlock+0x57/0x270
[ 1308.039127]  oom_kill_process.cold+0x10/0x6f5
[ 1308.043644]  ? task_will_free_mem+0x139/0x6e0
[ 1308.048281]  out_of_memory+0x79a/0x1280
[ 1308.052278]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1308.057390]  ? oom_killer_disable+0x280/0x280
[ 1308.061876]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1308.066974]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1308.071632]  ? memcg_memory_event+0x40/0x40
[ 1308.075950]  ? _raw_spin_unlock+0x2d/0x50
[ 1308.080087]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1308.085175]  try_charge+0xfec/0x1570
[ 1308.088874]  ? find_held_lock+0x35/0x130
[ 1308.092927]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1308.097772]  ? kasan_check_read+0x11/0x20
[ 1308.101921]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1308.106757]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1308.111332]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1308.116252]  shmem_getpage_gfp+0x69b/0x3520
[ 1308.120577]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1308.125668]  ? lock_downgrade+0x810/0x810
[ 1308.129810]  shmem_fault+0x22d/0x760
[ 1308.133516]  ? __handle_mm_fault+0x349d/0x3f20
[ 1308.138174]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1308.143460]  ? lock_downgrade+0x810/0x810
[ 1308.147598]  __do_fault+0x116/0x4e0
[ 1308.151239]  __handle_mm_fault+0x2cbd/0x3f20
[ 1308.155638]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1308.160466]  ? find_held_lock+0x35/0x130
[ 1308.164516]  ? handle_mm_fault+0x322/0xb30
[ 1308.168761]  ? kasan_check_read+0x11/0x20
[ 1308.172911]  handle_mm_fault+0x43f/0xb30
[ 1308.176975]  __get_user_pages+0x7b6/0x1a40
[ 1308.181209]  ? follow_page_mask+0x19a0/0x19a0
[ 1308.185710]  ? memset+0x32/0x40
[ 1308.188988]  populate_vma_page_range+0x20d/0x2a0
[ 1308.193754]  __mm_populate+0x204/0x380
[ 1308.197638]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1308.202565]  vm_mmap_pgoff+0x213/0x230
[ 1308.206450]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1308.211286]  ? kasan_check_read+0x11/0x20
[ 1308.215429]  ? _copy_to_user+0xc9/0x120
[ 1308.219396]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1308.224931]  ksys_mmap_pgoff+0xf7/0x630
[ 1308.228899]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1308.233818]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1308.238563]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1308.243308]  ? do_syscall_64+0x26/0x610
[ 1308.247270]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1308.252626]  __x64_sys_mmap+0xe9/0x1b0
[ 1308.256507]  do_syscall_64+0x103/0x610
[ 1308.260387]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1308.265562] RIP: 0033:0x457f29
[ 1308.268745] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1308.287736] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1308.295433] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1308.302694] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1308.309954] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
06:58:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6000000}, 0x0)

[ 1308.317219] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1308.324479] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1308.357583] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1308.376403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:58 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:58 executing program 2:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000600)={0x41, 0x3, 0x3}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1308.426951] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1308.498991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1308.543794] IPVS: ftp: loaded support on port[0] = 21
[ 1308.692256] memory: usage 307200kB, limit 307200kB, failcnt 3133
[ 1308.698815] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1308.736479] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1308.766941] Memory cgroup stats for /syz5: cache:9584KB rss:236912KB rss_huge:208896KB shmem:9656KB mapped_file:9504KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9740KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1308.800263] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25358,uid=0
[ 1308.829041] Memory cgroup out of memory: Kill process 25358 (syz-executor.5) score 1134 or sacrifice child
[ 1308.854352] Killed process 25358 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1308.876623] oom_reaper: reaped process 25358 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9744kB
06:58:59 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:58:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x7000000}, 0x0)

06:58:59 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:58:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x400)
setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000180)={0x0, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e21, @remote}}}, 0x108)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:58:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)

[ 1309.115191] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1309.139971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:59 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1309.210248] IPVS: ftp: loaded support on port[0] = 21
06:58:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)

06:58:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000580)="c711a0562c71a843a7dbc89f85935bc426afe37097ce0ba97110ae96efb2189e3377a8f796745d7d452f8e25850faeaeb1c6f046530972ee1e9e289b17c4e938b935c279028b2600676ebec7555abe0bfb5e37f59cda19cec20d104c652237c82c23c5c7cc44a3ef20fab7637178e1ddeeb523943fd6c7db8518217d567222840fa95c2e4f7ea0c99f30", 0x8a)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000180))

06:58:59 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1309.350926] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1309.397539] IPVS: ftp: loaded support on port[0] = 21
[ 1309.413440] IPVS: ftp: loaded support on port[0] = 21
[ 1309.437269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)

06:58:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
close(r1)

[ 1309.616796] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1309.638971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:58:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf000000}, 0x0)

[ 1309.884291] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1309.915404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1310.032306] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1310.074980] CPU: 1 PID: 25443 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1310.081868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1310.091226] Call Trace:
[ 1310.093835]  dump_stack+0x172/0x1f0
[ 1310.097473]  dump_header+0x10f/0xb6c
[ 1310.101198]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1310.106308]  ? ___ratelimit+0x60/0x595
[ 1310.110199]  ? do_raw_spin_unlock+0x57/0x270
[ 1310.114627]  oom_kill_process.cold+0x10/0x6f5
[ 1310.119134]  ? task_will_free_mem+0x139/0x6e0
[ 1310.123646]  out_of_memory+0x79a/0x1280
[ 1310.127636]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1310.132747]  ? oom_killer_disable+0x280/0x280
[ 1310.137260]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1310.142381]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1310.147085]  ? memcg_memory_event+0x40/0x40
[ 1310.151427]  ? _raw_spin_unlock+0x2d/0x50
[ 1310.155590]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1310.160698]  try_charge+0xfec/0x1570
[ 1310.164412]  ? find_held_lock+0x35/0x130
[ 1310.168487]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1310.173343]  ? kasan_check_read+0x11/0x20
[ 1310.177506]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1310.182361]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1310.186958]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1310.191904]  shmem_getpage_gfp+0x69b/0x3520
[ 1310.196252]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1310.201377]  ? lock_downgrade+0x810/0x810
[ 1310.205541]  shmem_fault+0x22d/0x760
[ 1310.209268]  ? __handle_mm_fault+0x349d/0x3f20
[ 1310.214473]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1310.219773]  ? lock_downgrade+0x810/0x810
[ 1310.223935]  __do_fault+0x116/0x4e0
[ 1310.227581]  __handle_mm_fault+0x2cbd/0x3f20
[ 1310.232007]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1310.236865]  ? find_held_lock+0x35/0x130
[ 1310.240936]  ? handle_mm_fault+0x322/0xb30
[ 1310.245194]  ? kasan_check_read+0x11/0x20
[ 1310.249361]  handle_mm_fault+0x43f/0xb30
[ 1310.253435]  __get_user_pages+0x7b6/0x1a40
[ 1310.257699]  ? follow_page_mask+0x19a0/0x19a0
[ 1310.262214]  ? memset+0x32/0x40
[ 1310.265511]  populate_vma_page_range+0x20d/0x2a0
[ 1310.270286]  __mm_populate+0x204/0x380
[ 1310.274196]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1310.279150]  vm_mmap_pgoff+0x213/0x230
[ 1310.283064]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1310.287919]  ? kasan_check_read+0x11/0x20
[ 1310.292081]  ? _copy_to_user+0xc9/0x120
[ 1310.296080]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1310.301633]  ksys_mmap_pgoff+0xf7/0x630
[ 1310.305634]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1310.310584]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1310.315358]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1310.320129]  ? do_syscall_64+0x26/0x610
[ 1310.324119]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1310.329505]  __x64_sys_mmap+0xe9/0x1b0
[ 1310.333420]  do_syscall_64+0x103/0x610
[ 1310.337330]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1310.342529] RIP: 0033:0x457f29
[ 1310.345743] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1310.364656] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1310.372376] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1310.379652] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1310.386927] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1310.394203] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1310.401478] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1310.423347] memory: usage 307200kB, limit 307200kB, failcnt 3176
[ 1310.444884] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1310.468151] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1310.489399] Memory cgroup stats for /syz5: cache:9720KB rss:236808KB rss_huge:208896KB shmem:9648KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9768KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1310.519054] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25437,uid=0
[ 1310.535261] Memory cgroup out of memory: Kill process 25437 (syz-executor.5) score 1135 or sacrifice child
[ 1310.549809] Killed process 25437 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9764kB
06:59:00 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0xa4000)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:00 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r1=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x10000000}, 0x0)

06:59:00 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:00 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1310.695560] IPVS: ftp: loaded support on port[0] = 21
[ 1310.698087] IPVS: ftp: loaded support on port[0] = 21
[ 1310.703182] IPVS: ftp: loaded support on port[0] = 21
06:59:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

06:59:00 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r1=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1)
linkat(r2, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x400)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x7fffffff, 0x5, 0x81, 0x0, 0x8, 0x3, 0x8, 0x9, 0x1, 0x8, 0x1a18, 0x6, 0x0, 0xff, 0x2f, 0x800, 0x100, 0xf69, 0x5})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd65)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:01 executing program 3:
inotify_init1(0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e24, @multicast2}})
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r1=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x28000000}, 0x0)

06:59:01 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1311.464436] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1311.493195] CPU: 0 PID: 25499 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1311.500088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1311.509533] Call Trace:
[ 1311.509556]  dump_stack+0x172/0x1f0
[ 1311.509579]  dump_header+0x10f/0xb6c
[ 1311.509598]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1311.509612]  ? ___ratelimit+0x60/0x595
[ 1311.509625]  ? do_raw_spin_unlock+0x57/0x270
[ 1311.509643]  oom_kill_process.cold+0x10/0x6f5
[ 1311.533187]  ? task_will_free_mem+0x139/0x6e0
[ 1311.533211]  out_of_memory+0x79a/0x1280
[ 1311.542185]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1311.542203]  ? oom_killer_disable+0x280/0x280
[ 1311.551266]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1311.551291]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1311.551305]  ? memcg_memory_event+0x40/0x40
[ 1311.551330]  ? _raw_spin_unlock+0x2d/0x50
[ 1311.560883]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1311.560898]  try_charge+0xfec/0x1570
[ 1311.560913]  ? find_held_lock+0x35/0x130
[ 1311.560947]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1311.560971]  ? kasan_check_read+0x11/0x20
[ 1311.570047]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1311.570067]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1311.570088]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1311.570107]  shmem_getpage_gfp+0x69b/0x3520
[ 1311.570138]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1311.579359]  ? lock_downgrade+0x810/0x810
[ 1311.579385]  shmem_fault+0x22d/0x760
[ 1311.579402]  ? __handle_mm_fault+0x349d/0x3f20
[ 1311.579422]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1311.579442]  ? lock_downgrade+0x810/0x810
[ 1311.579461]  __do_fault+0x116/0x4e0
[ 1311.592157]  __handle_mm_fault+0x2cbd/0x3f20
[ 1311.592179]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1311.592194]  ? find_held_lock+0x35/0x130
[ 1311.592208]  ? handle_mm_fault+0x322/0xb30
[ 1311.592234]  ? kasan_check_read+0x11/0x20
[ 1311.601199]  handle_mm_fault+0x43f/0xb30
[ 1311.601219]  __get_user_pages+0x7b6/0x1a40
[ 1311.601244]  ? follow_page_mask+0x19a0/0x19a0
[ 1311.610835]  ? memset+0x32/0x40
[ 1311.610859]  populate_vma_page_range+0x20d/0x2a0
[ 1311.610880]  __mm_populate+0x204/0x380
[ 1311.610898]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1311.610948]  vm_mmap_pgoff+0x213/0x230
[ 1311.620838]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1311.620854]  ? kasan_check_read+0x11/0x20
[ 1311.620870]  ? _copy_to_user+0xc9/0x120
[ 1311.620887]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1311.620907]  ksys_mmap_pgoff+0xf7/0x630
[ 1311.620938]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1311.628772]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1311.628788]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1311.628802]  ? do_syscall_64+0x26/0x610
[ 1311.628820]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1311.628838]  __x64_sys_mmap+0xe9/0x1b0
[ 1311.638673]  do_syscall_64+0x103/0x610
[ 1311.638696]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1311.638709] RIP: 0033:0x457f29
[ 1311.638722] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1311.638732] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1311.646474] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1311.646484] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1311.646493] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1311.646503] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1311.646512] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1311.651338] net_ratelimit: 26 callbacks suppressed
[ 1311.651346] protocol 88fb is buggy, dev hsr_slave_0
[ 1311.651398] protocol 88fb is buggy, dev hsr_slave_1
[ 1311.651484] protocol 88fb is buggy, dev hsr_slave_0
[ 1311.651523] protocol 88fb is buggy, dev hsr_slave_1
[ 1311.651624] protocol 88fb is buggy, dev hsr_slave_0
[ 1311.651663] protocol 88fb is buggy, dev hsr_slave_1
[ 1311.651757] protocol 88fb is buggy, dev hsr_slave_0
[ 1311.651799] protocol 88fb is buggy, dev hsr_slave_1
[ 1311.765581] memory: usage 307200kB, limit 307200kB, failcnt 3208
[ 1311.822488] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1311.906827] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1311.913295] Memory cgroup stats for /syz5: cache:9528KB rss:236796KB rss_huge:208896KB shmem:9588KB mapped_file:9504KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9708KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1311.937952] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25490,uid=0
[ 1311.959401] Memory cgroup out of memory: Kill process 25490 (syz-executor.5) score 1134 or sacrifice child
[ 1311.970584] Killed process 25490 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1312.002030] oom_reaper: reaped process 25490 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9712kB
[ 1312.019380] protocol 88fb is buggy, dev hsr_slave_0
[ 1312.024495] protocol 88fb is buggy, dev hsr_slave_1
06:59:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0)

06:59:02 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x40000000, 0x4, 0x400})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:02 executing program 3:
inotify_init1(0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:02 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:02 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1312.154973] IPVS: ftp: loaded support on port[0] = 21
[ 1312.195000] IPVS: ftp: loaded support on port[0] = 21
[ 1312.234338] IPVS: ftp: loaded support on port[0] = 21
[ 1312.313447] validate_nla: 3 callbacks suppressed
[ 1312.313456] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x7ffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1312.369497] __nla_parse: 3 callbacks suppressed
[ 1312.369506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000040)={0x0, 0x8})
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1312.593089] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1312.611501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x40000000}, 0x0)

06:59:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x2d1, 0x0, 0x0, 0xffffff21)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000180))

[ 1312.874334] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:03 executing program 3:
inotify_init1(0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1313.012324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1313.046061] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1313.107542] CPU: 0 PID: 25556 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1313.114435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1313.123802] Call Trace:
[ 1313.123825]  dump_stack+0x172/0x1f0
[ 1313.123846]  dump_header+0x10f/0xb6c
[ 1313.130042]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1313.130056]  ? ___ratelimit+0x60/0x595
[ 1313.130070]  ? do_raw_spin_unlock+0x57/0x270
[ 1313.130090]  oom_kill_process.cold+0x10/0x6f5
[ 1313.130109]  ? task_will_free_mem+0x139/0x6e0
[ 1313.156284]  out_of_memory+0x79a/0x1280
[ 1313.160284]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1313.165523]  ? oom_killer_disable+0x280/0x280
[ 1313.170033]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1313.170061]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1313.170077]  ? memcg_memory_event+0x40/0x40
[ 1313.170102]  ? _raw_spin_unlock+0x2d/0x50
[ 1313.170116]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1313.170130]  try_charge+0xfec/0x1570
[ 1313.179907]  ? find_held_lock+0x35/0x130
[ 1313.179932]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1313.179955]  ? kasan_check_read+0x11/0x20
[ 1313.179976]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1313.179995]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1313.180016]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1313.188480]  shmem_getpage_gfp+0x69b/0x3520
[ 1313.188515]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1313.188533]  ? lock_downgrade+0x810/0x810
[ 1313.188555]  shmem_fault+0x22d/0x760
[ 1313.197338]  ? __handle_mm_fault+0x349d/0x3f20
[ 1313.197360]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1313.197384]  ? lock_downgrade+0x810/0x810
06:59:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)

[ 1313.197404]  __do_fault+0x116/0x4e0
[ 1313.206412]  __handle_mm_fault+0x2cbd/0x3f20
[ 1313.206435]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1313.206450]  ? find_held_lock+0x35/0x130
[ 1313.206465]  ? handle_mm_fault+0x322/0xb30
[ 1313.206494]  ? kasan_check_read+0x11/0x20
[ 1313.215463]  handle_mm_fault+0x43f/0xb30
[ 1313.215486]  __get_user_pages+0x7b6/0x1a40
[ 1313.215514]  ? follow_page_mask+0x19a0/0x19a0
[ 1313.215541]  ? memset+0x32/0x40
[ 1313.225142]  populate_vma_page_range+0x20d/0x2a0
[ 1313.225165]  __mm_populate+0x204/0x380
[ 1313.225184]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1313.225211]  vm_mmap_pgoff+0x213/0x230
[ 1313.234713]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1313.234730]  ? kasan_check_read+0x11/0x20
[ 1313.234748]  ? _copy_to_user+0xc9/0x120
[ 1313.234767]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1313.242718]  ksys_mmap_pgoff+0xf7/0x630
[ 1313.242738]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1313.242756]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1313.242771]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1313.242802]  ? do_syscall_64+0x26/0x610
[ 1313.242821]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1313.252647]  __x64_sys_mmap+0xe9/0x1b0
[ 1313.252669]  do_syscall_64+0x103/0x610
[ 1313.252691]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1313.252703] RIP: 0033:0x457f29
[ 1313.252718] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1313.252726] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1313.260478] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1313.260488] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1313.260497] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1313.260507] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1313.260517] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1313.286146] memory: usage 307200kB, limit 307200kB, failcnt 3247
[ 1313.346748] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1313.465552] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1313.472602] Memory cgroup stats for /syz5: cache:9504KB rss:236760KB rss_huge:208896KB shmem:9564KB mapped_file:9504KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9660KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1313.519218] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25546,uid=0
[ 1313.548581] Memory cgroup out of memory: Kill process 25546 (syz-executor.5) score 1134 or sacrifice child
[ 1313.548657] Killed process 25546 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1313.580039] oom_reaper: reaped process 25546 (syz-executor.5), now anon-rss:0kB, file-rss:34692kB, shmem-rss:9664kB
06:59:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x48000000}, 0x0)

[ 1313.720069] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1313.764380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:03 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:03 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x8000, 0x0)
poll(&(0x7f0000000640)=[{r0, 0x10}], 0x1, 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x37, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0))
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x800000000}, 0x28, 0x2)

06:59:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6})
r3 = socket(0x10, 0x20000000802, 0x0)
write(r3, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x26, 0x0, 0x2}, 0x10)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)

06:59:04 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4c000000}, 0x0)

06:59:04 executing program 3:
inotify_init1(0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1314.038903] IPVS: ftp: loaded support on port[0] = 21
[ 1314.039509] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1314.057954] IPVS: ftp: loaded support on port[0] = 21
06:59:04 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1314.109525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x60000000}, 0x0)

[ 1314.271196] IPVS: ftp: loaded support on port[0] = 21
06:59:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x200, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1314.516537] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1314.547934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x68000000}, 0x0)

06:59:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x30d000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r3, 0x50, &(0x7f00000001c0)}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101001, 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="640000000400000006000000a5a263735daeed742fe8794be4a6544dca392cc2087477cf2e3e9bf7c0185623a4c0e30e6f4ab812087e97189ffdabfe7514d96f64262fcd56d4aec8e175f7b68d85807c110b3954bf2d337ea3742d105cc164118721bb5fa4d47efef05861d4f8598ef4"])
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1314.805971] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1314.845494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1315.068439] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1315.096416] CPU: 1 PID: 25616 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1315.103396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1315.112762] Call Trace:
[ 1315.115371]  dump_stack+0x172/0x1f0
[ 1315.119022]  dump_header+0x10f/0xb6c
[ 1315.122762]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1315.127878]  ? ___ratelimit+0x60/0x595
[ 1315.131776]  ? do_raw_spin_unlock+0x57/0x270
[ 1315.136317]  oom_kill_process.cold+0x10/0x6f5
[ 1315.140838]  ? task_will_free_mem+0x139/0x6e0
[ 1315.145357]  out_of_memory+0x79a/0x1280
[ 1315.149354]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1315.154484]  ? oom_killer_disable+0x280/0x280
[ 1315.159006]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1315.164143]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1315.168833]  ? memcg_memory_event+0x40/0x40
[ 1315.173274]  ? _raw_spin_unlock+0x2d/0x50
[ 1315.177454]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1315.182583]  try_charge+0xfec/0x1570
[ 1315.186316]  ? find_held_lock+0x35/0x130
[ 1315.190400]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1315.195266]  ? kasan_check_read+0x11/0x20
[ 1315.199436]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1315.204304]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1315.208949]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1315.213932]  shmem_getpage_gfp+0x69b/0x3520
[ 1315.218307]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1315.223439]  ? lock_downgrade+0x810/0x810
[ 1315.227628]  shmem_fault+0x22d/0x760
[ 1315.231363]  ? __handle_mm_fault+0x349d/0x3f20
[ 1315.235970]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1315.241279]  ? lock_downgrade+0x810/0x810
[ 1315.245460]  __do_fault+0x116/0x4e0
[ 1315.249115]  __handle_mm_fault+0x2cbd/0x3f20
[ 1315.253818]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1315.258685]  ? find_held_lock+0x35/0x130
[ 1315.262767]  ? handle_mm_fault+0x322/0xb30
[ 1315.267025]  ? kasan_check_read+0x11/0x20
[ 1315.271195]  handle_mm_fault+0x43f/0xb30
[ 1315.275281]  __get_user_pages+0x7b6/0x1a40
[ 1315.279548]  ? follow_page_mask+0x19a0/0x19a0
[ 1315.284057]  ? memset+0x32/0x40
[ 1315.287354]  populate_vma_page_range+0x20d/0x2a0
[ 1315.292136]  __mm_populate+0x204/0x380
[ 1315.296046]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1315.301008]  vm_mmap_pgoff+0x213/0x230
[ 1315.304917]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1315.309791]  ? kasan_check_read+0x11/0x20
[ 1315.313946]  ? _copy_to_user+0xc9/0x120
[ 1315.313965]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1315.313987]  ksys_mmap_pgoff+0xf7/0x630
[ 1315.323499]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1315.323516]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1315.323530]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1315.323543]  ? do_syscall_64+0x26/0x610
[ 1315.323560]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1315.323577]  __x64_sys_mmap+0xe9/0x1b0
[ 1315.323604]  do_syscall_64+0x103/0x610
[ 1315.323625]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1315.364287] RIP: 0033:0x457f29
[ 1315.367497] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1315.386503] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1315.394230] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1315.401515] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1315.408791] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1315.416071] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1315.423360] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1315.454236] memory: usage 307200kB, limit 307200kB, failcnt 3281
[ 1315.467538] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1315.475135] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1315.489544] Memory cgroup stats for /syz5: cache:9620KB rss:236760KB rss_huge:208896KB shmem:9548KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9696KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1315.545377] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25602,uid=0
[ 1315.567856] Memory cgroup out of memory: Kill process 25602 (syz-executor.5) score 1134 or sacrifice child
[ 1315.578490] Killed process 25602 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1315.599701] oom_reaper: reaped process 25602 (syz-executor.5), now anon-rss:0kB, file-rss:34820kB, shmem-rss:9500kB
06:59:05 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:05 executing program 3:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0)

06:59:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000080)={0x6, 0x7ff})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$FICLONE(r0, 0x40049409, r2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000))
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:05 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:05 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1315.745873] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1315.781471] IPVS: ftp: loaded support on port[0] = 21
[ 1315.793049] IPVS: ftp: loaded support on port[0] = 21
[ 1315.807008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1315.832586] IPVS: ftp: loaded support on port[0] = 21
06:59:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)

06:59:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
msgget(0x1, 0x200)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1316.094104] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1316.120882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000080)=""/124, 0x7c, 0x2163, &(0x7f0000000180)={0xa, 0x4e24, 0x9, @mcast1, 0x2}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000001c0)={0x8, 0x3, 'client0\x00', 0x0, "8775f95848c563f1", "30d499204df087fb86cf34fb3bdb7a4ee0ce4a7ce8e3f15e6e53498520b7cd01", 0x80000000, 0x4})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

06:59:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
set_robust_list(&(0x7f0000000200)={&(0x7f0000000180), 0x2, &(0x7f00000001c0)}, 0x18)
ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)={0x1, 0x4, 0x4, 0x8, {}, {0x4, 0xfffffffffffffffc, 0x6, 0xfffffffffffffffc, 0x101, 0x2, "50504ec3"}, 0x4a5, 0x1, @offset=0x8, 0x4})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1316.545359] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1316.578137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:06 executing program 3:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1316.819185] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1316.908448] CPU: 0 PID: 25682 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1316.915365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1316.924823] Call Trace:
[ 1316.927433]  dump_stack+0x172/0x1f0
[ 1316.931104]  dump_header+0x10f/0xb6c
[ 1316.934844]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1316.939973]  ? ___ratelimit+0x60/0x595
[ 1316.943883]  ? do_raw_spin_unlock+0x57/0x270
[ 1316.948317]  oom_kill_process.cold+0x10/0x6f5
[ 1316.952839]  ? task_will_free_mem+0x139/0x6e0
[ 1316.957361]  out_of_memory+0x79a/0x1280
[ 1316.961359]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1316.966576]  ? oom_killer_disable+0x280/0x280
[ 1316.971091]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1316.976232]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1316.980922]  ? memcg_memory_event+0x40/0x40
[ 1316.985277]  ? _raw_spin_unlock+0x2d/0x50
[ 1316.989470]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1316.994592]  try_charge+0xfec/0x1570
[ 1316.998320]  ? find_held_lock+0x35/0x130
[ 1317.002410]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1317.007295]  ? kasan_check_read+0x11/0x20
[ 1317.011494]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1317.016362]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1317.020973]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1317.025937]  shmem_getpage_gfp+0x69b/0x3520
[ 1317.030304]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1317.035434]  ? lock_downgrade+0x810/0x810
[ 1317.039622]  shmem_fault+0x22d/0x760
[ 1317.043347]  ? __handle_mm_fault+0x349d/0x3f20
[ 1317.047953]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1317.053257]  ? lock_downgrade+0x810/0x810
[ 1317.057429]  __do_fault+0x116/0x4e0
[ 1317.061092]  __handle_mm_fault+0x2cbd/0x3f20
[ 1317.065524]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1317.070388]  ? find_held_lock+0x35/0x130
[ 1317.074484]  ? handle_mm_fault+0x322/0xb30
[ 1317.078753]  ? kasan_check_read+0x11/0x20
[ 1317.082926]  handle_mm_fault+0x43f/0xb30
[ 1317.087012]  __get_user_pages+0x7b6/0x1a40
[ 1317.091284]  ? follow_page_mask+0x19a0/0x19a0
[ 1317.095813]  ? memset+0x32/0x40
[ 1317.099114]  populate_vma_page_range+0x20d/0x2a0
[ 1317.103896]  __mm_populate+0x204/0x380
[ 1317.107809]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1317.112773]  vm_mmap_pgoff+0x213/0x230
[ 1317.116782]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1317.121643]  ? kasan_check_read+0x11/0x20
[ 1317.125824]  ? _copy_to_user+0xc9/0x120
[ 1317.129907]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1317.135484]  ksys_mmap_pgoff+0xf7/0x630
[ 1317.139494]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1317.144452]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1317.149221]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1317.153993]  ? do_syscall_64+0x26/0x610
[ 1317.157986]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1317.163377]  __x64_sys_mmap+0xe9/0x1b0
[ 1317.167286]  do_syscall_64+0x103/0x610
[ 1317.171198]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1317.176401] RIP: 0033:0x457f29
[ 1317.179620] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1317.198542] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1317.206355] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1317.213643] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1317.220930] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1317.228215] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1317.235500] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1317.382724] memory: usage 307200kB, limit 307200kB, failcnt 3305
[ 1317.392805] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1317.419447] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1317.455726] Memory cgroup stats for /syz5: cache:9576KB rss:236760KB rss_huge:208896KB shmem:9516KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9648KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1317.534993] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25672,uid=0
[ 1317.565533] Memory cgroup out of memory: Kill process 25672 (syz-executor.5) score 1134 or sacrifice child
[ 1317.593345] Killed process 25672 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
06:59:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6})
r3 = socket(0x10, 0x20000000802, 0x0)
write(r3, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x26, 0x0, 0x2}, 0x10)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000280)=0x8)

06:59:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x81000000}, 0x0)

06:59:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000000000007c0e00000000000000100000000000000400000000000000900e02150000000005000000000000000800000000000000010000000000000002000000000000000900000000000000a02b5de4f5e2b1240e1d422fd8d0bada6aa742a343d576d7fc12eab4ab61cd1d95c33f40a93f927e5edb43f1a1440f3c807553a6c97f22464bfea92c8d"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:07 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6})
r3 = socket(0x10, 0x20000000802, 0x0)
write(r3, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x26, 0x0, 0x2}, 0x10)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8)

06:59:07 executing program 3:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1317.707237] IPVS: ftp: loaded support on port[0] = 21
[ 1317.727084] validate_nla: 1 callbacks suppressed
[ 1317.727094] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1317.792811] __nla_parse: 1 callbacks suppressed
[ 1317.792819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

[ 1317.869401] net_ratelimit: 26 callbacks suppressed
[ 1317.869409] protocol 88fb is buggy, dev hsr_slave_0
[ 1317.879532] protocol 88fb is buggy, dev hsr_slave_1
[ 1317.884685] protocol 88fb is buggy, dev hsr_slave_0
[ 1317.889788] protocol 88fb is buggy, dev hsr_slave_1
[ 1317.894944] protocol 88fb is buggy, dev hsr_slave_0
[ 1317.900045] protocol 88fb is buggy, dev hsr_slave_1
[ 1317.905190] protocol 88fb is buggy, dev hsr_slave_0
[ 1317.910302] protocol 88fb is buggy, dev hsr_slave_1
06:59:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6})
r3 = socket(0x10, 0x20000000802, 0x0)
write(r3, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x26, 0x0, 0x2}, 0x10)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000280)=0x8)

06:59:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:08 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1318.101130] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1318.128450] IPVS: ftp: loaded support on port[0] = 21
06:59:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000000003)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1318.230922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1318.260099] protocol 88fb is buggy, dev hsr_slave_0
[ 1318.265606] protocol 88fb is buggy, dev hsr_slave_1
06:59:08 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xd3020000}, 0x0)

[ 1318.453597] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1318.519507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1318.561392] IPVS: ftp: loaded support on port[0] = 21
06:59:08 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1318.622193] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2636f08244ac000f0666b9010000000f320f192c0f21ea0f090f0138643ef031a50018b800008ee0660fe8dd", 0x2c}], 0x1, 0x22, &(0x7f00000000c0), 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1318.805880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1319.111314] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1319.159589] CPU: 0 PID: 25763 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1319.166580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1319.175948] Call Trace:
[ 1319.178553]  dump_stack+0x172/0x1f0
[ 1319.182201]  dump_header+0x10f/0xb6c
[ 1319.185935]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1319.191055]  ? ___ratelimit+0x60/0x595
[ 1319.194956]  ? do_raw_spin_unlock+0x57/0x270
[ 1319.199395]  oom_kill_process.cold+0x10/0x6f5
[ 1319.203938]  ? task_will_free_mem+0x139/0x6e0
[ 1319.208458]  out_of_memory+0x79a/0x1280
[ 1319.212451]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1319.217579]  ? oom_killer_disable+0x280/0x280
[ 1319.222097]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1319.227226]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1319.231921]  ? memcg_memory_event+0x40/0x40
[ 1319.236283]  ? _raw_spin_unlock+0x2d/0x50
[ 1319.240443]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1319.245684]  try_charge+0xfec/0x1570
[ 1319.249410]  ? find_held_lock+0x35/0x130
[ 1319.253492]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1319.258356]  ? kasan_check_read+0x11/0x20
[ 1319.262641]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1319.267503]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1319.272106]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1319.277080]  shmem_getpage_gfp+0x69b/0x3520
[ 1319.281437]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1319.286563]  ? lock_downgrade+0x810/0x810
[ 1319.290739]  shmem_fault+0x22d/0x760
[ 1319.294475]  ? __handle_mm_fault+0x349d/0x3f20
[ 1319.299079]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1319.304376]  ? lock_downgrade+0x810/0x810
[ 1319.308547]  __do_fault+0x116/0x4e0
[ 1319.312195]  __handle_mm_fault+0x2cbd/0x3f20
[ 1319.316626]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1319.321487]  ? find_held_lock+0x35/0x130
[ 1319.325565]  ? handle_mm_fault+0x322/0xb30
[ 1319.329828]  ? kasan_check_read+0x11/0x20
[ 1319.333993]  handle_mm_fault+0x43f/0xb30
[ 1319.338073]  __get_user_pages+0x7b6/0x1a40
[ 1319.342335]  ? follow_page_mask+0x19a0/0x19a0
[ 1319.346854]  ? memset+0x32/0x40
[ 1319.350156]  populate_vma_page_range+0x20d/0x2a0
[ 1319.354953]  __mm_populate+0x204/0x380
[ 1319.358869]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1319.363830]  vm_mmap_pgoff+0x213/0x230
[ 1319.367744]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1319.372604]  ? kasan_check_read+0x11/0x20
[ 1319.376777]  ? _copy_to_user+0xc9/0x120
[ 1319.380795]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1319.386391]  ksys_mmap_pgoff+0xf7/0x630
[ 1319.390390]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1319.395337]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1319.400111]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1319.404886]  ? do_syscall_64+0x26/0x610
[ 1319.408876]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1319.414276]  __x64_sys_mmap+0xe9/0x1b0
[ 1319.418182]  do_syscall_64+0x103/0x610
[ 1319.422091]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1319.427292] RIP: 0033:0x457f29
[ 1319.430496] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1319.449412] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1319.457138] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1319.464419] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1319.471717] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1319.479005] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1319.486307] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
06:59:09 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

06:59:09 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xc082, 0x0)
ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x3, [0x9, 0x7f, 0x1]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
socket$kcm(0x29, 0x0, 0x0)
sync_file_range(r1, 0x7, 0xb2b, 0x1)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1319.536126] memory: usage 307200kB, limit 307200kB, failcnt 3331
[ 1319.567326] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:09 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1319.583324] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1319.594703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1319.624307] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1319.645703] Memory cgroup stats for /syz5: cache:9552KB rss:236760KB rss_huge:208896KB shmem:9480KB mapped_file:9504KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9696KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1319.685933] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1319.712919] IPVS: ftp: loaded support on port[0] = 21
[ 1319.728269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x10000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0)

[ 1319.951232] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1319.985121] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1320.312697] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25757,uid=0
[ 1320.346961] Memory cgroup out of memory: Kill process 25757 (syz-executor.5) score 1134 or sacrifice child
[ 1320.377295] Killed process 25757 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1320.418350] oom_reaper: reaped process 25757 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9500kB
06:59:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xcb, 0x8102)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r3}, 0x10)
accept$unix(r3, &(0x7f00000001c0), &(0x7f0000000240)=0x6e)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000180)={0x2, 0x100, 0xf2, 0x8})

06:59:10 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

06:59:10 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:10 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:10 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1320.676932] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1320.697761] IPVS: ftp: loaded support on port[0] = 21
[ 1320.721691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1320.768478] IPVS: ftp: loaded support on port[0] = 21
[ 1320.800708] IPVS: ftp: loaded support on port[0] = 21
06:59:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

06:59:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2)
write$P9_RSTAT(r3, &(0x7f0000000080)={0x55, 0x7d, 0x1, {0x0, 0x4e, 0x0, 0x400, {0x20, 0x0, 0x3}, 0x11080000, 0x3, 0x8, 0x401, 0x9, '/dev/kvm\x00', 0x9, '/dev/kvm\x00', 0x0, '', 0x9, '/dev/kvm\x00'}}, 0x55)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1321.066221] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1321.146492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

06:59:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0)
ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1321.438478] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1321.480700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:11 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r0=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x40030000000000}, 0x0)

[ 1321.751468] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1321.820725] CPU: 0 PID: 25849 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1321.827607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1321.836971] Call Trace:
[ 1321.839571]  dump_stack+0x172/0x1f0
[ 1321.843218]  dump_header+0x10f/0xb6c
[ 1321.846944]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1321.852071]  ? ___ratelimit+0x60/0x595
[ 1321.855963]  ? do_raw_spin_unlock+0x57/0x270
[ 1321.860381]  oom_kill_process.cold+0x10/0x6f5
[ 1321.864891]  ? task_will_free_mem+0x139/0x6e0
[ 1321.869489]  out_of_memory+0x79a/0x1280
[ 1321.873473]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1321.878586]  ? oom_killer_disable+0x280/0x280
[ 1321.883087]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1321.888206]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1321.892881]  ? memcg_memory_event+0x40/0x40
[ 1321.897224]  ? _raw_spin_unlock+0x2d/0x50
[ 1321.901377]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1321.906488]  try_charge+0xfec/0x1570
[ 1321.910205]  ? find_held_lock+0x35/0x130
[ 1321.914279]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1321.919137]  ? kasan_check_read+0x11/0x20
[ 1321.923301]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1321.928158]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1321.932752]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1321.937693]  shmem_getpage_gfp+0x69b/0x3520
[ 1321.942051]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1321.947164]  ? lock_downgrade+0x810/0x810
[ 1321.951339]  shmem_fault+0x22d/0x760
[ 1321.955066]  ? __handle_mm_fault+0x349d/0x3f20
[ 1321.959667]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1321.964962]  ? lock_downgrade+0x810/0x810
[ 1321.969128]  __do_fault+0x116/0x4e0
[ 1321.972769]  __handle_mm_fault+0x2cbd/0x3f20
[ 1321.977196]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1321.982067]  ? find_held_lock+0x35/0x130
[ 1321.986141]  ? handle_mm_fault+0x322/0xb30
[ 1321.990410]  ? kasan_check_read+0x11/0x20
[ 1321.994579]  handle_mm_fault+0x43f/0xb30
[ 1321.998663]  __get_user_pages+0x7b6/0x1a40
[ 1322.002926]  ? follow_page_mask+0x19a0/0x19a0
[ 1322.007446]  ? memset+0x32/0x40
[ 1322.010766]  populate_vma_page_range+0x20d/0x2a0
[ 1322.015551]  __mm_populate+0x204/0x380
[ 1322.019456]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1322.024416]  vm_mmap_pgoff+0x213/0x230
[ 1322.028332]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1322.033198]  ? kasan_check_read+0x11/0x20
[ 1322.037359]  ? _copy_to_user+0xc9/0x120
[ 1322.041351]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1322.046908]  ksys_mmap_pgoff+0xf7/0x630
[ 1322.050905]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1322.055857]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1322.060632]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1322.065405]  ? do_syscall_64+0x26/0x610
[ 1322.069395]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1322.074778]  __x64_sys_mmap+0xe9/0x1b0
[ 1322.078688]  do_syscall_64+0x103/0x610
[ 1322.082596]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1322.087795] RIP: 0033:0x457f29
[ 1322.090989] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1322.109891] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1322.117588] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1322.124845] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1322.132099] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1322.139359] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1322.146631] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1322.159692] memory: usage 307200kB, limit 307200kB, failcnt 3348
[ 1322.165867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1322.165880] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1322.179047] Memory cgroup stats for /syz5: cache:9564KB rss:236760KB rss_huge:208896KB shmem:9624KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9724KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1322.202336] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25841,uid=0
[ 1322.217906] Memory cgroup out of memory: Kill process 25841 (syz-executor.5) score 1134 or sacrifice child
[ 1322.228258] Killed process 25841 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
06:59:12 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x48202, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})

06:59:12 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r0=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0)

06:59:12 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:12 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x100000000000000}, 0x0)

[ 1322.387516] IPVS: ftp: loaded support on port[0] = 21
[ 1322.402682] IPVS: ftp: loaded support on port[0] = 21
06:59:12 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r0=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1322.445369] IPVS: ftp: loaded support on port[0] = 21
06:59:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet(0x2, 0x805, 0x1f)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000001c0)={<r4=>0x0, 0x7fffffff, 0x80}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r4, 0x5}, &(0x7f00000002c0)=0x8)
r5 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, r5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000482, 0x8000080008]})
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r6, 0x0, 0x12, &(0x7f00000000c0)='keyringsecurity)(\x00'}, 0x30)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))

06:59:12 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r1=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x200000000000000}, 0x0)

06:59:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @remote, 0xf1a6}, @in6={0xa, 0x4e23, 0x200, @local, 0x8}, @in6={0xa, 0x4e21, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}], 0x64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1322.846840] validate_nla: 3 callbacks suppressed
[ 1322.846849] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1322.910895] __nla_parse: 3 callbacks suppressed
[ 1322.910903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1323.128994] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1323.155871] CPU: 1 PID: 25916 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1323.162780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1323.172143] Call Trace:
[ 1323.174746]  dump_stack+0x172/0x1f0
[ 1323.178522]  dump_header+0x10f/0xb6c
[ 1323.182260]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1323.187387]  ? ___ratelimit+0x60/0x595
[ 1323.191301]  ? do_raw_spin_unlock+0x57/0x270
[ 1323.195742]  oom_kill_process.cold+0x10/0x6f5
[ 1323.200266]  ? task_will_free_mem+0x139/0x6e0
[ 1323.204794]  out_of_memory+0x79a/0x1280
[ 1323.208810]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1323.214061]  ? oom_killer_disable+0x280/0x280
[ 1323.218578]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1323.223712]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1323.228403]  ? memcg_memory_event+0x40/0x40
[ 1323.232759]  ? _raw_spin_unlock+0x2d/0x50
[ 1323.236931]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1323.242051]  try_charge+0xfec/0x1570
[ 1323.245770]  ? find_held_lock+0x35/0x130
[ 1323.249847]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1323.254703]  ? kasan_check_read+0x11/0x20
[ 1323.258866]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1323.263727]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1323.268330]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1323.273276]  shmem_getpage_gfp+0x69b/0x3520
[ 1323.277640]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1323.282765]  ? lock_downgrade+0x810/0x810
[ 1323.286942]  shmem_fault+0x22d/0x760
[ 1323.290671]  ? __handle_mm_fault+0x349d/0x3f20
[ 1323.295271]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1323.300568]  ? lock_downgrade+0x810/0x810
[ 1323.304740]  __do_fault+0x116/0x4e0
[ 1323.308378]  __handle_mm_fault+0x2cbd/0x3f20
[ 1323.312806]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1323.317659]  ? find_held_lock+0x35/0x130
[ 1323.321734]  ? handle_mm_fault+0x322/0xb30
[ 1323.325992]  ? kasan_check_read+0x11/0x20
[ 1323.330155]  handle_mm_fault+0x43f/0xb30
[ 1323.334234]  __get_user_pages+0x7b6/0x1a40
[ 1323.338491]  ? follow_page_mask+0x19a0/0x19a0
[ 1323.343001]  ? memset+0x32/0x40
[ 1323.346296]  populate_vma_page_range+0x20d/0x2a0
[ 1323.351067]  __mm_populate+0x204/0x380
[ 1323.354972]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1323.359937]  vm_mmap_pgoff+0x213/0x230
[ 1323.363842]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1323.368685]  ? kasan_check_read+0x11/0x20
[ 1323.372830]  ? _copy_to_user+0xc9/0x120
[ 1323.376808]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1323.382338]  ksys_mmap_pgoff+0xf7/0x630
[ 1323.386308]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1323.391242]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1323.395990]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1323.400735]  ? do_syscall_64+0x26/0x610
[ 1323.404711]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1323.410080]  __x64_sys_mmap+0xe9/0x1b0
[ 1323.413969]  do_syscall_64+0x103/0x610
[ 1323.417867]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1323.423047] RIP: 0033:0x457f29
[ 1323.426228] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1323.445125] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1323.452824] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1323.460085] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1323.467356] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1323.474617] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1323.481879] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1323.489808] memory: usage 307200kB, limit 307200kB, failcnt 3369
[ 1323.495968] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1323.503977] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1323.510537] Memory cgroup stats for /syz5: cache:9524KB rss:236828KB rss_huge:208896KB shmem:9584KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9680KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1323.532533] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25902,uid=0
[ 1323.547720] Memory cgroup out of memory: Kill process 25902 (syz-executor.5) score 1134 or sacrifice child
[ 1323.557739] Killed process 25902 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1323.571823] oom_reaper: reaped process 25902 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9500kB
06:59:13 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x300000000000000}, 0x0)

06:59:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x39a7f62f80d56477, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {<r4=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000180)={r4, 0x1})

06:59:13 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:13 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r1=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:13 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1323.677830] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1323.706651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1323.717431] IPVS: ftp: loaded support on port[0] = 21
06:59:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x400000000000000}, 0x0)

[ 1323.744312] IPVS: ftp: loaded support on port[0] = 21
[ 1323.750683] IPVS: ftp: loaded support on port[0] = 21
06:59:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)

[ 1323.962817] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1000000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1324.145414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1324.179394] net_ratelimit: 26 callbacks suppressed
[ 1324.179401] protocol 88fb is buggy, dev hsr_slave_0
[ 1324.184469] protocol 88fb is buggy, dev hsr_slave_1
[ 1324.194634] protocol 88fb is buggy, dev hsr_slave_0
[ 1324.199730] protocol 88fb is buggy, dev hsr_slave_1
[ 1324.204886] protocol 88fb is buggy, dev hsr_slave_0
[ 1324.209985] protocol 88fb is buggy, dev hsr_slave_1
[ 1324.215112] protocol 88fb is buggy, dev hsr_slave_0
[ 1324.220206] protocol 88fb is buggy, dev hsr_slave_1
06:59:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x500000000000000}, 0x0)

06:59:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x2, 0x8, 0x26f77525, 0x0, 0x400})
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x10240)

06:59:14 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r1=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1324.499521] protocol 88fb is buggy, dev hsr_slave_0
[ 1324.504678] protocol 88fb is buggy, dev hsr_slave_1
[ 1324.550985] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1324.583653] CPU: 0 PID: 25972 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1324.590602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1324.590608] Call Trace:
[ 1324.590631]  dump_stack+0x172/0x1f0
[ 1324.590654]  dump_header+0x10f/0xb6c
[ 1324.590673]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1324.590687]  ? ___ratelimit+0x60/0x595
[ 1324.590700]  ? do_raw_spin_unlock+0x57/0x270
[ 1324.590718]  oom_kill_process.cold+0x10/0x6f5
[ 1324.590739]  ? task_will_free_mem+0x139/0x6e0
[ 1324.590763]  out_of_memory+0x79a/0x1280
[ 1324.590782]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1324.590813]  ? oom_killer_disable+0x280/0x280
[ 1324.590828]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1324.590852]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1324.655778]  ? memcg_memory_event+0x40/0x40
[ 1324.660140]  ? _raw_spin_unlock+0x2d/0x50
[ 1324.664308]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1324.669425]  try_charge+0xfec/0x1570
[ 1324.673169]  ? find_held_lock+0x35/0x130
[ 1324.677253]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1324.682111]  ? kasan_check_read+0x11/0x20
[ 1324.686274]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1324.691135]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1324.691155]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1324.691174]  shmem_getpage_gfp+0x69b/0x3520
[ 1324.691203]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1324.700779]  ? lock_downgrade+0x810/0x810
[ 1324.700817]  shmem_fault+0x22d/0x760
[ 1324.700834]  ? __handle_mm_fault+0x349d/0x3f20
[ 1324.700854]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1324.700876]  ? lock_downgrade+0x810/0x810
[ 1324.710275]  __do_fault+0x116/0x4e0
[ 1324.710296]  __handle_mm_fault+0x2cbd/0x3f20
[ 1324.710318]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1324.710332]  ? find_held_lock+0x35/0x130
[ 1324.710346]  ? handle_mm_fault+0x322/0xb30
[ 1324.710374]  ? kasan_check_read+0x11/0x20
[ 1324.718207]  handle_mm_fault+0x43f/0xb30
[ 1324.718229]  __get_user_pages+0x7b6/0x1a40
[ 1324.718257]  ? follow_page_mask+0x19a0/0x19a0
[ 1324.718279]  ? memset+0x32/0x40
[ 1324.728109]  populate_vma_page_range+0x20d/0x2a0
[ 1324.728132]  __mm_populate+0x204/0x380
[ 1324.728151]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1324.728178]  vm_mmap_pgoff+0x213/0x230
[ 1324.735940]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1324.735956]  ? kasan_check_read+0x11/0x20
[ 1324.735974]  ? _copy_to_user+0xc9/0x120
[ 1324.735992]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1324.736012]  ksys_mmap_pgoff+0xf7/0x630
[ 1324.745233]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1324.745251]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1324.745266]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1324.745299]  ? do_syscall_64+0x26/0x610
[ 1324.745314]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1324.745333]  __x64_sys_mmap+0xe9/0x1b0
[ 1324.753614]  do_syscall_64+0x103/0x610
[ 1324.753637]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1324.753649] RIP: 0033:0x457f29
[ 1324.753664] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1324.753674] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1324.761850] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1324.761859] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1324.761868] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1324.761877] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1324.761887] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1324.780136] memory: usage 307200kB, limit 307200kB, failcnt 3405
[ 1324.801106] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1324.874072] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1324.940386] Memory cgroup stats for /syz5: cache:9632KB rss:236828KB rss_huge:208896KB shmem:9680KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9756KB active_anon:236828KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1324.963383] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=25965,uid=0
[ 1324.978784] Memory cgroup out of memory: Kill process 25965 (syz-executor.5) score 1134 or sacrifice child
[ 1324.989562] Killed process 25965 (syz-executor.5) total-vm:72576kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:9500kB
[ 1325.002532] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1325.017120] oom_reaper: reaped process 25965 (syz-executor.5), now anon-rss:0kB, file-rss:34704kB, shmem-rss:9760kB
[ 1325.021201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:17 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:17 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000000010000, 0x0)
ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000080)={0x100000000, 0x4, @value=0x2})

[ 1327.928710] IPVS: ftp: loaded support on port[0] = 21
[ 1327.945770] IPVS: ftp: loaded support on port[0] = 21
06:59:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6})
r3 = socket(0x10, 0x20000000802, 0x0)
write(r3, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x26, 0x0, 0x2}, 0x10)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={<r4=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000004c0)={r4, 0x7, 0x100}, 0x8)
memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1)
pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0)

06:59:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x600000000000000}, 0x0)

06:59:18 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x102000000001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1328.187719] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1328.285997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xb8f2, 0x80)
ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000280)={0xfffffffffffffff7, 0xffffffff, 0x9200000000000000, 0x4c, &(0x7f0000000080)=""/76, 0x0, &(0x7f0000000180), 0xb4, &(0x7f00000001c0)=""/180})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000002c0)={0x1, 0xfffffffffffff801, 0x8e5, 0x4, [], [], [], 0x6, 0x3f, 0x4, 0x0, "e7fbd56dbdfd4172c069ba7a3e080047"})

06:59:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x700000000000000}, 0x0)

06:59:18 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6})
r4 = socket(0x10, 0x20000000802, 0x0)
write(r4, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x26, 0x0, 0x2}, 0x10)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f00000005c0), 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={<r5=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000004c0)={r5, 0x7, 0x100}, 0x8)
memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1)
pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="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"]})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
geteuid()

[ 1328.515196] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1328.550321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r3 = add_key$user(&(0x7f0000000840)='user\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="823a06fb36d4fbb9acb8986dc8a97687efca5c9ecad2d10ebb9b985b9a371632e8a0f45fc71b7c96a8fb4316b8e17efbe05350ce34ffcdd50a258dc27b20bf55b7c01d053fbc36c41f2c38319728c6479bcdd52c4a65474b1af03bc1c3dba297b41e6198542a4cdc3eab9f01685f4aff203024c689574ab6479051136914b576810b4ae58c45095dc5ed2888eca4b668a3bff4ba96edd58a993348ab8d03408bc36e8bc49c1ee9bdd42fb3b26b6490290b6c12d108a463e761ef8d6f41f479efd68d55931f5698321da82f4f1c10a63cafae9378029dd4396ab81c213078fc", 0xdf, 0xfffffffffffffff8)
r4 = add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000a40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$instantiate(0xc, r3, &(0x7f00000009c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '/dev/kvm\x00', 0x20, 0x3ff}, 0x36, r4)
sysinfo(&(0x7f00000003c0)=""/244)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
recvmsg$kcm(r2, &(0x7f0000000800)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000680)=""/145, 0x91}], 0x4, &(0x7f0000000780)=""/66, 0x42}, 0x10000)
clone(0x6080000, &(0x7f0000000a80)="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", &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)="61370ae9c3dc2f808ee5bd78dab8525bb7cdd624dd0023ab1a81739a12c7f9fa383ec591f21472d68a29c2258118742c3d0bd3721d42f8f236b93ca699ddef2254b7b1c4ae27f803ebf2be9bb7fd0084cbe97ceb083b019cb0ad4af59944c940facbcefffc1995ec60c0f0")
r5 = syz_open_dev$midi(&(0x7f0000001b80)='/dev/midi#\x00', 0x2, 0x101000)
ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000001bc0)={0x7, 0x3, 0xb2e, 0x7fffffff, 0x1, 0x0, 0x9, 0x1f, 0x2, 0x2, 0x2, 0x1})
r6 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000000)=0x80)
setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f00000002c0)={@in={0x2, 0x4e23, @multicast2}, {&(0x7f0000000180)=""/213, 0xd5}, &(0x7f0000000280), 0x8}, 0xa0)

[ 1328.619983] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1328.723544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1328.763567] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1328.783911] CPU: 1 PID: 26019 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1328.790808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1328.800173] Call Trace:
[ 1328.802783]  dump_stack+0x172/0x1f0
[ 1328.806456]  dump_header+0x10f/0xb6c
[ 1328.810200]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1328.815320]  ? ___ratelimit+0x60/0x595
[ 1328.819222]  ? do_raw_spin_unlock+0x57/0x270
[ 1328.823650]  oom_kill_process.cold+0x10/0x6f5
[ 1328.828172]  ? task_will_free_mem+0x139/0x6e0
[ 1328.832700]  out_of_memory+0x79a/0x1280
[ 1328.832723]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1328.841793]  ? oom_killer_disable+0x280/0x280
[ 1328.846300]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1328.851435]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1328.856119]  ? memcg_memory_event+0x40/0x40
[ 1328.856143]  ? _raw_spin_unlock+0x2d/0x50
[ 1328.864702]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1328.869820]  try_charge+0xfec/0x1570
06:59:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x800000000000000}, 0x0)

[ 1328.873640]  ? find_held_lock+0x35/0x130
[ 1328.877715]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1328.882595]  ? kasan_check_read+0x11/0x20
[ 1328.886764]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1328.891623]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1328.896242]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1328.901190]  shmem_getpage_gfp+0x69b/0x3520
[ 1328.905547]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1328.910661]  ? lock_downgrade+0x810/0x810
[ 1328.914820]  shmem_fault+0x22d/0x760
[ 1328.918528]  ? __handle_mm_fault+0x349d/0x3f20
[ 1328.923126]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1328.928429]  ? lock_downgrade+0x810/0x810
[ 1328.932597]  __do_fault+0x116/0x4e0
[ 1328.936238]  __handle_mm_fault+0x2cbd/0x3f20
[ 1328.940666]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1328.945537]  ? find_held_lock+0x35/0x130
[ 1328.949611]  ? handle_mm_fault+0x322/0xb30
[ 1328.953872]  ? kasan_check_read+0x11/0x20
[ 1328.958042]  handle_mm_fault+0x43f/0xb30
[ 1328.962118]  __get_user_pages+0x7b6/0x1a40
[ 1328.966382]  ? follow_page_mask+0x19a0/0x19a0
[ 1328.966438] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1328.970900]  ? memset+0x32/0x40
[ 1328.970929]  populate_vma_page_range+0x20d/0x2a0
[ 1328.970947]  __mm_populate+0x204/0x380
[ 1328.970965]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1328.970990]  vm_mmap_pgoff+0x213/0x230
[ 1328.971011]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1328.971026]  ? kasan_check_read+0x11/0x20
[ 1329.003598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1329.003903]  ? _copy_to_user+0xc9/0x120
[ 1329.020492]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1329.026054]  ksys_mmap_pgoff+0xf7/0x630
[ 1329.030054]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1329.034997]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1329.039769]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1329.044539]  ? do_syscall_64+0x26/0x610
[ 1329.048532]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1329.053923]  __x64_sys_mmap+0xe9/0x1b0
[ 1329.057828]  do_syscall_64+0x103/0x610
[ 1329.061739]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1329.066930] RIP: 0033:0x457f29
[ 1329.066945] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1329.066955] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1329.096752] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1329.104041] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1329.111312] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1329.111322] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1329.111330] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1329.188732] memory: usage 307200kB, limit 307200kB, failcnt 3419
[ 1329.212163] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1329.219103] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1329.231787] Memory cgroup stats for /syz5: cache:9796KB rss:236820KB rss_huge:208896KB shmem:9676KB mapped_file:9768KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9824KB active_anon:236840KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1329.266861] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26012,uid=0
[ 1329.288812] Memory cgroup out of memory: Kill process 26012 (syz-executor.5) score 1135 or sacrifice child
[ 1329.305877] Killed process 26012 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9764kB
[ 1329.319578] oom_reaper: reaped process 26012 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9764kB
06:59:19 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0)

06:59:19 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6})
r4 = socket(0x10, 0x20000000802, 0x0)
write(r4, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x26, 0x0, 0x2}, 0x10)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f00000005c0), 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={<r5=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000004c0)={r5, 0x7, 0x100}, 0x8)
r6 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1)
pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="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"]})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
geteuid()
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8)

06:59:19 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:19 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1329.466502] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1329.494477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1329.511807] IPVS: ftp: loaded support on port[0] = 21
[ 1329.563568] IPVS: ftp: loaded support on port[0] = 21
[ 1329.570356] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:19 executing program 0:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000300)={0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x200, 0xcbd, 0x3, 0x1})
r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000280)={0x9fe3, 0x3})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
write$P9_RSETATTR(r3, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="02002bbd7000fcdbdf25140000001c0006000800010005030000040002000800010007000000040002005400010008000300ff7f0000100001007564703a73797a3200000000380004001400010002004e20000000000000000000000000200002000a004e2200000008fe8000000000000000000000000000bb000000001400090008000100fdffffff08000100010f0000c00004000c00010073797a30000000001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c000700080001001f00000014000700080003000900000008000400090000003c000700080004000300000008000300000000000800020003000000080004000000000008000400ffffff7f08000200ff00000008000300930800001400010062726f6164636173742d6c696e6b00000c00070008000300000100001400070008000400090000000800030008000000280007000800010005000000080001000200000055910c000400000001000000000008000100000200004c00010038000400200001000a004e2300000004fe80000000000000000000000000000d030000001400020002004e20e0000002000000000000000008000300ff7f000008000300010000007c0004001c000700080004007f000000080003009f0effff08000100090000001c00070008000400550e00ce9c3d1e92c195350008000100150000000c00010073797a30000000003400070008000200ff070000080003000600000008000400ff0f0000080002000b230000080002000100000008000400000200000c0005000800010075647000"], 0x254}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r6 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x309042)
setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000080)={0x8f, @multicast2, 0x4e20, 0x1, 'none\x00', 0xc, 0x4, 0x36}, 0x2c)
lsetxattr$security_selinux(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.selinux\x00', &(0x7f0000000600)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25, 0x3)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff7000/0x3000)=nil, 0x3000}, &(0x7f0000000540)=0x10)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000340)={0xffffffffffff603b, 0x1800000})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b, 0x0, [0x7, 0x2, 0x9, 0x2]})

[ 1329.625415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0)

[ 1329.794700] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1329.816618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x1000000000000000}, 0x0)

[ 1329.972709] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1329.999900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x2000000000000000}, 0x0)

[ 1330.150470] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1330.158640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1330.166149] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1330.199554] CPU: 0 PID: 26092 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1330.206460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1330.215825] Call Trace:
[ 1330.218439]  dump_stack+0x172/0x1f0
[ 1330.222092]  dump_header+0x10f/0xb6c
[ 1330.225831]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1330.230958]  ? ___ratelimit+0x60/0x595
[ 1330.234865]  ? do_raw_spin_unlock+0x57/0x270
[ 1330.239290]  oom_kill_process.cold+0x10/0x6f5
[ 1330.239326]  ? task_will_free_mem+0x139/0x6e0
[ 1330.239350]  out_of_memory+0x79a/0x1280
[ 1330.239369]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1330.239385]  ? oom_killer_disable+0x280/0x280
[ 1330.248365]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1330.248391]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1330.248407]  ? memcg_memory_event+0x40/0x40
[ 1330.248432]  ? _raw_spin_unlock+0x2d/0x50
[ 1330.280320]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1330.285431]  try_charge+0xfec/0x1570
[ 1330.285447]  ? find_held_lock+0x35/0x130
[ 1330.285471]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1330.285492]  ? kasan_check_read+0x11/0x20
[ 1330.302234]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1330.302254]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1330.302275]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1330.302309]  shmem_getpage_gfp+0x69b/0x3520
[ 1330.302339]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1330.326084]  ? lock_downgrade+0x810/0x810
[ 1330.330260]  shmem_fault+0x22d/0x760
[ 1330.334006]  ? __handle_mm_fault+0x349d/0x3f20
[ 1330.338617]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1330.343922]  ? lock_downgrade+0x810/0x810
[ 1330.348202]  __do_fault+0x116/0x4e0
[ 1330.352111]  __handle_mm_fault+0x2cbd/0x3f20
[ 1330.356544]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1330.361398]  ? find_held_lock+0x35/0x130
[ 1330.365470]  ? handle_mm_fault+0x322/0xb30
[ 1330.369731]  ? kasan_check_read+0x11/0x20
[ 1330.373892]  handle_mm_fault+0x43f/0xb30
[ 1330.377969]  __get_user_pages+0x7b6/0x1a40
[ 1330.382238]  ? follow_page_mask+0x19a0/0x19a0
[ 1330.386751]  ? memset+0x32/0x40
[ 1330.390045]  populate_vma_page_range+0x20d/0x2a0
[ 1330.394819]  __mm_populate+0x204/0x380
[ 1330.398757]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1330.403736]  vm_mmap_pgoff+0x213/0x230
[ 1330.407628]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1330.412478]  ? kasan_check_read+0x11/0x20
[ 1330.416629]  ? _copy_to_user+0xc9/0x120
[ 1330.420606]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1330.426160]  ksys_mmap_pgoff+0xf7/0x630
[ 1330.430155]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1330.435271]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1330.440049]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1330.444819]  ? do_syscall_64+0x26/0x610
[ 1330.448808]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1330.454368]  __x64_sys_mmap+0xe9/0x1b0
[ 1330.458272]  do_syscall_64+0x103/0x610
[ 1330.462197]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1330.467393] RIP: 0033:0x457f29
[ 1330.470592] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1330.489523] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
06:59:20 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1330.497247] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1330.504536] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1330.511812] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1330.519083] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1330.526356] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1330.533975] net_ratelimit: 26 callbacks suppressed
[ 1330.533983] protocol 88fb is buggy, dev hsr_slave_0
[ 1330.534038] protocol 88fb is buggy, dev hsr_slave_1
[ 1330.534138] protocol 88fb is buggy, dev hsr_slave_0
[ 1330.534179] protocol 88fb is buggy, dev hsr_slave_1
[ 1330.534295] protocol 88fb is buggy, dev hsr_slave_0
[ 1330.534334] protocol 88fb is buggy, dev hsr_slave_1
[ 1330.534409] protocol 88fb is buggy, dev hsr_slave_0
[ 1330.534450] protocol 88fb is buggy, dev hsr_slave_1
[ 1330.540571] memory: usage 307200kB, limit 307200kB, failcnt 3451
[ 1330.624418] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1330.631510] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1330.637819] Memory cgroup stats for /syz5: cache:9592KB rss:236772KB rss_huge:208896KB shmem:9592KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9768KB active_anon:236840KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1330.670700] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26082,uid=0
[ 1330.699844] Memory cgroup out of memory: Kill process 26082 (syz-executor.5) score 1135 or sacrifice child
[ 1330.710017] Killed process 26082 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9764kB
[ 1330.726933] oom_reaper: reaped process 26082 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9772kB
[ 1330.739473] protocol 88fb is buggy, dev hsr_slave_0
[ 1330.744579] protocol 88fb is buggy, dev hsr_slave_1
06:59:20 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x2800000000000000}, 0x0)

06:59:20 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:20 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1330.838777] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1330.859652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x3f00000000000000}, 0x0)

06:59:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4000000000000000}, 0x0)

06:59:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4800000000000000}, 0x0)

[ 1331.451169] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1331.489425] CPU: 0 PID: 26146 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1331.496404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1331.505773] Call Trace:
[ 1331.508385]  dump_stack+0x172/0x1f0
[ 1331.512044]  dump_header+0x10f/0xb6c
[ 1331.515764]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1331.520874]  ? ___ratelimit+0x60/0x595
[ 1331.524772]  ? do_raw_spin_unlock+0x57/0x270
[ 1331.529213]  oom_kill_process.cold+0x10/0x6f5
[ 1331.533727]  ? task_will_free_mem+0x139/0x6e0
[ 1331.538248]  out_of_memory+0x79a/0x1280
[ 1331.542243]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1331.547396]  ? oom_killer_disable+0x280/0x280
[ 1331.551906]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1331.557032]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1331.561713]  ? memcg_memory_event+0x40/0x40
[ 1331.566059]  ? _raw_spin_unlock+0x2d/0x50
[ 1331.570238]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1331.575352]  try_charge+0xfec/0x1570
[ 1331.579075]  ? find_held_lock+0x35/0x130
[ 1331.583262]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1331.588125]  ? kasan_check_read+0x11/0x20
[ 1331.592293]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1331.597155]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1331.601768]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1331.606714]  shmem_getpage_gfp+0x69b/0x3520
[ 1331.611065]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1331.616199]  ? lock_downgrade+0x810/0x810
[ 1331.620848]  shmem_fault+0x22d/0x760
[ 1331.624576]  ? __handle_mm_fault+0x349d/0x3f20
[ 1331.629177]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1331.634491]  ? lock_downgrade+0x810/0x810
[ 1331.638658]  __do_fault+0x116/0x4e0
[ 1331.642305]  __handle_mm_fault+0x2cbd/0x3f20
[ 1331.646731]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1331.651583]  ? find_held_lock+0x35/0x130
[ 1331.655658]  ? handle_mm_fault+0x322/0xb30
[ 1331.659926]  ? kasan_check_read+0x11/0x20
[ 1331.664099]  handle_mm_fault+0x43f/0xb30
[ 1331.668195]  __get_user_pages+0x7b6/0x1a40
[ 1331.672448]  ? follow_page_mask+0x19a0/0x19a0
[ 1331.676962]  ? memset+0x32/0x40
[ 1331.680256]  populate_vma_page_range+0x20d/0x2a0
[ 1331.685027]  __mm_populate+0x204/0x380
[ 1331.688926]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1331.693878]  vm_mmap_pgoff+0x213/0x230
[ 1331.697782]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1331.702636]  ? kasan_check_read+0x11/0x20
[ 1331.706792]  ? _copy_to_user+0xc9/0x120
[ 1331.710778]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1331.716332]  ksys_mmap_pgoff+0xf7/0x630
[ 1331.720322]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1331.725265]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1331.730044]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1331.734814]  ? do_syscall_64+0x26/0x610
[ 1331.738904]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1331.744287]  __x64_sys_mmap+0xe9/0x1b0
[ 1331.748203]  do_syscall_64+0x103/0x610
[ 1331.752110]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1331.757308] RIP: 0033:0x457f29
[ 1331.760508] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1331.779418] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1331.787429] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1331.794708] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1331.801985] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1331.809265] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1331.816540] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1331.827071] memory: usage 307196kB, limit 307200kB, failcnt 3472
[ 1331.833410] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1331.840371] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1331.846527] Memory cgroup stats for /syz5: cache:9680KB rss:236772KB rss_huge:208896KB shmem:9680KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9736KB active_anon:236840KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1331.868453] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26139,uid=0
[ 1331.883338] Memory cgroup out of memory: Kill process 26139 (syz-executor.5) score 1134 or sacrifice child
[ 1331.893431] Killed process 26139 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1331.907154] oom_reaper: reaped process 26139 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9740kB
06:59:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})
r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x77, 0x98000)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={<r4=>0x0})
ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000200)={0x40, 0x20, &(0x7f0000000180)="c1c8434f4c30a6e9c155959c6b7e794bc714881fa99ec469972934506aaac9b02e3d3f711fe7c477b7c3fa640647b343200b18e14f98cfbd6e9a2f69931f31b3a19dfb1447dd2835d7e876e7f2bf9342744436706efe3e6adfdc4a52117e84f01ef19d23fb39a93ef1", {0x6, 0x3, 0x34324d59, 0x8, 0x7ff, 0x4, 0x1, 0x9}})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000000c0)={r4, 0x1})

06:59:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x4c00000000000000}, 0x0)

06:59:22 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:22 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000020000, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000380)='L9\x18\xb4C\x19^Ug\xe7i\xb3\xec9\xed\xd5\x95Bg:\xfeAZ\x82\x8c\xc7(\x19c\n\x87\xba\xb8W\xb3\xf0\x84\xfa\xc3G{\xd6_t\xef\xa1\xb6\xf7\xf5Z\xf1\x12\x04\ab\xc4\x9ab\x90\xf5\x1a_v\xdc\x13W\x1cGt\xb4\xbf\xe3\xd2\x97\x16\xb4X\xdb6\xa0\xa9\xcc\x8e\xb3\rK=\x8d\xff\xf4\x1d\x02\xb8<y\xda\x87\x9a\xc3\xe1\b\t>Oz4\xa8')
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6})
r4 = socket(0x10, 0x20000000802, 0x0)
write(r4, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100b2b4e3681c4e3855353b28346e8fd58b56cd5fb183e37e67fc51be5081d66a4d20e8a4681edd703b3d5d2d1e27c5f8b4d2f0664a3afa0e62e0dad4562e84661368ff22c53c757cc59afa191ef45e82daf311cef0b376983fbf215aaebda3ceb44bee70fdc620e7542aa4ada69d0f8bee909a351afbb746cda456c0dc975008d17caf595eccbeed354341ecbb5b9c1d147d3b70e523f7d4e4b750c7e6fc6039c63fb7e9583edd7bbed6fd92a819b31405b7897e9f185201bc331b", 0xde)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x26, 0x0, 0x2}, 0x10)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f00000005c0), 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={<r5=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000004c0)={r5, 0x7, 0x100}, 0x8)
r6 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1)
pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="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"]})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
geteuid()
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8)

06:59:22 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:22 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1332.436323] IPVS: ftp: loaded support on port[0] = 21
[ 1332.452993] IPVS: ftp: loaded support on port[0] = 21
06:59:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6000000000000000}, 0x0)

06:59:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = dup2(r3, r3)
ioctl$NBD_SET_SOCK(r1, 0xab00, r4)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:22 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6800000000000000}, 0x0)

06:59:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1f, 0x200040)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0xff)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000140)={0x3, 0x0, [0x2, 0x3, 0x40, 0x1f, 0x2, 0x8000, 0x9, 0x401]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000300)={0x0, @reserved})
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7f, 0x0, [0x200000485, 0xfffffffffffffff9]})
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000000c0))
syz_open_pts(r1, 0x22000)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000006000000000000000100000000000000359a34770000000000100000000000000000000000000000000000000000000000000000000000000800000006000000080000000000000006e7ffffff00000000000000000000000fd182780000030000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"])

06:59:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x6c00000000000000}, 0x0)

06:59:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:23 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x7400000000000000}, 0x0)

[ 1333.253677] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1333.259453] validate_nla: 10 callbacks suppressed
[ 1333.259461] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "fa"}, 0x2, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

[ 1333.305119] CPU: 1 PID: 26187 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1333.312007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1333.321371] Call Trace:
[ 1333.323973]  dump_stack+0x172/0x1f0
[ 1333.327634]  dump_header+0x10f/0xb6c
[ 1333.331358]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1333.331374]  ? ___ratelimit+0x60/0x595
[ 1333.331389]  ? do_raw_spin_unlock+0x57/0x270
[ 1333.331410]  oom_kill_process.cold+0x10/0x6f5
[ 1333.331429]  ? task_will_free_mem+0x139/0x6e0
[ 1333.331450]  out_of_memory+0x79a/0x1280
[ 1333.340436]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1333.340454]  ? oom_killer_disable+0x280/0x280
[ 1333.340468]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1333.340493]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1333.340507]  ? memcg_memory_event+0x40/0x40
[ 1333.340530]  ? _raw_spin_unlock+0x2d/0x50
[ 1333.340551]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1333.390757]  try_charge+0xfec/0x1570
[ 1333.394485]  ? find_held_lock+0x35/0x130
[ 1333.398576]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1333.403442]  ? kasan_check_read+0x11/0x20
[ 1333.407607]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1333.412468]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1333.417091]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1333.422056]  shmem_getpage_gfp+0x69b/0x3520
[ 1333.426429]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1333.431555]  ? lock_downgrade+0x810/0x810
[ 1333.435735]  shmem_fault+0x22d/0x760
[ 1333.439462]  ? __handle_mm_fault+0x349d/0x3f20
[ 1333.444071]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1333.449494]  ? lock_downgrade+0x810/0x810
[ 1333.453666]  __do_fault+0x116/0x4e0
[ 1333.457314]  __handle_mm_fault+0x2cbd/0x3f20
[ 1333.461741]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1333.466597]  ? find_held_lock+0x35/0x130
[ 1333.470671]  ? handle_mm_fault+0x322/0xb30
[ 1333.474934]  ? kasan_check_read+0x11/0x20
[ 1333.479102]  handle_mm_fault+0x43f/0xb30
[ 1333.483183]  __get_user_pages+0x7b6/0x1a40
[ 1333.487444]  ? follow_page_mask+0x19a0/0x19a0
[ 1333.491959]  ? memset+0x32/0x40
[ 1333.495256]  populate_vma_page_range+0x20d/0x2a0
[ 1333.500038]  __mm_populate+0x204/0x380
[ 1333.503940]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1333.509111]  vm_mmap_pgoff+0x213/0x230
[ 1333.513027]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1333.517882]  ? kasan_check_read+0x11/0x20
[ 1333.522055]  ? _copy_to_user+0xc9/0x120
[ 1333.526049]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1333.531607]  ksys_mmap_pgoff+0xf7/0x630
[ 1333.535601]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1333.540548]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1333.545312]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1333.550081]  ? do_syscall_64+0x26/0x610
[ 1333.554069]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1333.559447]  __x64_sys_mmap+0xe9/0x1b0
[ 1333.563359]  do_syscall_64+0x103/0x610
[ 1333.567269]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1333.572463] RIP: 0033:0x457f29
[ 1333.575666] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1333.594697] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
06:59:23 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1333.602423] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1333.609706] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1333.617453] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1333.624734] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1333.632035] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1333.714754] IPVS: ftp: loaded support on port[0] = 21
[ 1333.721442] __nla_parse: 10 callbacks suppressed
[ 1333.721453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1333.974124] memory: usage 307200kB, limit 307200kB, failcnt 3501
[ 1333.980558] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1333.980568] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1333.994409] Memory cgroup stats for /syz5: cache:9596KB rss:236828KB rss_huge:208896KB shmem:9596KB mapped_file:9504KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9692KB active_anon:236840KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1334.016999] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26176,uid=0
[ 1334.036391] Memory cgroup out of memory: Kill process 26176 (syz-executor.5) score 1134 or sacrifice child
[ 1334.047755] Killed process 26176 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1334.077910] oom_reaper: reaped process 26176 (syz-executor.5), now anon-rss:0kB, file-rss:34704kB, shmem-rss:9696kB
06:59:24 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:24 executing program 0 (fault-call:1 fault-nth:0):
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x7a00000000000000}, 0x0)

06:59:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000280)={0x3, 0x12, [{0x4, 0x0, 0x56b}, {0x20, 0x0, 0x2}, {0x1, 0x0, 0x351b}]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000240))
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x2000000000007b, 0x0, [0x200000485, 0x8000080005]})

06:59:24 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:24 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1334.273655] FAULT_INJECTION: forcing a failure.
[ 1334.273655] name failslab, interval 1, probability 0, space 0, times 0
[ 1334.285771] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1334.306026] IPVS: ftp: loaded support on port[0] = 21
[ 1334.330105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1334.348694] IPVS: ftp: loaded support on port[0] = 21
[ 1334.377475] CPU: 0 PID: 26256 Comm: syz-executor.0 Not tainted 5.0.0+ #7
[ 1334.384369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1334.393726] Call Trace:
[ 1334.396310]  dump_stack+0x172/0x1f0
[ 1334.399938]  should_fail.cold+0xa/0x1b
[ 1334.403831]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1334.408927]  ? lock_downgrade+0x810/0x810
[ 1334.413081]  ? ___might_sleep+0x163/0x280
[ 1334.417225]  __should_failslab+0x121/0x190
[ 1334.421452]  should_failslab+0x9/0x14
[ 1334.425243]  kmem_cache_alloc_node+0x264/0x710
[ 1334.429822]  __alloc_skb+0xd5/0x5e0
[ 1334.433440]  ? skb_scrub_packet+0x440/0x440
[ 1334.437754]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1334.443282]  ? netlink_autobind.isra.0+0x228/0x310
[ 1334.448203]  netlink_sendmsg+0x97b/0xd70
[ 1334.452256]  ? netlink_unicast+0x720/0x720
[ 1334.456483]  ? aa_sock_msg_perm.isra.0+0xba/0x170
[ 1334.461316]  ? apparmor_socket_sendmsg+0x2a/0x30
[ 1334.466060]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1334.471589]  ? security_socket_sendmsg+0x93/0xc0
[ 1334.476345]  ? netlink_unicast+0x720/0x720
[ 1334.480583]  sock_sendmsg+0xdd/0x130
[ 1334.484287]  sock_write_iter+0x27c/0x3e0
[ 1334.488427]  ? sock_sendmsg+0x130/0x130
[ 1334.492400]  ? __fget+0x340/0x540
[ 1334.495858]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1334.501384]  ? iov_iter_init+0xea/0x220
[ 1334.505363]  __vfs_write+0x613/0x8e0
[ 1334.509070]  ? kernel_read+0x120/0x120
[ 1334.512956]  ? common_file_perm+0x1d6/0x6f0
[ 1334.517270]  ? apparmor_file_permission+0x25/0x30
[ 1334.522111]  ? rw_verify_area+0x118/0x360
[ 1334.526252]  vfs_write+0x20c/0x580
[ 1334.529808]  ksys_write+0xea/0x1f0
[ 1334.533340]  ? __ia32_sys_read+0xb0/0xb0
[ 1334.537421]  ? do_syscall_64+0x26/0x610
[ 1334.541386]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1334.546737]  ? do_syscall_64+0x26/0x610
[ 1334.550705]  __x64_sys_write+0x73/0xb0
[ 1334.554593]  do_syscall_64+0x103/0x610
[ 1334.558474]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1334.563652] RIP: 0033:0x457f29
[ 1334.566832] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1334.585722] RSP: 002b:00007f9704f80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1334.593420] RAX: ffffffffffffffda RBX: 00007f9704f80c90 RCX: 0000000000457f29
[ 1334.600679] RDX: 0000000000000024 RSI: 0000000020000d00 RDI: 0000000000000003
[ 1334.607950] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1334.615210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9704f816d4
[ 1334.622964] R13: 00000000004c3cdf R14: 00000000004dc5e8 R15: 0000000000000004
06:59:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x8100000000000000}, 0x0)

06:59:24 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1334.763787] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1334.821612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0)

[ 1335.039646] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1335.047120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1335.052222] IPVS: ftp: loaded support on port[0] = 21
06:59:25 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1335.154478] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1335.234349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:25 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xd302000000000000}, 0x0)

[ 1335.552536] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1335.615664] CPU: 1 PID: 26266 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1335.622818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1335.632184] Call Trace:
[ 1335.634785]  dump_stack+0x172/0x1f0
[ 1335.638430]  dump_header+0x10f/0xb6c
[ 1335.642155]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1335.642172]  ? ___ratelimit+0x60/0x595
[ 1335.642187]  ? do_raw_spin_unlock+0x57/0x270
[ 1335.642211]  oom_kill_process.cold+0x10/0x6f5
[ 1335.660069]  ? task_will_free_mem+0x139/0x6e0
[ 1335.660092]  out_of_memory+0x79a/0x1280
[ 1335.660112]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1335.660130]  ? oom_killer_disable+0x280/0x280
[ 1335.660144]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1335.660166]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1335.678186]  ? memcg_memory_event+0x40/0x40
[ 1335.678213]  ? _raw_spin_unlock+0x2d/0x50
[ 1335.678228]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1335.701529]  try_charge+0xfec/0x1570
[ 1335.705255]  ? find_held_lock+0x35/0x130
[ 1335.709333]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1335.714200]  ? kasan_check_read+0x11/0x20
[ 1335.718370]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1335.723235]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1335.727845]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1335.732784]  shmem_getpage_gfp+0x69b/0x3520
[ 1335.732817]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1335.732844]  ? lock_downgrade+0x810/0x810
[ 1335.746400]  shmem_fault+0x22d/0x760
[ 1335.750127]  ? __handle_mm_fault+0x349d/0x3f20
[ 1335.754725]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1335.760021]  ? lock_downgrade+0x810/0x810
[ 1335.764184]  __do_fault+0x116/0x4e0
[ 1335.767817]  __handle_mm_fault+0x2cbd/0x3f20
[ 1335.772239]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1335.772254]  ? find_held_lock+0x35/0x130
[ 1335.772270]  ? handle_mm_fault+0x322/0xb30
[ 1335.772298]  ? kasan_check_read+0x11/0x20
[ 1335.772315]  handle_mm_fault+0x43f/0xb30
[ 1335.772340]  __get_user_pages+0x7b6/0x1a40
[ 1335.772367]  ? follow_page_mask+0x19a0/0x19a0
[ 1335.803144]  ? memset+0x32/0x40
[ 1335.806437]  populate_vma_page_range+0x20d/0x2a0
[ 1335.806459]  __mm_populate+0x204/0x380
[ 1335.806478]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1335.820034]  vm_mmap_pgoff+0x213/0x230
[ 1335.823941]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1335.828793]  ? kasan_check_read+0x11/0x20
[ 1335.832960]  ? _copy_to_user+0xc9/0x120
[ 1335.836950]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1335.842508]  ksys_mmap_pgoff+0xf7/0x630
[ 1335.846489]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1335.851417]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1335.851433]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1335.851449]  ? do_syscall_64+0x26/0x610
[ 1335.851467]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1335.851485]  __x64_sys_mmap+0xe9/0x1b0
[ 1335.851503]  do_syscall_64+0x103/0x610
[ 1335.851522]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1335.851533] RIP: 0033:0x457f29
[ 1335.851547] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1335.851555] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1335.851567] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1335.851575] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1335.851585] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1335.905407] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1335.905416] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1336.063403] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1336.082519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1336.386995] memory: usage 307200kB, limit 307200kB, failcnt 3538
[ 1336.408198] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1336.430399] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1336.450373] Memory cgroup stats for /syz5: cache:9600KB rss:236828KB rss_huge:208896KB shmem:9600KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9668KB active_anon:236840KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1336.516111] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26259,uid=0
[ 1336.576169] Memory cgroup out of memory: Kill process 26259 (syz-executor.5) score 1134 or sacrifice child
[ 1336.599018] Killed process 26259 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9500kB
[ 1336.619493] oom_reaper: reaped process 26259 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9672kB
06:59:26 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:26 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:26 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0)

06:59:26 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57312302", 0x24)

06:59:26 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1336.723017] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1336.739372] net_ratelimit: 26 callbacks suppressed
[ 1336.739381] protocol 88fb is buggy, dev hsr_slave_0
[ 1336.749482] protocol 88fb is buggy, dev hsr_slave_1
[ 1336.749554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1336.754582] protocol 88fb is buggy, dev hsr_slave_0
[ 1336.768114] protocol 88fb is buggy, dev hsr_slave_1
[ 1336.773269] protocol 88fb is buggy, dev hsr_slave_0
[ 1336.778332] protocol 88fb is buggy, dev hsr_slave_1
[ 1336.783499] protocol 88fb is buggy, dev hsr_slave_0
[ 1336.788671] protocol 88fb is buggy, dev hsr_slave_1
06:59:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0)

[ 1336.832974] IPVS: ftp: loaded support on port[0] = 21
[ 1336.851953] IPVS: ftp: loaded support on port[0] = 21
[ 1336.871092] IPVS: ftp: loaded support on port[0] = 21
06:59:27 executing program 0:
r0 = socket(0x0, 0x200000007ff, 0xd68)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xfffffffffffffdb1)

[ 1336.972385] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1336.979490] protocol 88fb is buggy, dev hsr_slave_0
[ 1336.984896] protocol 88fb is buggy, dev hsr_slave_1
06:59:27 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54)

[ 1337.109655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xffffffff00000000}, 0x0)

06:59:27 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000000)="2400000ba1a735e00018a38a45defc0e800000000000000000000000080002ba57310c00dce9106d792c94a1b72a06bb51b25cb742e8b35dc502cfa9c7a008c06f20fb2ff1c727", 0xffffffffffffff28)

[ 1337.415285] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:27 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1337.506221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1337.642772] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1337.669437] CPU: 1 PID: 26317 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1337.676326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1337.685690] Call Trace:
[ 1337.688296]  dump_stack+0x172/0x1f0
[ 1337.691941]  dump_header+0x10f/0xb6c
[ 1337.695703]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1337.700820]  ? ___ratelimit+0x60/0x595
[ 1337.704716]  ? do_raw_spin_unlock+0x57/0x270
[ 1337.709136]  oom_kill_process.cold+0x10/0x6f5
[ 1337.713659]  ? task_will_free_mem+0x139/0x6e0
[ 1337.718178]  out_of_memory+0x79a/0x1280
[ 1337.722175]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1337.727292]  ? oom_killer_disable+0x280/0x280
[ 1337.731795]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1337.736916]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1337.741598]  ? memcg_memory_event+0x40/0x40
[ 1337.745934]  ? _raw_spin_unlock+0x2d/0x50
[ 1337.750087]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1337.755200]  try_charge+0xfec/0x1570
[ 1337.758919]  ? find_held_lock+0x35/0x130
[ 1337.763005]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1337.767870]  ? kasan_check_read+0x11/0x20
[ 1337.772039]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1337.776895]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1337.781496]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1337.786942]  shmem_getpage_gfp+0x69b/0x3520
[ 1337.791296]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1337.796416]  ? lock_downgrade+0x810/0x810
[ 1337.800581]  shmem_fault+0x22d/0x760
[ 1337.804309]  ? __handle_mm_fault+0x349d/0x3f20
[ 1337.808910]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1337.814207]  ? lock_downgrade+0x810/0x810
[ 1337.818372]  __do_fault+0x116/0x4e0
[ 1337.822019]  __handle_mm_fault+0x2cbd/0x3f20
[ 1337.826451]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1337.831305]  ? find_held_lock+0x35/0x130
[ 1337.835379]  ? handle_mm_fault+0x322/0xb30
[ 1337.839637]  ? kasan_check_read+0x11/0x20
[ 1337.843814]  handle_mm_fault+0x43f/0xb30
[ 1337.847894]  __get_user_pages+0x7b6/0x1a40
[ 1337.852165]  ? follow_page_mask+0x19a0/0x19a0
[ 1337.856688]  ? memset+0x32/0x40
[ 1337.859984]  populate_vma_page_range+0x20d/0x2a0
[ 1337.864758]  __mm_populate+0x204/0x380
[ 1337.868666]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1337.873613]  vm_mmap_pgoff+0x213/0x230
[ 1337.877529]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1337.882383]  ? kasan_check_read+0x11/0x20
[ 1337.886546]  ? _copy_to_user+0xc9/0x120
[ 1337.890535]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1337.896083]  ksys_mmap_pgoff+0xf7/0x630
[ 1337.900070]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1337.905023]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1337.909790]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1337.914551]  ? do_syscall_64+0x26/0x610
[ 1337.918540]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1337.923923]  __x64_sys_mmap+0xe9/0x1b0
[ 1337.927834]  do_syscall_64+0x103/0x610
[ 1337.931744]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1337.936957] RIP: 0033:0x457f29
[ 1337.940168] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1337.959091] RSP: 002b:00007ff8443d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1337.966810] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1337.974087] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1337.981383] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1337.988668] R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff8443d66d4
[ 1337.995945] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1338.005104] memory: usage 307200kB, limit 307200kB, failcnt 3577
[ 1338.017612] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1338.031970] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1338.045279] Memory cgroup stats for /syz5: cache:9612KB rss:236772KB rss_huge:208896KB shmem:9612KB mapped_file:9636KB dirty:0KB writeback:0KB swap:0KB inactive_anon:9772KB active_anon:236840KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1338.119235] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26313,uid=0
[ 1338.163242] Memory cgroup out of memory: Kill process 26313 (syz-executor.5) score 1135 or sacrifice child
[ 1338.200487] Killed process 26313 (syz-executor.5) total-vm:72576kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:9764kB
[ 1338.231263] oom_reaper: reaped process 26313 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:9776kB
06:59:28 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:28 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfcba573101de0000c2ae000000000000000000000000", 0x24)

06:59:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0)

06:59:28 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:28 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000465f8e)=""/114, 0x37)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4)

06:59:28 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1338.351741] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:28 executing program 0:
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x480400)
r0 = socket(0x10, 0x20000000802, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1338.393671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1338.416261] IPVS: ftp: loaded support on port[0] = 21
[ 1338.423306] IPVS: ftp: loaded support on port[0] = 21
06:59:28 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x381, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x111, 0xd}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0xb60043e}}, 0x10)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000280)={0x2, [0x3, 0x19d3]}, 0x8)
connect$tipc(r3, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x4}}, 0x10)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000300)={0x28, 0x2, 0x0, {0x1, 0x6, 0x3}}, 0x28)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000340)=""/88)
prctl$PR_GET_KEEPCAPS(0x7)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@deltaction={0x114, 0x31, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0xa8, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffffffffffb5}}, {0x14, 0x1, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x14, 0x5, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x18, 0x1c, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x93}}, {0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x17, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x3, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8}}, {0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000050}, 0x4)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000005c0)={0xffffffffffffffff, 0x1, 0x80000000, 0x3, 0xffffffffffffffe0})
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000600)={0x100000000, 0x200, 0xeab, 0x8, <r5=>0x0}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000680)={r5, 0x5}, &(0x7f00000006c0)=0x8)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000804)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000840)={r5, 0x2}, &(0x7f0000000880)=0x8)
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000008c0)={@local, 0x7d, r4})
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000900)={r4, 0x1, 0x6, @random="06ff6e4b2aba"}, 0x10)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000940)=""/168)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x11c, r7, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffff001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000c40)={'ifb0\x00', 0x262355b6e00d1cac})
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000c80))
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)
sendmsg$can_raw(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x1d, r4}, 0x10, &(0x7f0000000dc0)={&(0x7f0000000d80)=@can={{0x1, 0x1, 0x5, 0x2}, 0x7, 0x3, 0x0, 0x0, "3e6b242dbe109896"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000e40)={0xa2f, 0x9, 0x4, 'queue0\x00', 0x86})
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000f00)=""/159)
gettid()

06:59:28 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8400, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c)
ioctl$RTC_UIE_OFF(r1, 0x7004)
r2 = socket(0x10, 0x20000000802, 0x0)
write(r2, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x2dfc374c, 0x8000, 0x4, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r3, @in={{0x2, 0x4e23, @loopback}}}, 0x84)
lseek(r1, 0x0, 0x4)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r4=>0x0})
tkill(r4, 0x3)

[ 1338.568994] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
pipe(0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680})
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xa)
r2 = dup3(r1, r1, 0x80000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x4, [0x0, 0x0, <r3=>0x0, 0x0]}, &(0x7f0000000240)=0x14)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x3}, &(0x7f0000000400)=0x8)
r4 = socket$inet6(0xa, 0x6, 0x0)
mq_open(&(0x7f00000000c0)='bdev\\\x00', 0x40, 0x40, &(0x7f0000000100)={0x9, 0xfff, 0x0, 0x0, 0x6, 0x3, 0xb555})
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0xea010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x80)

[ 1338.682830] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:28 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0x47)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=<r1=>0x0)
ioprio_get$pid(0x2, r1)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))

[ 1338.771863] __nla_parse: 1 callbacks suppressed
[ 1338.771872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:29 executing program 5:
unshare(0x0)
r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000004c0)=""/4096)
r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r5, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0))
readv(r1, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/182, 0xb6}, {&(0x7f0000000100)=""/20, 0x14}], 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1ff)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r6 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x18\x00\x00\x00\xe3[\xf8\x00\x00\x82\n\xb6\rw\x03\xb8\xab\xda\x81\xab*\x86\x04\xf5\xa0\xc4\\U\x8d\xf55\xd4g\x11\xf2\x8f\xe6\n', 0x0)
pwrite64(r4, &(0x7f0000000380)="ed8ef07aa41701a7714b58d845e6c57f5d8240598e541367719c749417ddf8dd05d5f18d9d34f712f06a391d58c6579977b52d29b339fc76aad79aa476e8c82d77b8791efc62e963f39d9529b056296f8f1d789f768d2eee34d46710cd6c359fd18c4d1a6ac39869585e6e3ee42d4702c39fb4ff78d68658b5260d03a08b869a6f0957e11a242a40bdc43ef240ceeb64b282a6f9ec1dbeeb8064f99b9f08eb6da931c34e872f7d50b1", 0xa9, 0x0)
pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
set_tid_address(&(0x7f0000000440))
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xfffffffffffffffd}, @mss={0x2, 0xfffffffffffffe00}, @mss={0x2, 0x5}, @window={0x3, 0x0, 0x1}], 0x4)
sendfile(r4, r4, &(0x7f0000000000)=0x1c00, 0x2000005)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'ipddp0\x00', {0x2, 0x4e24, @broadcast}})
ioctl$LOOP_CLR_FD(r4, 0x4c01)
ioctl$LOOP_SET_FD(r4, 0x4c00, r6)

06:59:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:29 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TIOCNOTTY(r1, 0x5422)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xfda1)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x400, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="0001700241108001001ef4234c0abab92ebd3bd9de11d7702d90b0d8efa12249ba37ead6c74882b09dfc689dc6df3e5bb60390710091ab00152e2c6f37a4bc0a52eb717c1aed091975bcbc41c107098a7755ca3f"])
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080))

[ 1339.530695] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1339.538335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1339.691712] print_req_error: I/O error, dev loop0, sector 400 flags 80700
06:59:29 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
pipe(0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680})
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xa)
r2 = dup3(r1, r1, 0x80000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x4, [0x0, 0x0, <r3=>0x0, 0x0]}, &(0x7f0000000240)=0x14)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x3}, &(0x7f0000000400)=0x8)
r4 = socket$inet6(0xa, 0x6, 0x0)
mq_open(&(0x7f00000000c0)='bdev\\\x00', 0x40, 0x40, &(0x7f0000000100)={0x9, 0xfff, 0x0, 0x0, 0x6, 0x3, 0xb555})
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0xea010000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x80)

06:59:29 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:29 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
getsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55)

06:59:29 executing program 5:
unshare(0x0)
r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000004c0)=""/4096)
r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r5, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0))
readv(r1, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/182, 0xb6}, {&(0x7f0000000100)=""/20, 0x14}], 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1ff)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
r6 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x18\x00\x00\x00\xe3[\xf8\x00\x00\x82\n\xb6\rw\x03\xb8\xab\xda\x81\xab*\x86\x04\xf5\xa0\xc4\\U\x8d\xf55\xd4g\x11\xf2\x8f\xe6\n', 0x0)
pwrite64(r4, &(0x7f0000000380)="ed8ef07aa41701a7714b58d845e6c57f5d8240598e541367719c749417ddf8dd05d5f18d9d34f712f06a391d58c6579977b52d29b339fc76aad79aa476e8c82d77b8791efc62e963f39d9529b056296f8f1d789f768d2eee34d46710cd6c359fd18c4d1a6ac39869585e6e3ee42d4702c39fb4ff78d68658b5260d03a08b869a6f0957e11a242a40bdc43ef240ceeb64b282a6f9ec1dbeeb8064f99b9f08eb6da931c34e872f7d50b1", 0xa9, 0x0)
pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
set_tid_address(&(0x7f0000000440))
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xfffffffffffffffd}, @mss={0x2, 0xfffffffffffffe00}, @mss={0x2, 0x5}, @window={0x3, 0x0, 0x1}], 0x4)
sendfile(r4, r4, &(0x7f0000000000)=0x1c00, 0x2000005)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'ipddp0\x00', {0x2, 0x4e24, @broadcast}})
ioctl$LOOP_CLR_FD(r4, 0x4c01)
ioctl$LOOP_SET_FD(r4, 0x4c00, r6)

[ 1339.791810] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1339.810691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:30 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x1, 0x1)
mlockall(0x4)
r1 = socket(0xa, 0x20000000804, 0x40000001)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1339.918933] IPVS: ftp: loaded support on port[0] = 21
06:59:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:30 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0x22)
r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2)
getpeername$packet(r1, &(0x7f0000000a00)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000a80)={@mcast1, r2}, 0x14)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000280)=0x1c000, 0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000240))
getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e6cc0a7a1000000000f82d00000000", @ANYRES16=r3, @ANYBLOB="01032abd7000fcdbdf250a000000280007000800020006000000080002000500000008000100040000000c000400322f000000000000b400040024000700080004006c0000000800010019000000080002000800000008000200060000002c000700080001001a00000008000300feffffff0800040009000000080001001900000008000300050000001400010062726f6164636173742d6c696e6b00003400070008000400f7ffffff0800020008000000080002001c0e000008000400ffffffff080004000100000008000400400000000c00010073797a30000000000c00010073797a3000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r4 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x2, 0x2)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4c}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6f}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffff8bb8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004}, 0x44)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000002c0))

[ 1340.117537] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:30 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000000)="240000001a0025e0001804000000fc0e800000000000000000000000080002ba57310100", 0xfffffeb1)

[ 1340.168613] print_req_error: I/O error, dev loop0, sector 656 flags 80700
[ 1340.203159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:30 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4)
userfaultfd(0x800)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffc, 0xa000)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@rand_addr, @remote, <r3=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$xdp(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x2c, 0x3, r3}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="433e504bbd0cfa56414a4ac9709f307238f8e52bfda5df1e17c3f9b71d5f471b1c1e92182204d7889f07304ba52b177e2baee5f655c7a4955421cf648e8fbd2fed33e21c0c972b4aedeb357b38ac70b48a6fdb6507592c5f1215c8844ef4a6aa41dd906586c79c6385c8bcb78264d4508d973d0fecc4b184eb795f2bcd1dba408cdd976f5e40f3400aabf38be5a3ea2beb6f298b7d5be4cb5b627a4e1c135602d06abc4f491da69c86314d724f6464af", 0xb0}, {&(0x7f00000001c0)="029db6c5c94e16328546b1400a1a9191447af4f2d2c6d2f9082ba2693505bb3d7f72822d629850a6b8458062fb366be6961308a969b3f463bff01bda7b243527f7355587a3df860a3f7039867d", 0x4d}, {&(0x7f0000000240)="9e4ec10598f98d75340f79b762efa8a05cf0255ea84689a26b8487f8985a107e09bf1486fd597251df454ef28ee320e791f494378554b9733ed22ae473", 0x3d}, {&(0x7f0000000280)="6c70a06820f3c2ebf562c23028fd9e70b0faf2878aeea17657e88710ff3575be5376dc79b5ab422301a2605a8c7e10ad91631fd4732f55cf3b04c10e2166254ac7279fef94944ddafe174fbf9d85abc74f47120743bdf650b84275854973e42f1689757d5780ee5d1aa7891812eebcee12ce338526834bc483ce301f14e28302533e10870b12b6cafde4f4c56b857197224cbbded04b040f1dce376a44f3755263915d68841cd797c402d1464446ca2887c8500c395d31552cfe433ab7caeab4", 0xc0}], 0x4, 0x0, 0x0, 0x8000}, 0x4000000)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000007affc)={0x0, 0x1}, 0x4)
close(r1)

06:59:30 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x30, 0x0, 0x2}, 0x1ff}}, 0xd)
write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0xfffffffffffffffe}, 0xb)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="1a000000ff07000008000000050000000900000000000000000100000000000000000000000000000800000000000000f7ff0fffffffffffceed1f384cf3b8c8c39cbd0cb1ffed741552c4a3f23d616d94c4762f21c74947d110edd96fa12b42a48cc4cc1485683d5f10ff77d64d5b940bd5a41f271f208933f9788ce3c7304c7863623f31de34a3c34f903681387c80e8727b390b77da19196501a359e43a41796c8e9092b07cbaf10fa31171d6232eb5c55273035d4c801d8c305c0060ae0160b950ecac524f968b4e46b784659746aeafae81c88f330f52516353ffea750f53b1bdc4d8d970b692fb"]})
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:31 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:31 executing program 2:
clone(0x40000000200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x40480)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0xd, 0x25, 0x17, 0x17, 0x6, 0x8, 0x4, 0x35, 0x1})
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140))
syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000))
ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000340)={0x0, 0xfffffffffffffff0})

06:59:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:31 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000000)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xffffffffffffffd5)

06:59:31 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:31 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x0, r3})
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1000000000001})
syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x80000)

[ 1340.922808] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:31 executing program 0:
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xfffffffffffffdc5, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000004c0)=""/184, 0xb8}], 0x2}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000480)=0x10)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038)
sendmmsg(r1, &(0x7f0000000080), 0x1c0, 0x0)
r2 = socket(0x10, 0x20000000802, 0x0)
r3 = dup3(r2, r2, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)=0x1)
write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="4000000000000000080000000000000003000000000000000900000000000000130000000400000047504c76626f786e65dcd9f2652b1f839991030000000000"], 0x40)
write(r2, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1340.963037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1340.986295] IPVS: ftp: loaded support on port[0] = 21
06:59:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:31 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:31 executing program 5:
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300, 0x0, 0x6000000]}, 0x2c)
pipe(0x0)
epoll_create1(0x0)
poll(&(0x7f0000000000), 0x0, 0x1)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
pipe2(&(0x7f0000000080), 0x80000)
getsockname$packet(r0, 0x0, &(0x7f0000001740))
unlink(&(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x5ee1e855, 0x4}, 'port0\x00', 0x10, 0x64, 0x4, 0x1, 0x0, 0x6, 0x4, 0x0, 0x6, 0x10000})
syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)

[ 1341.201112] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/16)
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x1, 0xe8587938432a09e9, 0x3ff, 0x7, 0x800, 0x3d29, 0xd1bd, <r2=>0x0}, &(0x7f00000000c0)=0x20)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x100}, &(0x7f0000000140)=0x8)
bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
request_key(0x0, 0x0, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)

06:59:31 executing program 0:
socket(0x10, 0x5, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
ioctl$KDSKBLED(r0, 0x4b65, 0x1)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040))
write(r0, &(0x7f00000000c0)="24fa605a0000001a0008000000edfc0e80000000000000000057310100e506ce31dd13a8cda6c90e0715d68cf5a154007dfccfaf720d9039c62dd7413d4681940f5200a7faeae9638609fa4720e5c8fe73c767e23f755d2efd412108fd700900000000000000c0a9d1b9254fe9", 0x6d)

[ 1341.246014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1341.268689] IPVS: ftp: loaded support on port[0] = 21
06:59:31 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:31 executing program 0:
r0 = socket(0xc, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x50)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="33b8ee4b8eaf7c283357fcaf115601103bd286")

06:59:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/16)
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x1, 0xe8587938432a09e9, 0x3ff, 0x7, 0x800, 0x3d29, 0xd1bd, <r2=>0x0}, &(0x7f00000000c0)=0x20)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x100}, &(0x7f0000000140)=0x8)
bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
request_key(0x0, 0x0, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)

06:59:31 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1341.941128] IPVS: ftp: loaded support on port[0] = 21
06:59:32 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1341.983444] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1342.027570] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:32 executing program 0:
r0 = socket(0x10, 0x20000000800, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = getpgid(0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1)

06:59:32 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x2000)
r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x70, 0x80, 0x7, 0x101, 0x401, 0x0, 0xbe21, 0x10208, 0xd, 0x8, 0x10001, 0x9, 0xfff, 0x100000001, 0x4f9, 0xffffffff, 0x7, 0x8, 0x801d, 0x1, 0x8, 0x3, 0x80000001, 0xcd3, 0x6, 0x4, 0x2, 0x7, 0x100000000, 0x9, 0x2e48, 0xa1, 0xec2d, 0x9, 0x0, 0x3, 0x2, 0x0, 0xeab, 0x4, @perf_bp={&(0x7f0000000000), 0xf}, 0x10, 0x7, 0x5, 0x4, 0xfffffffffffffff7, 0x2, 0x5}, r1, 0x2, r2, 0x1)
open(0x0, 0x0, 0x88)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x800000000, 0x0, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, &(0x7f0000000300)={0x0})
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
io_setup(0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0xa, 0x2000, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x2c)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000000), 0x0}, 0x18)

06:59:32 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:32 executing program 0:
r0 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='cpusetbdev,\x00', 0xfffffffffffffffa)
keyctl$invalidate(0x15, r0)
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000000c0)}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x6)
r2 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)=<r3=>0x0)
fcntl$setown(r1, 0x8, r3)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={&(0x7f0000000300)=[0x20, 0x52eb], 0x2, 0xd3, 0x4, 0x3f, 0x1, 0x8, {0x3, 0x1, 0x6255, 0x8, 0x7, 0x7, 0x7, 0x0, 0x5, 0x8000, 0x8, 0x1, 0x7, 0x5, "d001911c15c58675fd2850886a88d038c5c5b55cdcfafd8f45bbe579765aa36f"}})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1, 0xb, 0x80000000, 0x8}, {0x6, 0x4, 0xfd8000000000000, 0x8}, {0xd73, 0x2, 0x9}, {0x10001, 0xfffffffffffffe00, 0x1000000009, 0x4}, {0xadea, 0x2, 0x2, 0x1}, {0x1ff, 0x6, 0x80, 0x9}, {0x800, 0x100000001, 0x1, 0x6}]}, 0x10)

[ 1342.341140] IPVS: ftp: loaded support on port[0] = 21
06:59:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
clock_nanosleep(0x2, 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x40, 0x0)
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0)
creat(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x4, 0x10001, 0x4, 0x8, 0xffffffffffffff9c, 0x8}, 0x2c)
write$cgroup_int(r2, &(0x7f0000000980), 0xffffff4d)
sched_setparam(0x0, 0x0)
tkill(r0, 0x1004000000016)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)

[ 1342.380318] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1342.517933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1342.590955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:33 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

06:59:33 executing program 5:
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100)={0x3, 0x1})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
dup3(r1, r0, 0x80000)

06:59:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:33 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1342.979401] net_ratelimit: 26 callbacks suppressed
[ 1342.979409] protocol 88fb is buggy, dev hsr_slave_0
[ 1342.989563] protocol 88fb is buggy, dev hsr_slave_1
[ 1342.994720] protocol 88fb is buggy, dev hsr_slave_0
[ 1342.999804] protocol 88fb is buggy, dev hsr_slave_1
[ 1343.004945] protocol 88fb is buggy, dev hsr_slave_0
[ 1343.010031] protocol 88fb is buggy, dev hsr_slave_1
[ 1343.015137] protocol 88fb is buggy, dev hsr_slave_0
[ 1343.020258] protocol 88fb is buggy, dev hsr_slave_1
[ 1343.065007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:33 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0xdc, 0xd, 0x30, 0x3, 0x100000001, 0xffffffffffffff11, 0x0, 0x1, 0x2})

[ 1343.149938] IPVS: ftp: loaded support on port[0] = 21
06:59:33 executing program 0:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x90000, 0x0)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040))
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1343.219406] protocol 88fb is buggy, dev hsr_slave_0
[ 1343.224547] protocol 88fb is buggy, dev hsr_slave_1
06:59:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1343.326891] IPVS: ftp: loaded support on port[0] = 21
06:59:33 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400000000001d0002ba57310100", 0x58d56039429a7b2c)

[ 1343.457015] validate_nla: 2 callbacks suppressed
[ 1343.457024] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:33 executing program 5:
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r0, 0x1)
flock(r1, 0x2)
flock(r1, 0x100000000000002)
flock(r0, 0x2)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x80001000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")

[ 1343.735429] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:33 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0))
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000100)={0x3, 0x1, [0x81, 0x101, 0x3ff, 0x9, 0x1, 0x80000001, 0x9, 0x6]})
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
socket$inet6(0xa, 0x80000, 0x7fff)
accept(r1, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000080)=0x80)

[ 1343.817837] __nla_parse: 1 callbacks suppressed
[ 1343.817845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:34 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:34 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:34 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000340)=""/173, &(0x7f0000000140)=""/110, &(0x7f0000000400)=""/205, 0x3013})
r1 = socket(0x10, 0x20000000802, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000300))
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'ip\xea\xednl0\x00\xf1\xff\xff\xff\xff\xff\xff\xff', {0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x1b}}})
write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1b6)

06:59:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000003c0)=[{{&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="0e4e335aef7e2174da6b960bee400346e8a381adac1f92ef17ef94738572e2971a9f3452491ce0f6623ffce87c3f90f4c1b96355b31c01cfbe7628c3e69726b4d759d417ae021972a46fec926baaa3a59063f2bccf18ec52ec82d594e4e47031510a44f1fd2ca9bf69bf4f7a9a3e979125e103455569f732b34db725acd85182104c2539cf61e918cf63a5633a4d8b96f0d6845d2a43aea4c696c1e7a873f93210e2c332ca475ed7770129", 0xab}, {&(0x7f00000001c0)="a134d9f734621b08abd9531b9d8f5277a4ef6eeeb15459762561cf80535402ca843f9052785f9793a31d64cdc0fc2ded9e739f4b8ff2d690b88c40f7eb2905a15a152bbefd7c4a4118c3c66efd4b97a54a5a1175b35f8676a3c013e96b81d3904a150c68dbb26a9d108494afdec560be7b0707f6c5e7d2f6e6b98e068428c15f70f9e6d93cb9fe116b28086a83b9deccf8d36a4602d739e2338b453ccda8b244b1cd3df06bc2d39d15e8a52a956fde302e72d5b077d43fd26c2a62", 0xbb}, {&(0x7f0000000280)="4aaee155251775c963944ef57b488f9b7faa5c66c99025f6bba7cd888f1bd1d4fd449c535457906b03f8e9b269db9d02948f7989da2a8e4f48de7a6cb00c6373d29313c36ce74f5e960fbc2a532aca6ebba13e1902199260dadb38cb2ee176cf2790088e1971532da75e3dde9d7fc63d1fa89e8048c94794160704b13b6bef29b6efc4fab9723999b25e47b41d74a531962a029ae79d3164cb346ed4b80f37d384038c41730bbdab7b27329c160e7ae426cdd2aafe87e086c3946da5bf3c2359240133e22347319533ee967585c4493a8d73c8fdce65860d20c6e5529b6560b2ac50565d869457", 0xe7}], 0x3}, 0x40}], 0x1, 0x4000)

[ 1344.337636] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1344.376697] QAT: Invalid ioctl
[ 1344.388978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1344.404548] IPVS: ftp: loaded support on port[0] = 21
[ 1344.412251] QAT: Invalid ioctl
[ 1344.428011] QAT: Invalid ioctl
06:59:34 executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={<r0=>0xffffffffffffff9c})
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0xa6, "8b709dddf4d6849cd92ac5fa072723a73c8231e5806cfd6f8afdf075375f89de90237e66af1c1a52fd9a8ec25d02d057cd8b7be18840219f1dd4db965bb8b4ca0f96f8f6966896a1a5e7e3bbef96b5016e229148d58cf7970cb214b795209af5a7655d16f9d632e4a91b8d98a25bfa4bafb23faf922af4be5658beed652cf336e166fa0d75ca9f595232b5857fe7e035b191c758441206b3d3bf9ae178f9c6ca62743c9774fe"}, &(0x7f0000000240)=0xca)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x200)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}]})
r2 = socket(0x9, 0x3, 0x7)
write(r2, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1344.451691] QAT: Invalid ioctl
[ 1344.459751] QAT: Invalid ioctl
[ 1344.463063] QAT: Invalid ioctl
[ 1344.489642] QAT: Invalid ioctl
[ 1344.496352] QAT: Invalid ioctl
06:59:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1344.508487] QAT: Invalid ioctl
[ 1344.526760] QAT: Invalid ioctl
[ 1344.545321] QAT: Invalid ioctl
06:59:34 executing program 0:
r0 = socket(0x10, 0x800080f, 0xfffffffffffeffff)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1344.564603] QAT: Invalid ioctl
[ 1344.582054] QAT: Invalid ioctl
[ 1344.603980] QAT: Invalid ioctl
[ 1344.621958] QAT: Invalid ioctl
[ 1344.641018] QAT: Invalid ioctl
[ 1344.649984] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1344.662796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1344.672281] QAT: Invalid ioctl
[ 1344.684586] QAT: Invalid ioctl
[ 1344.698167] QAT: Invalid ioctl
[ 1344.708407] QAT: Invalid ioctl
06:59:34 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r0], &(0x7f0000000040)=0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x84, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0xfffffffffffff42f}, @in6={0xa, 0x4e22, 0x3f, @empty, 0x10001}, @in6={0xa, 0x4e21, 0x5, @local, 0x1}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={0x0, 0xd6, 0x10}, 0xc)
write(r1, &(0x7f0000000240)="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", 0x111)

[ 1344.723373] QAT: Invalid ioctl
[ 1344.735721] QAT: Invalid ioctl
[ 1344.743010] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1344.749500] QAT: Invalid ioctl
[ 1344.766363] QAT: Invalid ioctl
06:59:34 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f00000062c0)='/dev/vcsa#\x00', 0x8, 0x8000)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000006300)={0x1, 0x8d, 0x1})
accept4$packet(0xffffffffffffffff, &(0x7f0000006380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000063c0)=0x14, 0x800)
sendmmsg(0xffffffffffffffff, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="ef306e6152dd29d79c61e3cbd23c56a7340254bf011f488e4c1590dba776bde2ce99a07218023948fe7daf5505f4d646a0deac6978", 0x35}, {&(0x7f0000000040)="841be643d1ced3e613bde1198a214e35f7234493b716430dad", 0x19}, {&(0x7f0000000080)="41b17d47d3214341176441c812482babce5b099d0ede26651f25fe005bdcb84030256b48e1b82bcd69c7cb7258ffb3409b894a15ea8e765db5374ff144063c632c06ed6b27203ae3cfb6c26f", 0x4c}, {&(0x7f0000000100)="3aa4d105cc7dc1c3029d3ee4feb92eafd75bb3c7941a834ee9594f18d1ae9c7c5c4cba6605a71c158f56c98221b8001e9e5c4fb1caf6d31ab615dfbceb4bc9b2bb1df154de9cb10513cfe0588ca6bd854dade01d5542080f5eddd649da34a4949b30e39689ea9f0d76c0afce49fc07ef24c06e21f41fa9b184f37fa7e0b15743bca8d4fff0ac76d2a71bed8b8cd025a5e7827213765c7bd5753cf357560c628e726c1e5e3c7cc692836788c01264cec17513eadde51527472ed75fc9dcbcd6aaab67876bc611fb4b4b114e8e927a5deeb61b6b38fe73927bff8fe51f05287e84f5c2610bebb4de28b5ca593c02d1e1de44641af0f93205e074f7", 0xfa}, {&(0x7f0000000200)="f3155e0aeea8e876ab49c058b7ab4c1e2871470ad19cc79c35136368e980f9d4956f2f1ef9edfc9d21111a5b9b6e06adf2489224c1aad060dcda01beabe362257cb34ccd519bfe44f4eb91710ed4cd22183eff932217fecaa93c0a57458565d77387f236de7439626849bce31e78b7c2d3fa6ef6106d7a0b87c964fa94695cb7db0c3f3657385263304a591fbbd77c32ec14cc87f482949324d8f5d88638adcce0b87931ecc60de145ebb392", 0xac}, {&(0x7f00000002c0)="c719b166ce6ffc9b4df36f716bba66beb042d23013523dc27946f9f3196a2d07fedf1096accaaf15b7dba1d6f2c2ce305c2c1acf07b854b3367c23e880f4662cc0e4d4e8fcd4387a8f079b22f9849d4050c0b3fa6866b250e71d7798978a3b51a7c82c619fbb6befbb97ef8ad7bcf9745f66531c1566da39d67a5b78838ee88154b04eb05f446435dd564cde832267e15eada6892ead0bc0bbee5338b7f6fad5a62bb81678d43e0726642fce6127d1438a9f1278a36527", 0xb7}], 0x6, &(0x7f0000000400)=[{0x68, 0x115, 0x23e2, "e5b6321532364a665f4f56bbb1777322289c59bac4168a14b8f9ab9c85090248364b016eff78c2c7fb9ecfe9794961314429ebc5b8dec5538965052612091c50ea544991687e43eb6cae4c97b1068586ec01e6"}, {0xf8, 0x10f, 0x10000, "22f77de699110eb95523cc3e80caa0c22dae49f1df4d5b0081d1025279ccca10b2519924734bbc38227246551b3375f756991f898244afa41f82290e524397650f64a570f754180d7e73d7c927263201b7e23a9c254b8beebc550938819fd9ad69f65a0868aeeea9d2354373c14f50eabb7e01a9dc5f6ab2408bebed489e05f3c0cfc72ffbefa6c8bb89c20420bcb5b26f2588850d74f06bfbe61d4a3f2dc4198fefd528288ffe1a8f3541583be5432a64ff12ce8438e33daff174186682d74ffc295b049d263b06c704c7fc37844df733c8bc0f42cc9bda06fb31f10177130b6d"}, {0xb0, 0x119, 0x7ef, "4b6c8499a6386709204016e5dba55d042b120c5050fb7a9b76408bc6f7684d28d4d7612c7c1738bd1544facd22abc1c1155ec49a2386cf2a8c193bb9fb03ee1887ad10fb66e3cd8d2b13d6ea8941b651b7806867c805d9f040f5f2764f967c4b14bdde5e027e109eff52f71d141fa2793dde0ea38ed4fc6a56a8b7098b5cc28c35d655d151774f6e946ed27dba3217ab3cdf5785dd7886461db02a"}, {0x78, 0x119, 0x15, "526a4c976ff51d297e7010784ca2fafd457e81d356be18fc842579033e7508736410a9e3af683f9585bc71c2997643823435659791e338202124273dc6a235e151ff73cd67bedd7d9b3b3eabb227012ae4e186563aed7f9e9719e5f4a078acf6175bcf3dbb5c"}, {0x1010, 0x113, 0x6, "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"}], 0x1298}, 0x1}, {{&(0x7f00000016c0)=@in6={0xa, 0x4e23, 0x4, @local, 0xff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)="067136a72014098520ad78f1f3135a4413a437abb59eeb8f9858bc91658df5f2d8b0a116529a34c7f3c6b7b73a213fb8808949954cd19fd599b40595ca4f435bcfad393c99a4", 0x46}, {&(0x7f00000017c0)="a8c3767b1e75f722e02f413b5468df166de6c419bdcde857f81424ce1efeac346b17b5f49a28d3971c58de4605cb61eb16c8a0c9927cd59271b3392f1e48bb7e64a636d34525850167dff787b7bcf2dbf4458a2dca8f1a02c6997d840cdb865ccc51109240191af98e29ea96d764d293b0ede393bf847fa5bc", 0x79}, {&(0x7f0000001840)="e6468b2d37237aa287002046587648012e2b07f5daabb0", 0x17}], 0x3, &(0x7f00000018c0)=[{0x30, 0x112, 0x7, "9bc5f8f1a64ad958663b3efcaf675253dd4a47c28a8787917b4042a93a4e7c02"}, {0xe8, 0x11b, 0x719, "0d47cda560d1d09975b610fff0a48a42aef05d37e89f794b68d2004e5a1f55ff299a532ea51c0ffc8e2dfba28f1494a6587aadb1aa34ff22fa447e48bdce4c704fb50e10811168d9115eed87f95f8b30c6eecc60377833d8bb15a2e309b1bb99a8c990a259802023099100146f5f116362695b6427c00339efe670108dcfd7e83fb8dabc356f68587833ca256f0b83d3280201d40c9432d90026e9fc33fc13e766fa61850c1ef2c4e59d3e85e4c7c84c2cb8014d6b77c98f363fefd96a46439b8010daf00dba77bf1bb54961f200e1fd10"}], 0x118}, 0x6}, {{&(0x7f0000001a00)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x5d00000, 0x3, "133c2f052eda8f18660ad3e32483b3c31634c4dbf9f80a7278a31621afc9ab596879c4c3804315f14c0174e26c8f6c933495581a36d8a14132909eb260a89a", 0x26}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001a80)="4c6901b5b5efdee256", 0x9}, {&(0x7f0000001ac0)="87027525c21e25022532affd77c05f4788f29c0629ca94c644fa5c4bef609c90475993a25fdc8a1a49aabc30b039fb1e60faf20f4794be94aa4c27735884b8609d33b18dde509b14f966aa60ebb23e6fe898255100c1581efe20021b12949a66793b", 0x62}, {&(0x7f0000001b40)="977dba97632acc94ad18cfcaed35094564c8b1a31399658c56fe", 0x1a}, {&(0x7f0000001b80)="e0ff9c441d1d29597ab79eefebecbfd025c486e8207decb093084284081d45bf7462e128cf1ca7", 0x27}, {&(0x7f0000001bc0)="3824d5bf2e68d08011d45705e58254164bb907c63be0ac5ae345c90c3a5e36f30600eee51d296f75de0eb06dd5dad8aefca1dfdbea3ea8bfbcc5f5a8d13144c06c89b5eb88f51a253af123db802af55571b95dfb785a0838c67f20f33bcc8caff09ec316c259d20f9a782f25f2cabdf2ac671d9730286ce76efbcbe320634f5b758ab4ca3563688f308dd82daa5e3f63882be6adc894fa14098b130751789997c30d92c9e2af9b8a9f3c", 0xaa}, {&(0x7f0000001c80)="59f2db27da7f9fa760ccfe0d1564", 0xe}, {&(0x7f0000001cc0)="db9bc3dc243cc0f95b25c2ab989129f6748e2ffe097cf68af16ef92cd4d93e72ea82a44531bbaaef8f3978d00f428c35dc4de0a0f1c0f85402ffc5acd21cb1e9c47b6e3de68d2963b239487e6654006f16afd6f126222ba53260b651c330702cc6ef965c93f8d4f6576c76998e2bfe3a403303fd7b33dd171f3d939561e37dd140d6594d958ebc0c05b69549435875a30596017bca3a2849826fd783033617b02f242f00d1c3054c3d2dbb7a423728", 0xaf}, {&(0x7f0000001d80)="a8fa103bb9d97a82d845d2989eb78d3e35c1596998a40bd876db8e0078797d853316cbe75ad316c837cbcc59e8b152f614ac920dc2589e467e0b41c8f72f5bf08e34701acb58d45ea9c53f6355be566a9b872208914367f6c9a1dba83584fbcbfc5f6c6b95539cba014cc6e23ce62625c72a1c6976e8993802b8c07e2665e642065ca6ceee", 0x85}, {&(0x7f0000001e40)="8a13e509a93795c8001f10d9581ea602c01dcbd03cb304d60f08a360c82b1bccd1c538feb82b3bab5defc0f01060af77c47f0267430a91534695d1141fb5f6f4b093b6b88578f2de22efe93a0303dca525b3124d9311d9835b616ada4e306fe6de6465eba5d94e3dbbd73af8a2", 0x6d}, {&(0x7f0000001ec0)="432e88e8b96bc67bdd37c60da4b2a7217285867c965ef3ad8696df2d64294f599089b3a772776589e0149c44a74064c79e6c846031bc3aea0fe90254dc75f950ba5ba64d83de07c3af72a70b68ca9165c69fff7d9483df4c8e514a32739e676ed7d9ea312d12b002d1b91e5230fd2bd6f19484fc0c85df7055b12aa2cffde3cd48d97a71407c49ae50aed8e4fe71fda3c415bf", 0x93}], 0xa, &(0x7f0000002040)=[{0xc0, 0x103, 0x7ff, "c836f4629c13bca27fbeb73a251cb3172459f380184fc8b3334463592350dd78695762f42cb96aa9676bb77b01cea8a4995941d92e8c369877517b03aeef6fc5c0d543ed62c6d37e14afe28f0502a152f8d0c336578c47c042ef943e0169b86544b9665abc89252fe2f9659dd45980e4075ff915805b5dd7712f9b03fb1e1dba01b185b7d691f6ab01cabd458466e2eef16c3078b34ebfd675a35850adf6f911e2c4fa0436533c65d923"}, {0x18, 0x110, 0xfffffffffffffbff, "37c3"}], 0xd8}, 0x3}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002140)="277d3c0887469e8d040cee203fb4a97189e9bb51e6c32b22b6f73bd6a1b28094fd758a0b138721988575e5c61b981433622292725d5ae3bc9a3d9db87baf05deb74153b08bdec0b3f1e152e890e2e92c8bb2b806af43c58750faa21be555f3cd8f777be34b281f9fdab7f5de512a3e4b94481a528195c5d0e2a0143ad16164187fa6bf7192923e4640d7811c7982aac97e7b822ac6f28eee08003508c2bf1dc80c773b2e9c4f64a2b7bf59cd3b7d9d4271919667e714efd20ac54d4c1effe76ea303a6d3a1f3a9854e51faf0cfb071b936fea9b4b4e5", 0xd6}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="cf58d709643972d60cc0d014707932afb45b4172a405d9564074d6fb4668199e1086e15118bb21dcde0acb610d5a551e4c7d66df762abb9b6c1b51b545", 0x3d}, {&(0x7f0000003280)="58157ed07c69739647330854526a4fa8f9f2992af1a41cf541a20740afc3cef2d10bd872c9bba775f697181189e6c34d642405f2973e0a22f6cf380d4b953801eeb4e508329b93dfd27fdd1a2f4cdb0b99b1468109d233aa86be83e89b2553104939b011a1c4", 0x66}, {&(0x7f0000003300)="36c7fcecaa5f36f0a2b7d98047a3950628e20ced3d8b98cccc38079afa03c4372eee46b52a7876e233d08fabd31bfacf406a13e93b6abaa50303bd35f9d285a2fe5296e521c0d0fa4d12ee1eb44a588bce2d5691c71fca85c40e9c167263046dbcc6d4afa6b65cbeb8833f776ebe79f37fb9ffc9d70601086989bbfbead88e230aecd88501b79e07aa0f785f7ec9069cb66091e617de5b2f54e57bee428a3e5a3fe011b20563a29e1e56b9c5b66443026612181d17e8e9f650a81de2a9975e75e57f58ea95832c04ec90d0cc2d907a70b0df04dcfac2a1dba83356", 0xdb}, {&(0x7f0000003400)="480ed418e873b823f2e8f998a0f20c6752787e8b8e01db444a47683ec8ae9d41fe75799fdd1f0cf08daeebecacc6e0d3f957bdaf82c01ab9c396864adf46668e5f1481fcb64edf19d7f3cb83915e540fe041813ba8f8a7d1d9daab9c916de31b36af2a052cc5d7377272a992337530b931324286375e6cb339377ebe2aef08fef7f93ea7c095964886cc3859cde7d9a52f894821a842096ac5ef4e7c23e40717b0188decb6e2a6d4f58426d60190ba946071296e090ee8d4b14c5821330b28f3b61db2d73569bc64a2c1afcc1f", 0xcd}, {&(0x7f0000003500)="8ce1f6f6e1d7424233fb7628baf2378c7004d37b82924fc69d4538c34d22bcffd7d34ce0c5c0033394b3e63ea98bed096e843c11ec5f32190f1e4187aa81cb3d3a635f8a5dcf891e7c", 0x49}], 0x7, &(0x7f0000003600)=[{0xf8, 0x11b, 0x3, "922f6dcb9383a07dba4fa1eefec298875eb5686d55ca9070cf396884681de89c79e21d5189852f4d8e474c87e0078bd8d4b52cf133e15f1f9c6bf5d4b36a8a202ca564a08da2f43313a05119e881ab22ba34f7b8239467fa3e73e2bda3a4dcee573f72929d0520db4b95fe212e14530440f4c8eb9edd5d778ed7d3ba7f4df9c0de27f6ff02e7f082a1d5f24c6079f987e40cfb623f365ec4bf542acfb8cfff5e4740e856817e854a0968fd8887ea66d04be292e08ab649a8cba5888e9e01eb7fb69f29b1b080efbdd2445a9850ce07cef3be37fb4a23e2bf2466c678a23a3ec35e"}, {0x50, 0x118, 0x7f, "8d486304bc75ed0b09977a44713c63322cbd9a5d1f8fcb6ea9a516979af0f5e13a7a8ee6fe75d9042908681fd6a4e4241a03ae29572ae3f8e8c67b6f74"}, {0xa0, 0x10d, 0x7, "83eb99975a473501ff6f79c8012379c6c19444ac5febae9d46391ffbd3c8e8db42a69e031b941033ad42a6966c97cf8114cab17b52177cff8e9b813a2a27cd9ea501f2b2861c92997418f821e0d6959e49d7cbe05e9920877ea5935af895514b0a1235b112f5ae66ac29bed3238bba593db4937278e5fb1ec0dd08ef4dbd893648e74e7abd2c0b9eff"}], 0x1e8}, 0x2}, {{&(0x7f0000003800)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000005940)=[{&(0x7f0000003880)="67a29aa74162c80ddb74b4eb2e8ed5f5decf8479cb5bbc4c50c8324e9b2aee935ff66ac51b0b1058fc1b37b569df4ff72f2438fb3698eb8e7025487fa5652733c21812c658dfad78921a2c3fbc7f80", 0x4f}, {&(0x7f0000003900)="2031d8dcfc5449e596a817b9cee9ecd3e217ec676d038c5cd4de4d3944854dc67355c126fdf7e4a5048b1deb802ecb38822c6443", 0x34}, {&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000004940)="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", 0x1000}], 0x4, &(0x7f0000005980)=[{0x98, 0x0, 0x2, "c0339787d12c35419a516d2bc48833d98783e50750b524b75319eee2ce80e157016ebac0a574cbc007bf0da36b5068c1aa770eadfbd4189d703fdea421de475b6a4ba4314153aeb49182b9485ca7eb8fc50685ad77693704a275435bf4d3e9f539853c14178acf7268b06c9f0f73c5933c33ad47a4a5197ef7fd14309d12d12a11e40feba9"}, {0x28, 0x110, 0x80000001, "afafbad2c219bcb58fc3637a83eaa16245adcbdd1799fa93"}, {0x38, 0x84, 0xb97, "c1c982fcfe08bc6f32f9f387c3aae4880e68ac4042ca77d2197ed1a045811104ddc931"}, {0x18, 0x117, 0x800, "e96c18f5d7"}, {0x20, 0x13f, 0x5, "08b9070ffb60a7e9a6dd"}, {0x108, 0x117, 0x4, "5ff43d17acf796c376b99096e39aa0e97851903f65dbce7a64a4d77a6acff97bcaabad60bb920abac90a27b700154d6968a88251bf65ed0d8e75e2fb3ea66e4130c9d893960a3e4bde86dda8c1ea9711bcbdbbc22316b62d1895b75be738ed0b26ed313da25177e63921a0b1634c880f36a21648e7fb64ccf7308a16e5743411e3697df538aea07b5ffe997f4af4ed173188192e438905cba89ad3535ad07f88f037c8e3ba821819e2ac6c4e857ef5cae50b36c1905aeeba3ae563749bc1c9e7efe9cb5de3adc4fb6fc764c4e826ba41dfd4d05fe5fb671379cee2b0ebd91ed06b9db24dcb26b2df73f52adea817bb90851fafab"}, {0xb8, 0x13f, 0x80000000, "3fb012175857f81423c30fc78465343f0350447b94849e53fa0bdf1b43eaf54ff5bbf7736d57c31aab689114ed22e69999ca75e89053942c313c1609f57d8fa23d72186b32319130c6029537c366a2d8b89b04c8d7a490b8094a66dc9a711af7c40d71e6db6ad01cfb63373c3f3a5cc6e692a609635936f4dc8cf01924f6001de39eea61846ba4ab9c51685e40de7fb515abd1a3ed3f2334a75a406bdab9f39cdfff82"}], 0x2f0}, 0x5}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005c80)="0905c5054e53b32deac98582bcdf1418bb28772cafdcda0f52ebcf6a827646c5d3aef6db9240d325a544537f8af4c001d669fcb196e91b9a8a2a76f451cc524e1fcb9b49b44c475f1af3c1177bac1de0", 0x50}, {&(0x7f0000005d00)="a9e1782dcde06ad9f70c9ac53c0d2bce2b4d19bf589b226fe73c41e167c9e74543e119761692f34c07ab18b56496bd3054de2810694500d90cf4e915e0db5709987cee00416b56c7363af61e18f0de368ce44f464bc7cb882e84cdcb1bb8c69715d047fb5e9a1a4949a02e007c84e96b8703724cb555ce74f375ce0736ba040873464e39141d23411c948d05668e5f", 0x8f}, {&(0x7f0000005dc0)="5d4f4f92fa198e98900fcc820f498da841dbe2381ea912501c2b02ec76b158a123991c764410c66077de2a5c2ff3f743f1a42a1424", 0x35}, {&(0x7f0000005e00)="1f2c9d27f2cb8e7596d83fdb4a1c5a8168ea7ad7b61874d0cbee73a10543ecffd5e8ae1807f115e0da73216633c44a47ac9cd1", 0x33}, {&(0x7f0000005e40)='d,o', 0x3}, {&(0x7f0000005e80)="fd9f2d66002b12aaa93fc56a71d31b881a4f3d6ba75c8f23fd14998931c683540bead3ac25689ba9a9bb16a3c614dd2a0bc12fb897f1d335025ae3a2a94ec248b8f603eb9d01d1706077b9444dd0625ef4306809ef409e01931de79efba89e43dcee4c3e4b523150f7cae75a4cdc80fdee155528bb72ea72", 0x78}, {&(0x7f0000005f00)="7e77e0a4787079dd858abc291c539ed2e82fdf8ca849557e339d8283f6319c1bb8a08f81e1c2c0", 0x27}], 0x7, &(0x7f0000005fc0)=[{0x88, 0x13f, 0x200, "2db69c1ce33abec987fe03ed924074fe9db618862215869e4d54fe61080177164c44239d45d66979d61b44e387e66dc3dfa9c9fa8dccc34674b82e97d6ad9e2d6aafa1a2b5e6f09846229f9c753853f083fca6d79c1551b7df9cb929fd7f5c0d7a18e63a22d6eea2458025075885d1b3b26d2f3e1ad8a7d9"}, {0x80, 0x108, 0x1, "263e04a55b5200bf619f07a0ff13fb0ae5109fd04b0f30e90869b509cf71b0087dc60500095831711ab0cc38eb3d03ce2b4ec9cfbf6a005e5443c0b2c32a8e1fb21b18953aab00d0636e734af6c06dde1f08a8a328bd4f8fe025a5517c6ec79a6a978126ec1ac0e9704be37080"}], 0x108}, 0x7}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000006100)="ffec564c6af144eaefeb0b3c0670982b8ecfb39abc3ac82378aa3a86886a3d31163c54d16286b64205d3711d8e955cd4d7617222a32595041bb3d28246e50bc6c926ad3efc157efdd2ac2bd8431a74042156f04d40e8feba586c9c17530d8714316399e4ac3b98cacfad", 0x6a}], 0x1, &(0x7f00000061c0)=[{0xe8, 0x11d, 0x20000000000000, "05b14b857a845c6f23b2063a9e2c45e6568ea972c8d0f8720b948a49af1b3f46f6bb3b2c73e0c8d3ccea46bf98dcbc20a235777fff4a816655373672db1a287044c674ca048da2cb1b7657e55f5e4e4bde69489bc6e1a84faa856f4ff6ba5cc4d3acde7215ad8d793579ae585eb2540a0386cb679e5228dd9b55670bc96bdbf8f9df3168904ccf3f14d8897eb5f0b7077e145c7c129d2f323ab62f8f3c213b0207edcbe4070ecca2af12638495631c0e66afe9b511bbb5c54b3f0b40ff2ff0c5bb607e8cb4640abc77225832879ea9031f619eac554b0770"}], 0xe8}, 0x6}, {{&(0x7f0000006400)=@hci={0x1f, r1}, 0x80, &(0x7f0000007840)=[{&(0x7f0000006480)="7bec5132a5985b6bb9de8c39fec05db585ae6e2a21a1be67e3559175e6e36727d2b219d41d2bf667cf1fa9c1f4f851bef42ce6", 0x33}, {&(0x7f00000064c0)="127c3d0b20dbcabc3eb45835f4ec561cb8747ee5b244b08bc1554b463268b94b2a95fb50ed2909528e9c68248542a4f233a950da1e4ddd7635bf022025ac9dd4b4b52e794874b93d6f51255613b7b4", 0x4f}, {&(0x7f0000006540)="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", 0x1000}, {&(0x7f0000007540)="e2eb37aace1a2b338e6c9f15ed15150e27af9db4e60fb578ba", 0x19}, {&(0x7f0000007580)="dc27f64a7c3132554afdd857f7546580ccfa0f0eb29b3a5649f0f3afe4d555c9b87b703ffda9972a79d77f3b7311edaac9dbba45a9945843038aab5446b8ac536eb52ef6634a44509bbdd5d455ac03cfe0db78766907133134837e3840a45972a8ae4a408c39e2c7df64ec90e246f51e750e01fd31f914207bad366df1d8e946c9a09a329281456b512d1060479abb63eab0ac44795cac966498600485a6e61714854ee74c8df1ac146d895bf972b22e2419a382ef8f3e4ee241", 0xba}, {&(0x7f0000007640)="af6df8f9000ad43c7ad77222f94d21885ecf994302a6371faae2c8d2a3a126430bb0fbb744cb92938795fd037623ad80e9a829c27fc62ee4957cc6edf7218aa5bbb9d66ad97d0eec7d1f3627c881801e15bae9808063b6eba6a8590a8c5b906f6ce60277b6e449eb36c939056075cb3088bc6c13194edb84", 0x78}, {&(0x7f00000076c0)="fde91d8fe0f3a38501438aa055ba60c4be501beca4342749553e1c422bf0887e217872db373ff341a686d32b44b8e4bdd055c2b9b93de7815dd5bcc1f265bfb0673bdcdb20ea315d8fa7448ee7500ddd89b5c3145d0dc1d9c0a37c7902c771889549ddf2893949e8ff5346049f2f0cebce47f2bd86cf2cdb424f68", 0x7b}, {&(0x7f0000007740)="6bbd4e5224a2957b1e9aa31d844b2c14f9cb65a07983a819d6ad4747fb9a5a9b5135b4a4abf36e23f5849aa4709d6f15d60e50ce9f3a65daf1b76bdf7c411be43471e3ff10635316b583ad4ac34fa73a", 0x50}, {&(0x7f00000077c0)="092379c5a1b4e632acc5a8d0f79849a99d341cdee2e7220c4d404c08d1d90d4e367f6c7c7600805b30e160245efe9ce40b614a08a054ca68c93231c7bceca795291cabfc7f08919b1752b150f36e47d373c8d6f81eee04704c88", 0x5a}], 0x9, &(0x7f0000007900)=[{0x20, 0x19f, 0xa1, "2eadc304a78e0f06a0fdcd15ba6b8a"}, {0xa8, 0x10d, 0x7, "1168350909cd09602f8eef99e0c446180d456b1e339f8d0829c377c9af0bb360406e4c803262e041d58a8c90f4b8c5174b213be307e88b9993a9a41bb544403474789c0e6a5b915f9f4ee2798d1ba007a362c505f28d2987df3547e9eafa1cab3ba6b0d225e04cf2063cb9c6c9ce0c9049de6c5b0ad60544da9d50cdb2dfe688f4944bf69c293399ade63c800122a769ba42f6bf"}, {0xc0, 0x109, 0x7ff, "b0f05dc3772c72b8c426c375e8b95b011308b8e234b1c917492ef716c64483da9fb7b4c266b556736b18253e2e7029961054f4e6ebb3076f84d302743e1cb74f5ed68a3ed5169f377720ff80bb90b9148e238f35304a7b1ab94ca999fc44058d22a57657439193973ec2ea43a8830452618322ae3df552b66eab32c5d04cc53a85b846557293ceafb096a30e68f070309531063a7049629fab464e825a78757f86fe1604f219e8293bed33"}, {0x80, 0x10f, 0x4, "781d6a2042ca5c7b558d289ded40b88f2cd71186337c4b881906077a83996e59f40d273455a538a91939c9df9c030ef186f4a0e8f8219bf9c7d8b1ee950dcf9eb5ffe0e1f5e2d6da9d74dd1d5feeea2ee06f3216cf9550f475cdfaea79502ac29e69e3dd974067de591d2b"}, {0x20, 0x129, 0x6, "7e9e51d896dde4c3317a631a9b"}, {0xe8, 0x1ff, 0x9, "c9d2d514bdc51f0b4517290586de4307b5d696fa68598023dfb92d9d1ff06d98d58515e4e3ec7d7156e9ec9bb73f5073d74c222eae90743b3616cbd8c62a5a1acc2cf9c203f744a622161f4034552276f232530a65451c6a8d771e1ef49ad9944a76ea5f6dc000ba0ceab1fd66fd4f04118714207329db56429a6486f333467d75d94df90fdcab20c26e9b6e080b73571d3500d5fdfc2b573c794676c703ccd03936e3b1c0e599f16f3184eb1a7f0bf77c1f88498d13d7e039fc4d2a8aa3772b30159f2ec46e70f27ba41740e264e0785867"}, {0x20, 0x11a, 0x3f, "906f20975d0a36eaea660aab5d2e"}], 0x330}, 0x4}], 0x8, 0x10)

[ 1344.781120] QAT: Invalid ioctl
[ 1344.794676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1344.840024] QAT: Invalid ioctl
[ 1344.854592] QAT: Invalid ioctl
[ 1344.874145] QAT: Invalid ioctl
06:59:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:35 executing program 0:
r0 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="43b5d9", 0x3, 0xfffffffffffffffb)
keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/183, 0xb7)
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000180)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xfffffffffffffdb4)

[ 1344.911988] QAT: Invalid ioctl
[ 1344.927075] QAT: Invalid ioctl
[ 1344.955087] QAT: Invalid ioctl
[ 1345.001489] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1345.008973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1345.122188] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1345.167020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:35 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:35 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000180)={r1, 0x7, &(0x7f0000000040)=[0x6, 0x8, 0x200, 0x4af, 0x7fff, 0x7d9, 0x829], &(0x7f0000000080)=[0x4], 0x20, 0x6, 0x6e8, &(0x7f00000000c0)=[0x6, 0x1, 0x7ff, 0x0, 0x1, 0x1], &(0x7f0000000140)=[0xffffffffffffff26, 0x1c9ec0000000000, 0x9]})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100))

06:59:35 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'syzkaller1\x00', 0xf3})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x20000004005})
syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x6000)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063f10120"], 0xfdef)

06:59:35 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x9, 0x1, 0x80000001, 0xfffffffffffffff7})
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x22001)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r1})

06:59:35 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1345.418690] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1345.440371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1345.459066] device nr0
 entered promiscuous mode
06:59:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x800, 0x200)
openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
close(r1)
openat$cgroup_int(r0, &(0x7f0000000040)='io.\'q\xd8\xc5\xab\xcaH\xfcmax\x00', 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)
readv(r1, &(0x7f00000002c0), 0x1a5)

[ 1345.504011] IPVS: ftp: loaded support on port[0] = 21
06:59:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:35 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000500000000000000080002ba57310100", 0xffffffffffffffbd)

06:59:35 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000040)="240000001a0025e00018000400edfc0e8000000000000000000000000800f80f68f469e502ba57310100", 0x2a)

06:59:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4, &(0x7f0000000000)="ca432d8dac9c9fcb3b3afd29f722b5f8517aa69f320197422bea7e0ddb3f2f1adb8c508a9e1fa873ca262dd6301368d0516c931bb8300fd8d3e2096422041fbc4648bdc8cd5f91fc1df1")
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f00000001c0)=@xdp, 0x80)
sendmsg$can_bcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0043000000000000000068ae67b2554e5dcfb16219000000"], 0x1}}, 0x0)

06:59:36 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={<r1=>0x0, 0x4}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x8d50, 0x100, 0x1, 0x100000000000000, 0x3, 0x6, 0x7f, 0x4, <r2=>0x0}, &(0x7f0000000100)=0x20)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0xfffffffffffffffe, 0xff, 0xfffffffffffffffc, 0x9548, 0x2, 0x7, 0x9, {r2, @in6={{0xa, 0x4e20, 0xe8fc, @ipv4={[], [], @empty}}}, 0x9, 0x2, 0x100000000, 0x101, 0x7f}}, &(0x7f0000000200)=0xb0)
write(r0, &(0x7f0000000000)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={<r4=>0xffffffffffffffff}, 0x0, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r4, 0x2}}, 0x18)

[ 1346.181753] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1346.215699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:36 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:36 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000040)=0x80000000)

06:59:36 executing program 0:
prctl$PR_MCE_KILL_GET(0x22)
socket(0x1, 0x80000, 0x81)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x800, 0x2)
syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfffffffffffffc0b, 0x100000000100)
r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x800)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$RTC_AIE_OFF(r1, 0x7002)
r2 = getpid()
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x4, @sdr={0x3447504d}})
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100))
write$P9_RSTAT(r1, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ptrace(0x10, r2)
ptrace$cont(0x20, r2, 0x0, 0x0)
ptrace$setsig(0x4203, r2, 0x7, &(0x7f00000002c0)={0x0, 0x0, 0x701e})
r3 = socket(0x10, 0x20000000802, 0x0)
write(r3, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:36 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:36 executing program 5:
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000300)='ppp0\x00', 0x5, 0x2)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0)
sync_file_range(r0, 0x1, 0x2, 0x5)
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x400)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x0, 0x2, 0x400, 0x3, 0x3, 0x6, 0x4f, 0x38, 0x89, 0x5e, 0x6, 0x20, 0x1, 0x9a, 0x8, 0x3}, [{0x6474e551, 0x7fd, 0x1000, 0x1, 0x9, 0x9, 0x7, 0x80}, {0x6474e551, 0x9, 0x9, 0x4, 0x80000001, 0x7, 0x5, 0x81}], "1d3aaedcdfe79649e254de8e2978cb2707d3dd067147acb98b88a98376c11de1e92823e3cccb0905915da4c3cb0b735af0092b8b659d36d457a7a1aa9605bddcbea19e3680", [[], [], [], [], [], []]}, 0x6bd)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00012abd7000fbdbdf25090000003c00030014000600fe80000000000000000000000000001b08000800070000001400020076657468305f746f5f626f6e64000000080007004e2200000c000300080007004e22000008000500290600000800050008000000"], 0x1}}, 0x80)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000000)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1)
fstat(r3, &(0x7f0000000340))
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000c40)={<r4=>0x0, 0x3, 0x4, [0x10001, 0x1000000000000000, 0x2, 0x1]}, &(0x7f0000000c80)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000cc0)={r4, @in6={{0xa, 0x4e22, 0xb1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, 0xe3b9, 0x9}, &(0x7f0000000d80)=0x90)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r6 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000440)=0xcf83)
setsockopt$inet6_int(r6, 0x29, 0x0, &(0x7f0000000040)=0x100000000001f, 0x87)
sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000280)={<r7=>0x0, 0xd1}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000480)={r7, 0xcd, "0c835bc564024a831a9c2a1cbfe07e86422d7f5dab905d43b339f5d406f0d18d9f019dc2f65a3c95a9f77d72c597f5fada59effdf8e81dfa638402c30a68aa0accadac24bbbe4f4e05145c67abbaf6183b4fd59a3fe20b91424fd23d96b12ead2a69f0d5998d2b87ef6628f64789ac3fd7d0f65dae7b8ba2b64e7587854ec3c1f399168a23df815b462c225023931be908f6ea0894121afa3f125ee762072d565d7fbcb8f872a88dbb2bd01bcdac1dfab3a961e503d8e39bfe4662eedba6615a69108cc0a68f4020855136a871"}, &(0x7f00000003c0)=0xd5)
tee(r5, r6, 0x3, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x3}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @broadcast}], 0x3c)

[ 1346.502830] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1346.534721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1346.583092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:36 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101001, 0x0)
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x7fff, 0x3200e0, "fdd424890c20179db09b69cc09915ec8d4d00015fa715c7e", {0x7c, 0x6}, 0xffffffffffff4882})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x248000, 0x0)

06:59:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:37 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000080)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xfffffffffffffeec)

06:59:38 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000240))
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000))
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x400)
eventfd(0x8)
shutdown(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x4, 0x4)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400000, 0x0)
write$P9_RCLUNK(r2, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000040)=""/74, &(0x7f00000000c0)=0x4a)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x1, "4f52315cd6ac7025"})
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @mcast1, 0x75db}, 0x1c)
connect$inet6(r0, &(0x7f0000001ff2)={0xa, 0x0, 0x0, @mcast1}, 0x19)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x200080, 0x0)

06:59:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:38 executing program 0:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x4)
r1 = socket(0x10, 0x20000000802, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1f1e4575}, @timestamp], 0x2)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:38 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(0x0, 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:38 executing program 5:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000300)='.dead\x00', 0x0, 0x0, 0x0, r0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0)
r1 = syz_open_dev$admmidi(0x0, 0x0, 0x200000)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x100)
getgroups(0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x3, 0x8})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa7, 0x4, 0x100000001, 0x0, r2}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f00000002c0)}, 0x10)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)=@deltclass={0x58c, 0x29, 0x305, 0x70bd26, 0x25dfdbfb, {0x0, r4, {0xb, 0xfff3}, {0x17, 0x1c}, {0x0, 0xf}}, [@TCA_RATE={0x8, 0x5, {0xfff, 0x4}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x84, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x3, 0x100000001}}, @TCA_HFSC_FSC={0x10, 0x2, {0x80, 0x5, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0xa1, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x20400000000, 0x7711, 0x5a8f}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x100000001, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x0, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x0, 0xadf}}, @TCA_HFSC_FSC={0x10, 0x2, {0x85f5, 0x5, 0x2}}]}}, @TCA_RATE={0x8, 0x5, {0x1ff, 0xf2}}, @TCA_RATE={0x8, 0x5, {0x100000000, 0x4}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x54, 0x2, [@TCA_ATM_HDR={0x38, 0x3, "8b0db08cce654b4f965e229616c4e1651d86a2ebe8ec3f2afd452e45c3a6c6ba48b76e5f2c8c343682ae73ac9cf035ad57ee60"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0xffff}}]}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x100000001}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x100}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7fff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1d}]}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x414, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x800}, @TCA_HTB_RTAB={0x404, 0x4, [0xeb4, 0x3ff, 0x0, 0x81, 0x2, 0x8, 0x8000, 0x20, 0xce, 0x8001, 0x6, 0x1, 0x4, 0x2, 0xff, 0x6, 0x68, 0x24800, 0x2, 0x1, 0x81, 0x9, 0xc29, 0x6, 0x2, 0x5, 0x6, 0x3, 0x6, 0x40, 0x6, 0xfffffffffffffffe, 0x7, 0x13, 0xff, 0x401, 0x3, 0x401, 0x800, 0x5, 0x40, 0x5, 0x80000001, 0x1000, 0x798, 0x800, 0x0, 0x7, 0x1, 0x9, 0x7, 0x2, 0x8, 0x5, 0x7, 0xba, 0x8, 0x5, 0x100, 0x5, 0x2, 0x0, 0x100000001, 0x1, 0x10001, 0x7fff, 0x5, 0xfffffffffffffffa, 0xff, 0x6, 0x4, 0x9, 0x80, 0x2, 0xaa, 0x5a41, 0x20fe, 0x1, 0x1000, 0x3, 0x4, 0x100, 0x100000000, 0x96, 0x3, 0x10000, 0x7f, 0x9, 0x9, 0xe1, 0x7f, 0x100000000, 0x0, 0x0, 0xe, 0x378e, 0x9, 0x5, 0xfff, 0x3, 0x2, 0x1f, 0x1, 0x24e, 0x7, 0x4, 0x1f, 0xabf2, 0x3, 0x8, 0x8, 0x5, 0xfe52, 0x163, 0x0, 0x0, 0xc1d1, 0x7f, 0x3, 0xffffffffcabb079f, 0xfffffffe00000000, 0x200, 0x43, 0x4, 0x1, 0x3, 0x9e, 0x7, 0x3, 0x80000000, 0x6695, 0x200000000000000, 0x9, 0x5, 0x9, 0x1000, 0x2, 0x9, 0x5, 0xa310, 0x7, 0x3f, 0x2, 0x1, 0x0, 0x8498, 0xcc, 0x1, 0x97, 0x401, 0x7036, 0x40, 0x9, 0x1, 0x5, 0x1000, 0x8001, 0x1, 0x5, 0xb6, 0x82ae, 0x9, 0x0, 0x1f, 0x80000000, 0x400, 0xfff, 0x0, 0x8, 0x4, 0x9, 0x20, 0xa63a, 0x800, 0xfffffffffffffe01, 0xdc, 0x1, 0x76, 0xa000000000000, 0x4, 0xdb, 0x5, 0xffffffffffffff19, 0x2, 0x10001, 0xffffffff, 0x0, 0x7, 0x2, 0x2, 0x2, 0x0, 0x5, 0x1ff, 0x13d2, 0x4, 0x4, 0xffffffff, 0x8, 0xfffffffffffffffe, 0x1, 0xfffffffffffff000, 0x5, 0x743, 0x1, 0x6, 0xfb, 0x1000, 0x2, 0x8, 0xdfd, 0xffffffffffff0001, 0x5, 0x9, 0x6, 0x4, 0x3, 0x1, 0x7ff, 0x1, 0xfff, 0x2, 0x9, 0x1, 0x9a, 0xc2ea, 0x2d4, 0x0, 0x5, 0xbc0, 0x5fd, 0x9, 0x0, 0x2, 0xfffffffffffffff9, 0x7f, 0x10000, 0x5, 0x5, 0x1f, 0x400, 0x1, 0xff, 0x7, 0x8, 0x2, 0x3a9b, 0x2, 0x9, 0x3, 0xc2c, 0x3bb, 0x101, 0x3, 0x6, 0x92cd]}]}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}]}, 0x58c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008014)

06:59:38 executing program 4 (fault-call:8 fault-nth:0):
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1348.453510] IPVS: ftp: loaded support on port[0] = 21
06:59:38 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='+cpuset\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
accept4$tipc(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000)
kcmp(r0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
socket(0x5, 0x80e, 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000100)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:38 executing program 5:
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x4, 0xeb}, 0x0)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1f)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040))
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f00000000c0)='lo#:\x00', <r1=>0xffffffffffffffff}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0x4)
ioctl$NBD_SET_SOCK(r0, 0xab00, r0)

06:59:38 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xf31, 0x400000)
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000140)=""/75)
r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xffffffffffffffff, 0x8c04)
ioctl$SG_IO(r1, 0x2284, 0x0)

06:59:38 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x100000000)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
socket$bt_cmtp(0x1f, 0x3, 0x5)
io_setup(0x20, &(0x7f0000000000)=<r1=>0x0)
io_pgetevents(r1, 0x800, 0x3, &(0x7f0000000040)=[{}, {}, {}], 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x7}, 0x8})

06:59:38 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8c4)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0xfffffffc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))

[ 1348.630946] validate_nla: 5 callbacks suppressed
[ 1348.630956] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:38 executing program 2:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x105000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f0000000480)='.\a', 0x2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
fcntl$setflags(r0, 0x2, 0x1)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={'sm3-generic\x00'}})

06:59:38 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[])
r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x0, 0x200000)
r4 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x20000)
r5 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x97b, 0x0)
ioctl$EVIOCGKEYCODE(r3, 0x80084504, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100))
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4)
rmdir(&(0x7f0000001540)='./file0/file0\x00')
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x1)
mkdirat(r1, &(0x7f0000000580)='./file0/file0\x00', 0x10c)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000540)=0xffffffff, 0x4)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ppoll(&(0x7f00000001c0)=[{r6}], 0x2000000000000127, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8)
fsetxattr$security_ima(r5, &(0x7f0000000180)='security.ima\x00', &(0x7f00000004c0)=@md5={0x1, "2eff654babee9d8920b09c5318d0826a"}, 0x11, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
rmdir(&(0x7f0000000400)='./file0\x00')
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)

[ 1348.862392] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1349.032274] __nla_parse: 5 callbacks suppressed
[ 1349.032284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1349.066976] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1349.089478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:39 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(0x0, 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:39 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200400, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1349.219375] net_ratelimit: 26 callbacks suppressed
[ 1349.219382] protocol 88fb is buggy, dev hsr_slave_0
[ 1349.229583] protocol 88fb is buggy, dev hsr_slave_1
[ 1349.234719] protocol 88fb is buggy, dev hsr_slave_0
[ 1349.239826] protocol 88fb is buggy, dev hsr_slave_1
[ 1349.244972] protocol 88fb is buggy, dev hsr_slave_0
[ 1349.250193] protocol 88fb is buggy, dev hsr_slave_1
[ 1349.255315] protocol 88fb is buggy, dev hsr_slave_0
[ 1349.260428] protocol 88fb is buggy, dev hsr_slave_1
[ 1349.304930] FAULT_INJECTION: forcing a failure.
[ 1349.304930] name failslab, interval 1, probability 0, space 0, times 0
[ 1349.338802] CPU: 0 PID: 26828 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1349.345696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1349.355055] Call Trace:
[ 1349.357687]  dump_stack+0x172/0x1f0
[ 1349.361338]  should_fail.cold+0xa/0x1b
[ 1349.365248]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1349.370366]  ? lock_downgrade+0x810/0x810
[ 1349.374529]  ? ___might_sleep+0x163/0x280
[ 1349.378711]  __should_failslab+0x121/0x190
[ 1349.382960]  should_failslab+0x9/0x14
[ 1349.386769]  kmem_cache_alloc_node_trace+0x270/0x720
[ 1349.391884]  ? __might_fault+0x12b/0x1e0
[ 1349.395956]  ? find_held_lock+0x35/0x130
[ 1349.400032]  __get_vm_area_node+0x12b/0x3a0
[ 1349.404368]  __vmalloc_node_range+0xd4/0x790
[ 1349.408858]  ? xt_copy_counters_from_user+0x286/0x330
[ 1349.414072]  ? xt_copy_counters_from_user+0x286/0x330
[ 1349.419272]  vmalloc+0x6b/0x90
[ 1349.422474]  ? xt_copy_counters_from_user+0x286/0x330
[ 1349.427687]  xt_copy_counters_from_user+0x286/0x330
[ 1349.432719]  ? xt_alloc_table_info+0xa0/0xa0
[ 1349.437135]  ? perf_trace_lock+0x510/0x510
[ 1349.441383]  ? _parse_integer+0x190/0x190
[ 1349.445539]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1349.451075]  ? refcount_sub_and_test_checked+0x161/0x1f0
[ 1349.451091]  ? refcount_inc_checked+0x70/0x70
[ 1349.451179]  do_add_counters+0xa4/0x5d0
[ 1349.451198]  ? refcount_dec_and_test_checked+0x1b/0x20
[ 1349.470359]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1349.475890]  ? apparmor_capable+0x2bb/0x5d0
[ 1349.480202]  ? ipt_alloc_initial_table+0x660/0x660
[ 1349.485144]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1349.490715]  ? ns_capable_common+0x141/0x170
[ 1349.495129]  do_ipt_set_ctl+0x19e/0x492
[ 1349.499107]  ? common_interrupt+0x1/0xf
[ 1349.503075]  ? compat_do_ipt_set_ctl+0x160/0x160
[ 1349.507822]  ? wait_for_completion+0x440/0x440
[ 1349.512415]  ? mutex_unlock+0xd/0x10
[ 1349.516121]  ? nf_sockopt_find.constprop.0+0x226/0x290
[ 1349.521393]  nf_setsockopt+0x7d/0xd0
[ 1349.525097]  ip_setsockopt+0xdf/0x100
[ 1349.528958]  udp_setsockopt+0x68/0xb0
[ 1349.532775]  ipv6_setsockopt+0xbc/0x170
[ 1349.536766]  udpv6_setsockopt+0x68/0xb0
[ 1349.540907]  sock_common_setsockopt+0x9a/0xe0
[ 1349.545414]  __sys_setsockopt+0x180/0x280
[ 1349.549567]  ? kernel_accept+0x310/0x310
[ 1349.553622]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1349.558394]  ? do_syscall_64+0x26/0x610
[ 1349.562359]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1349.567724]  ? do_syscall_64+0x26/0x610
[ 1349.571707]  __x64_sys_setsockopt+0xbe/0x150
[ 1349.576109]  do_syscall_64+0x103/0x610
[ 1349.579991]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1349.585168] RIP: 0033:0x457f29
[ 1349.588360] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1349.607256] RSP: 002b:00007f3ab0270c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1349.614959] RAX: ffffffffffffffda RBX: 00007f3ab0270c90 RCX: 0000000000457f29
[ 1349.622751] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000005
[ 1349.630763] RBP: 000000000073bf00 R08: 0000000000000068 R09: 0000000000000000
[ 1349.638019] R10: 0000000020000000 R11: 0000000000000246 R12: 00007f3ab02716d4
[ 1349.645276] R13: 00000000004cbbd8 R14: 00000000004d9930 R15: 0000000000000006
[ 1349.652944] protocol 88fb is buggy, dev hsr_slave_0
[ 1349.658024] protocol 88fb is buggy, dev hsr_slave_1
[ 1349.666661] syz-executor.4: vmalloc: allocation failure: 64 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[ 1349.687467] CPU: 0 PID: 26828 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1349.694338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1349.703699] Call Trace:
[ 1349.706310]  dump_stack+0x172/0x1f0
[ 1349.709968]  warn_alloc.cold+0x87/0x17f
[ 1349.713958]  ? zone_watermark_ok_safe+0x260/0x260
[ 1349.718822]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1349.723868]  ? __might_fault+0x12b/0x1e0
[ 1349.727940]  ? find_held_lock+0x35/0x130
[ 1349.732030]  ? __get_vm_area_node+0x2df/0x3a0
[ 1349.736553]  __vmalloc_node_range+0x48a/0x790
[ 1349.741069]  ? xt_copy_counters_from_user+0x286/0x330
[ 1349.746273]  vmalloc+0x6b/0x90
[ 1349.749517]  ? xt_copy_counters_from_user+0x286/0x330
[ 1349.754697]  xt_copy_counters_from_user+0x286/0x330
[ 1349.759719]  ? xt_alloc_table_info+0xa0/0xa0
[ 1349.764115]  ? perf_trace_lock+0x510/0x510
[ 1349.768339]  ? _parse_integer+0x190/0x190
[ 1349.772492]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1349.778027]  ? refcount_sub_and_test_checked+0x161/0x1f0
[ 1349.783679]  ? refcount_inc_checked+0x70/0x70
[ 1349.788168]  do_add_counters+0xa4/0x5d0
[ 1349.792135]  ? refcount_dec_and_test_checked+0x1b/0x20
[ 1349.797400]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1349.802926]  ? apparmor_capable+0x2bb/0x5d0
[ 1349.807241]  ? ipt_alloc_initial_table+0x660/0x660
[ 1349.812166]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1349.817696]  ? ns_capable_common+0x141/0x170
[ 1349.822103]  do_ipt_set_ctl+0x19e/0x492
[ 1349.826065]  ? common_interrupt+0x1/0xf
[ 1349.830026]  ? compat_do_ipt_set_ctl+0x160/0x160
[ 1349.834772]  ? wait_for_completion+0x440/0x440
[ 1349.839346]  ? mutex_unlock+0xd/0x10
[ 1349.843052]  ? nf_sockopt_find.constprop.0+0x226/0x290
[ 1349.848317]  nf_setsockopt+0x7d/0xd0
[ 1349.852023]  ip_setsockopt+0xdf/0x100
[ 1349.855841]  udp_setsockopt+0x68/0xb0
[ 1349.859653]  ipv6_setsockopt+0xbc/0x170
[ 1349.863631]  udpv6_setsockopt+0x68/0xb0
[ 1349.867625]  sock_common_setsockopt+0x9a/0xe0
[ 1349.872134]  __sys_setsockopt+0x180/0x280
[ 1349.876279]  ? kernel_accept+0x310/0x310
[ 1349.880347]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1349.885090]  ? do_syscall_64+0x26/0x610
[ 1349.889055]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1349.894406]  ? do_syscall_64+0x26/0x610
[ 1349.898384]  __x64_sys_setsockopt+0xbe/0x150
[ 1349.902791]  do_syscall_64+0x103/0x610
[ 1349.906687]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1349.911876] RIP: 0033:0x457f29
[ 1349.915055] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1349.933960] RSP: 002b:00007f3ab0270c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1349.941663] RAX: ffffffffffffffda RBX: 00007f3ab0270c90 RCX: 0000000000457f29
[ 1349.948920] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000005
[ 1349.956175] RBP: 000000000073bf00 R08: 0000000000000068 R09: 0000000000000000
[ 1349.963431] R10: 0000000020000000 R11: 0000000000000246 R12: 00007f3ab02716d4
[ 1349.970687] R13: 00000000004cbbd8 R14: 00000000004d9930 R15: 0000000000000006
[ 1349.979369] Mem-Info:
[ 1349.981849] active_anon:304267 inactive_anon:7172 isolated_anon:0
[ 1349.981849]  active_file:8114 inactive_file:56331 isolated_file:0
[ 1349.981849]  unevictable:3 dirty:822 writeback:0 unstable:0
[ 1349.981849]  slab_reclaimable:15415 slab_unreclaimable:122779
[ 1349.981849]  mapped:61498 shmem:7225 pagetables:19961 bounce:0
[ 1349.981849]  free:852190 free_pcp:1103 free_cma:0
[ 1350.016200] Node 0 active_anon:1216192kB inactive_anon:27968kB active_file:32316kB inactive_file:220940kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:245272kB dirty:2576kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 735232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1350.016230] Node 1 active_anon:876kB inactive_anon:720kB active_file:140kB inactive_file:4384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:720kB dirty:712kB writeback:0kB shmem:720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1350.016236] Node 0 DMA free:10480kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1350.016270] lowmem_reserve[]: 0 2553 2555 2555
[ 1350.016287] Node 0 DMA32 free:60336kB min:36232kB low:45288kB high:54344kB active_anon:1216192kB inactive_anon:27968kB active_file:32316kB inactive_file:220900kB unevictable:12kB writepending:2576kB present:3129332kB managed:2617972kB mlocked:0kB kernel_stack:31296kB pagetables:79372kB bounce:0kB free_pcp:2156kB local_pcp:804kB free_cma:0kB
[ 1350.016324] lowmem_reserve[]: 0 0 2 2
[ 1350.072455] Node 0 Normal free:12kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1350.134525] lowmem_reserve[]: 0 0 0 0
[ 1350.163749] Node 1 Normal free:3337932kB min:53624kB low:67028kB high:80432kB active_anon:876kB inactive_anon:720kB active_file:140kB inactive_file:4384kB unevictable:0kB writepending:712kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:256kB pagetables:472kB bounce:0kB free_pcp:2256kB local_pcp:928kB free_cma:0kB
[ 1350.163785] lowmem_reserve[]: 0 0 0 0
[ 1350.197194] Node 0 DMA: 6*4kB (UM) 11*8kB (UM) 6*16kB (UM) 3*32kB (M) 3*64kB (UM) 2*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (M) 2*2048kB (M) 1*4096kB (E) = 10480kB
[ 1350.216119] Node 0 DMA32: 
[ 1350.216131] 756*4kB (UMEH) 782*8kB (UMEH) 174*16kB (UMEH) 231*32kB (UMEH) 20*64kB (UEH) 112*128kB (UME) 39*256kB (UMEH) 4*512kB (UMH) 5*1024kB (UME) 4*2048kB (M) 0*4096kB = 60416kB
[ 1350.235683] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[ 1350.247584] Node 1 Normal: 283*4kB (UM) 475*8kB (UME) 370*16kB (UME) 177*32kB (UME) 80*64kB (UME) 29*128kB (UM) 22*256kB (UME) 9*512kB (UM) 1*1024kB (U) 0*2048kB 806*4096kB (M) = 3337988kB
[ 1350.265973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1350.275336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1350.284348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1350.293611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1350.302602] 71679 total pagecache pages
06:59:40 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x20)

06:59:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:40 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x800, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x0)
write$FUSE_OPEN(r3, &(0x7f0000000100)={0x20, 0xfffffffffffffffe, 0x6, {0x0, 0x1}}, 0x20)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='veth1_to_bridge\x00')
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="6bf3935601bb39050033fa3b1c000000", @ANYRES16=r4, @ANYBLOB="23062dbd7000fedbdf250c00000008000600ae0a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @empty}})
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @rand_addr=0xfffffffffffffff8}})
membarrier(0x10, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0)

[ 1350.306750] 0 pages in swap cache
[ 1350.310485] Swap cache stats: add 0, delete 0, find 0/0
[ 1350.316010] Free swap  = 0kB
[ 1350.316017] Total swap = 0kB
[ 1350.322511] 1965979 pages RAM
[ 1350.325739] 0 pages HighMem/MovableOnly
[ 1350.330032] 339412 pages reserved
[ 1350.333614] 0 pages cma reserved
06:59:40 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x983, 0x8001, 0x0, 0x101})
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:40 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(0x0, 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0xc0000101, 0x0, 0x277], [0xc2]})

06:59:40 executing program 2:

[ 1350.474808] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1350.486270] IPVS: ftp: loaded support on port[0] = 21
[ 1350.520888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:40 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="dbd95e8832453e1f09c34b9a9de8b7da71488c3e231098eba774479a6a03d9a59c5b03c4ce2aab0385302c4c1ccb2325ac0d6346bb4dedbc0ad64910ad40d31a055e2d021f234ac1713b92361b49a6e3df1287b935a894495060fea8ef34dce3867fa4f139b39c001119dd70548fd8356b3d2d18c29e8fc02595202d11cd4b1206c0f5fe2d8682822460ef5f4731343a57ea3bc815720021d7746413dc19858afefa10d05d510d32fcc77408fcda3e1c4296a4b562666053b669", 0xba, r0}, 0x68)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x30d203)
write$P9_RREMOVE(r1, &(0x7f0000000200)={0x7, 0x7b, 0x1}, 0x7)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040))

06:59:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:40 executing program 2:

[ 1350.611123] kvm [26921]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
06:59:40 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
ioctl$KDSETMODE(r0, 0x4b3a, 0x3)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)

[ 1350.685601] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1350.695634] kvm [26921]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
[ 1350.720142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:41 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x2, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:41 executing program 2:

06:59:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:41 executing program 5:

06:59:41 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x89d3, 0x10200)
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x2, 0x3, 0x1})
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:41 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:41 executing program 2:

[ 1351.245989] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:41 executing program 5:

06:59:41 executing program 0:
socket$inet(0x2, 0xa, 0x7ff)
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000000)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1351.319584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1351.341573] IPVS: ftp: loaded support on port[0] = 21
06:59:41 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffff9c})
recvfrom$inet6(r1, &(0x7f0000000040)=""/72, 0xfffffffffffffd62, 0x2001, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x101}, 0x15)
openat$cgroup_int(r0, &(0x7f0000002340)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
recvmmsg(r4, &(0x7f0000001d40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/108, 0xfffffe01}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/103, 0x67}], 0x8}, 0x188573df}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/98, 0x62}], 0x2, &(0x7f0000001cc0)=""/81, 0x51}, 0x200}], 0x2, 0x2000, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x877b2079}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00)
sendmsg(r4, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0)
r5 = socket(0x9, 0x3, 0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000440)={@loopback, <r7=>0x0}, &(0x7f0000000a00)=0x14)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'bond0\x00', <r8=>r7})
sendmsg$kcm(r1, &(0x7f0000000a40)={&(0x7f0000000380)=@ipx={0x4, 0x2b, 0x8, "3da8e93a03c7", 0x3f}, 0xfea8, 0x0}, 0x20000000)
r9 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000c00)='team\x00')
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={<r10=>0x0}, &(0x7f0000000080)=0xc)
ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000400)=r10)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0xd0, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e21, 0x27de, @local, 0x9}, 0x4, [0x8, 0x9, 0x40, 0x10000000, 0x58f2, 0x6, 0xfffffffffffffffa, 0x44]}, 0x5c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a2, &(0x7f0000000040)={'bridge0\x00', r8})
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r11, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070")
socket$inet6(0xa, 0x2, 0x6e)
socket$inet_sctp(0x2, 0x200000000000005, 0x84)
r12 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'bond0\x00'}, 0x18)
ioctl(r12, 0x8982, &(0x7f0000000000))

06:59:41 executing program 5:
r0 = msgget(0xffffffffffffffff, 0x0)
msgsnd(r0, &(0x7f0000001080)=ANY=[], 0x0, 0x0)

06:59:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1351.531264] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1351.538743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1351.758651] bridge0: port 3(bond0) entered blocking state
[ 1351.810261] bridge0: port 3(bond0) entered disabled state
[ 1351.867243] device bond0 entered promiscuous mode
[ 1351.908585] device bond_slave_0 entered promiscuous mode
[ 1351.950537] device bond_slave_1 entered promiscuous mode
[ 1351.967637] bridge0: port 3(bond0) entered blocking state
[ 1351.973304] bridge0: port 3(bond0) entered forwarding state
[ 1352.195758] IPVS: ftp: loaded support on port[0] = 21
[ 1352.423441] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1352.460478] CPU: 1 PID: 27000 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1352.467359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1352.476719] Call Trace:
[ 1352.479315]  dump_stack+0x172/0x1f0
[ 1352.482962]  dump_header+0x10f/0xb6c
[ 1352.486688]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1352.491799]  ? ___ratelimit+0x60/0x595
[ 1352.495696]  ? do_raw_spin_unlock+0x57/0x270
[ 1352.500128]  oom_kill_process.cold+0x10/0x6f5
[ 1352.504637]  ? task_will_free_mem+0x139/0x6e0
[ 1352.509149]  out_of_memory+0x79a/0x1280
[ 1352.513135]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1352.518248]  ? oom_killer_disable+0x280/0x280
[ 1352.522753]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1352.527873]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1352.532554]  ? memcg_memory_event+0x40/0x40
[ 1352.536904]  ? _raw_spin_unlock+0x2d/0x50
[ 1352.541060]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1352.546169]  try_charge+0xfec/0x1570
[ 1352.549891]  ? find_held_lock+0x35/0x130
[ 1352.553965]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1352.558827]  ? kasan_check_read+0x11/0x20
[ 1352.562994]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1352.567846]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1352.572448]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1352.577402]  shmem_getpage_gfp+0x69b/0x3520
[ 1352.581756]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1352.586870]  ? lock_downgrade+0x810/0x810
[ 1352.591039]  shmem_fault+0x22d/0x760
[ 1352.594767]  ? __handle_mm_fault+0x349d/0x3f20
[ 1352.599376]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1352.604674]  ? lock_downgrade+0x810/0x810
[ 1352.608833]  __do_fault+0x116/0x4e0
[ 1352.612471]  __handle_mm_fault+0x2cbd/0x3f20
[ 1352.616901]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1352.621754]  ? find_held_lock+0x35/0x130
[ 1352.625820]  ? handle_mm_fault+0x322/0xb30
[ 1352.630073]  ? kasan_check_read+0x11/0x20
[ 1352.634229]  handle_mm_fault+0x43f/0xb30
[ 1352.634251]  __get_user_pages+0x7b6/0x1a40
[ 1352.634278]  ? follow_page_mask+0x19a0/0x19a0
[ 1352.634297]  ? memset+0x32/0x40
[ 1352.642580]  populate_vma_page_range+0x20d/0x2a0
[ 1352.642599]  __mm_populate+0x204/0x380
[ 1352.642617]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1352.642646]  vm_mmap_pgoff+0x213/0x230
[ 1352.642670]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1352.642686]  ? kasan_check_read+0x11/0x20
[ 1352.642703]  ? _copy_to_user+0xc9/0x120
[ 1352.642722]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1352.642742]  ksys_mmap_pgoff+0xf7/0x630
[ 1352.642763]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1352.642780]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1352.642795]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1352.642810]  ? do_syscall_64+0x26/0x610
[ 1352.642828]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1352.642848]  __x64_sys_mmap+0xe9/0x1b0
[ 1352.642873]  do_syscall_64+0x103/0x610
[ 1352.642894]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1352.642906] RIP: 0033:0x457f29
[ 1352.659278] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1352.659287] RSP: 002b:00007f3ab022ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1352.659300] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1352.659308] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1352.659316] RBP: 000000000073c040 R08: ffffffffffffffff R09: 0000000000000000
[ 1352.659324] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab022f6d4
[ 1352.659334] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1352.804480] memory: usage 307200kB, limit 307200kB, failcnt 4896
[ 1352.812407] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1352.829857] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1352.837631] Memory cgroup stats for /syz4: cache:15940KB rss:215780KB rss_huge:180224KB shmem:15940KB mapped_file:4620KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4636KB active_anon:227348KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1352.868464] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4
[ 1352.868497] ,task_memcg=/syz4,task=syz-executor.4,pid=26959,uid=0
[ 1352.904009] Memory cgroup out of memory: Kill process 26959 (syz-executor.4) score 1117 or sacrifice child
[ 1352.917631] Killed process 26959 (syz-executor.4) total-vm:72708kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:4352kB
[ 1352.937573] oom_reaper: reaped process 26959 (syz-executor.4), now anon-rss:0kB, file-rss:34748kB, shmem-rss:4352kB
06:59:43 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x3, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:43 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0})
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:43 executing program 5:
nanosleep(&(0x7f0000000080)={0x0, 0x2397443c}, &(0x7f00000000c0))
execve(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = socket(0x18, 0x1, 0x0)
close(r0)
r1 = socket(0x18, 0x400000002, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)

06:59:43 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:43 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00')
pipe2(0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x3)

06:59:43 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4)

[ 1353.621620] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1353.642262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1353.652842] IPVS: ftp: loaded support on port[0] = 21
06:59:43 executing program 0:
r0 = socket(0x4, 0x80000, 0x4)
write(r0, &(0x7f0000000000)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:43 executing program 2:
setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180))
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0)
getresuid(0x0, 0x0, &(0x7f00000001c0))
getrusage(0x1, &(0x7f0000000640))
r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140))
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a80)='keyring]\x00'}, 0x30)
ioctl$int_out(r0, 0x5462, &(0x7f0000000080))
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x10800, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x0)
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000240)=""/114)
unshare(0x40000000)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, 0x0)
ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000040))
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f00000000c0)=""/100, 0x1108000, 0x0, 0x7fff}, 0x18)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
gettid()
ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0)
gettid()
syz_open_dev$loop(0x0, 0x0, 0x0)

[ 1353.900610] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1353.930031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:44 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f0000000580)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000700)={0xb, @capture={0x1000, 0x1, {0x4, 0x8000}, 0x2, 0x7}})
r1 = perf_event_open(&(0x7f000001d000)={0x200000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000002c0)={0x5, 0x77b, 0xaf65, 0x67, 0x101, 0x3})
socket$isdn(0x22, 0x3, 0x24)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r2}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000700)})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x0, 0x0)
write$apparmor_exec(r4, &(0x7f0000000540)={'stack ', '\x00'}, 0x7)
r5 = request_key(&(0x7f0000000800)='logon\x00', &(0x7f0000000840)={'syz', 0x3}, &(0x7f0000000880)='syz', 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, r5)
r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000040)={0x1, 0x7, 0xa4d, 'queue1\x00', 0x9d46})
r7 = socket(0x10, 0x5, 0x0)
write(r7, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000440)="868b6d4802d2b2c6a925dbefb9a192a3fff5c6d24f7dc923a534a2b9f7842ebb912ad7aed232f497b34390af18b90fd02d1fcd53e2581585d0c48c75bfbb1a5a099ff4dbeef6e0acd9410f373e5cf33a9be4b4bee2a9c712129ea4bdcea272880cc0b159369b242eebf6641b6500befe263fb6c2024c57625a68d3aadb7f30113a04dea78c0da1e59d9c452d982211f03d1f133f22e404df100c5d4bcf20006b6fc7f5aeeea963e8de37f4ac0868970f2378b469e3fc79a23065d8233479674fa4ecc22ca8ac93a948f2cbe6e0f5c5c3c4ae5b208c0367d20791550e10fa7e28d21001fab045ebf7074dbe2f", 0xec, 0xfffffffffffffffc)

06:59:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1354.173690] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1354.194047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1354.237460] IPVS: ftp: loaded support on port[0] = 21
[ 1354.861617] IPVS: ftp: loaded support on port[0] = 21
[ 1354.874205] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1354.919370] CPU: 0 PID: 27023 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1354.926259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1354.935612] Call Trace:
[ 1354.938205]  dump_stack+0x172/0x1f0
[ 1354.941829]  dump_header+0x10f/0xb6c
[ 1354.945535]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1354.950628]  ? ___ratelimit+0x60/0x595
[ 1354.954518]  ? do_raw_spin_unlock+0x57/0x270
[ 1354.958933]  oom_kill_process.cold+0x10/0x6f5
[ 1354.963424]  ? task_will_free_mem+0x139/0x6e0
[ 1354.969566]  out_of_memory+0x79a/0x1280
[ 1354.973533]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1354.978629]  ? oom_killer_disable+0x280/0x280
[ 1354.983112]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1354.988226]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1354.992887]  ? memcg_memory_event+0x40/0x40
[ 1354.998684]  ? _raw_spin_unlock+0x2d/0x50
[ 1355.002841]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1355.007935]  try_charge+0xfec/0x1570
[ 1355.011663]  ? find_held_lock+0x35/0x130
[ 1355.015723]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1355.020562]  ? kasan_check_read+0x11/0x20
[ 1355.024719]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1355.029553]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1355.034128]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1355.039076]  shmem_getpage_gfp+0x69b/0x3520
[ 1355.043403]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1355.048497]  ? lock_downgrade+0x810/0x810
[ 1355.052639]  shmem_fault+0x22d/0x760
[ 1355.056347]  ? __handle_mm_fault+0x349d/0x3f20
[ 1355.060942]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1355.066215]  ? lock_downgrade+0x810/0x810
[ 1355.070364]  __do_fault+0x116/0x4e0
[ 1355.073981]  __handle_mm_fault+0x2cbd/0x3f20
[ 1355.078387]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1355.083221]  ? find_held_lock+0x35/0x130
[ 1355.087273]  ? handle_mm_fault+0x322/0xb30
[ 1355.091508]  ? kasan_check_read+0x11/0x20
[ 1355.095651]  handle_mm_fault+0x43f/0xb30
[ 1355.099792]  __get_user_pages+0x7b6/0x1a40
[ 1355.104029]  ? kasan_check_write+0x14/0x20
[ 1355.108275]  ? follow_page_mask+0x19a0/0x19a0
[ 1355.112765]  ? memset+0x32/0x40
[ 1355.116037]  populate_vma_page_range+0x20d/0x2a0
[ 1355.120787]  __mm_populate+0x204/0x380
[ 1355.124667]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1355.129596]  vm_mmap_pgoff+0x213/0x230
[ 1355.133480]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1355.138317]  ? kasan_check_read+0x11/0x20
[ 1355.142456]  ? _copy_to_user+0xc9/0x120
[ 1355.146424]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1355.151957]  ksys_mmap_pgoff+0xf7/0x630
[ 1355.155927]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1355.160852]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1355.165601]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1355.170363]  ? do_syscall_64+0x26/0x610
[ 1355.174354]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1355.179710]  __x64_sys_mmap+0xe9/0x1b0
[ 1355.183606]  do_syscall_64+0x103/0x610
[ 1355.187488]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1355.192667] RIP: 0033:0x457f29
[ 1355.195850] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1355.214741] RSP: 002b:00007f3ab024fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1355.222529] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1355.229803] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1355.237064] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1355.244324] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab02506d4
[ 1355.251590] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1355.459378] net_ratelimit: 26 callbacks suppressed
[ 1355.459385] protocol 88fb is buggy, dev hsr_slave_0
[ 1355.469511] protocol 88fb is buggy, dev hsr_slave_1
[ 1355.474639] protocol 88fb is buggy, dev hsr_slave_0
[ 1355.479740] protocol 88fb is buggy, dev hsr_slave_1
[ 1355.484890] protocol 88fb is buggy, dev hsr_slave_0
[ 1355.485193] memory: usage 307200kB, limit 307200kB, failcnt 4931
[ 1355.489980] protocol 88fb is buggy, dev hsr_slave_1
[ 1355.490056] protocol 88fb is buggy, dev hsr_slave_0
[ 1355.497244] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1355.501240] protocol 88fb is buggy, dev hsr_slave_1
[ 1355.575731] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1355.599513] Memory cgroup stats for /syz4: cache:16000KB rss:215780KB rss_huge:180224KB shmem:16000KB mapped_file:4488KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4608KB active_anon:227352KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1355.666567] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27015,uid=0
[ 1355.699443] Memory cgroup out of memory: Kill process 27015 (syz-executor.4) score 1121 or sacrifice child
[ 1355.716367] Killed process 27015 (syz-executor.4) total-vm:72840kB, anon-rss:172kB, file-rss:35712kB, shmem-rss:4484kB
[ 1355.740117] oom_reaper: reaped process 27015 (syz-executor.4), now anon-rss:0kB, file-rss:34776kB, shmem-rss:4488kB
06:59:45 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x4, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:45 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1b7, 0x4100)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040))
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:45 executing program 5:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000140)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
socket(0x2, 0x80801, 0x1000)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

06:59:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:45 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1355.859406] protocol 88fb is buggy, dev hsr_slave_0
[ 1355.864530] protocol 88fb is buggy, dev hsr_slave_1
[ 1355.889963] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1355.914607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:46 executing program 0:
r0 = socket(0x10, 0x20000000a02, 0x5)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:46 executing program 5:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002140)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000480)="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", 0x10d, 0xfffffffffffffffe)
socket$pppoe(0x18, 0x1, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000440)={r1, r0, r0}, &(0x7f0000000240)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'sha512-generic\x00'}})

[ 1355.984152] IPVS: ftp: loaded support on port[0] = 21
[ 1355.991968] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1356.023808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:46 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x410000)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xfffffe0f)

[ 1356.368748] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1356.406778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1356.918420] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1356.929628] CPU: 1 PID: 27074 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1356.936484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1356.945855] Call Trace:
[ 1356.948465]  dump_stack+0x172/0x1f0
[ 1356.952104]  dump_header+0x10f/0xb6c
[ 1356.952122]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1356.952137]  ? ___ratelimit+0x60/0x595
[ 1356.952151]  ? do_raw_spin_unlock+0x57/0x270
[ 1356.952171]  oom_kill_process.cold+0x10/0x6f5
[ 1356.952192]  ? task_will_free_mem+0x139/0x6e0
[ 1356.952217]  out_of_memory+0x79a/0x1280
[ 1356.952237]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1356.952254]  ? oom_killer_disable+0x280/0x280
[ 1356.952267]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1356.952292]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1356.987388]  ? memcg_memory_event+0x40/0x40
[ 1357.005958]  ? _raw_spin_unlock+0x2d/0x50
[ 1357.010121]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1357.015224]  try_charge+0xfec/0x1570
[ 1357.018932]  ? find_held_lock+0x35/0x130
[ 1357.018953]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1357.027854]  ? kasan_check_read+0x11/0x20
[ 1357.032021]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1357.036873]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1357.041467]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1357.046401]  shmem_getpage_gfp+0x69b/0x3520
[ 1357.050763]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1357.050782]  ? lock_downgrade+0x810/0x810
[ 1357.050804]  shmem_fault+0x22d/0x760
[ 1357.050820]  ? __handle_mm_fault+0x349d/0x3f20
[ 1357.050842]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1357.050864]  ? lock_downgrade+0x810/0x810
[ 1357.050882]  __do_fault+0x116/0x4e0
[ 1357.073648]  __handle_mm_fault+0x2cbd/0x3f20
[ 1357.081415]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1357.081430]  ? find_held_lock+0x35/0x130
[ 1357.081445]  ? handle_mm_fault+0x322/0xb30
[ 1357.081474]  ? kasan_check_read+0x11/0x20
[ 1357.081497]  handle_mm_fault+0x43f/0xb30
[ 1357.081516]  __get_user_pages+0x7b6/0x1a40
[ 1357.103172]  ? follow_page_mask+0x19a0/0x19a0
[ 1357.111432]  ? memset+0x32/0x40
[ 1357.111452]  populate_vma_page_range+0x20d/0x2a0
[ 1357.111472]  __mm_populate+0x204/0x380
[ 1357.111498]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1357.111525]  vm_mmap_pgoff+0x213/0x230
[ 1357.111547]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1357.111563]  ? kasan_check_read+0x11/0x20
[ 1357.136882]  ? _copy_to_user+0xc9/0x120
[ 1357.149811]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1357.155353]  ksys_mmap_pgoff+0xf7/0x630
[ 1357.159329]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1357.159346]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1357.159360]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1357.159374]  ? do_syscall_64+0x26/0x610
[ 1357.159392]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1357.178206]  __x64_sys_mmap+0xe9/0x1b0
[ 1357.187441]  do_syscall_64+0x103/0x610
[ 1357.191353]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1357.196554] RIP: 0033:0x457f29
[ 1357.199741] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1357.199749] RSP: 002b:00007f3ab024fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1357.199763] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1357.199771] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1357.199780] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1357.199788] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab02506d4
[ 1357.199801] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1357.264593] memory: usage 307200kB, limit 307200kB, failcnt 4988
[ 1357.274337] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1357.281426] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1357.287923] Memory cgroup stats for /syz4: cache:16032KB rss:215780KB rss_huge:180224KB shmem:16032KB mapped_file:4488KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4648KB active_anon:227348KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1357.310331] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27069,uid=0
[ 1357.325420] Memory cgroup out of memory: Kill process 27069 (syz-executor.4) score 1121 or sacrifice child
[ 1357.335699] Killed process 27069 (syz-executor.4) total-vm:72708kB, anon-rss:172kB, file-rss:35712kB, shmem-rss:4484kB
[ 1357.362157] oom_reaper: reaped process 27069 (syz-executor.4), now anon-rss:0kB, file-rss:34904kB, shmem-rss:4488kB
06:59:49 executing program 2:
syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0)

06:59:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x7c38)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x20000, 0x1000, 0x4}, 0x18)
close(r1)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r3)
accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0)

06:59:49 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x84000)
r2 = getpgrp(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000080)={{0x1, 0x6, 0x5b, 0xa4f, 'syz1\x00', 0xfff5}, 0x6, 0x9, 0x99e3, r2, 0x5, 0x1, 'syz0\x00', &(0x7f0000000040)=['&\'#\'vboxnet1bdev+eth0ppp0+ppp1#wlan0\xf3,ppp0cgroupeth0\x00', '\x00', 'em0self\x00', '\x00', '\x00'], 0x40, [], [0x80000001, 0x0, 0x9, 0x400]})
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r2)
connect$caif(r1, &(0x7f0000000200)=@util={0x25, "d9a2a42829046b3d06c68df98f2b6465"}, 0x18)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000240)={0x18, 0x1, 0x0, {0x100000000}}, 0x18)

06:59:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:49 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:49 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0xc, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

[ 1359.132848] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:49 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x766, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000500)={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00'}, &(0x7f0000000340)=0x36)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x18002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x0, 0x4})

[ 1359.183120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1359.201252] IPVS: ftp: loaded support on port[0] = 21
06:59:49 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780))
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000740)={0xa, &(0x7f0000000100)=""/77, &(0x7f0000000640)=[{0x10001, 0xa9, 0x100000001, &(0x7f0000000180)=""/169}, {0x0, 0x1000, 0x4, &(0x7f0000000d40)=""/4096}, {0xffffffffffff8000, 0x2d, 0x9, &(0x7f0000000240)=""/45}, {0x20, 0x67, 0xfffffffffffffffa, &(0x7f0000000280)=""/103}, {0x8000, 0xa2, 0x0, &(0x7f0000000300)=""/162}, {0xdf, 0x72, 0xfffffffffffffff9, &(0x7f00000003c0)=""/114}, {0xc5e2, 0x4f, 0xa0, &(0x7f0000000440)=""/79}, {0x3, 0x1a, 0x1, &(0x7f00000004c0)=""/26}, {0x4, 0x87, 0x4, &(0x7f0000000500)=""/135}, {0xfffffffffffff9d6, 0x79, 0x3, &(0x7f00000005c0)=""/121}]})
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000040))

[ 1359.253158] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1359.336620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(0xffffffffffffffff)
write$P9_RSTATu(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="98aabf37859dbf05006ffbf67f0800000001d4000000070000000000000000000010090000007f0000000d00000000004f00080076626f786e6574310900765f6f786e6574312b2b0070726f6373656c662f766d6a8c7c21dd57b40cec410bb6e4836574312b6a0b70312b6367726f7570766d6e312c235d465241d43159210000", @ANYRES32, @ANYRES32, @ANYRES32], 0x8d)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x133f63ac)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000200)={0x1000000, 0x0, 0x6, 0x9})
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xee9d, 0x4, 0x0, 0x2000000000, 0x0, 0x100000000, 0x4000, 0xc, 0x47f, 0x800, 0x9ea2, 0x40, 0x1ff, 0x7f, 0x3, 0xfff, 0x3, 0x0, 0x6, 0x1, 0x1, 0x80000000, 0x80, 0x6e4, 0x1, 0x41b, 0x101, 0x2e, 0x5, 0x0, 0x5, 0x8, 0x3ff, 0x10001, 0xffffffffffffffff, 0x9, 0x0, 0xffffffffffff0001, 0x3, @perf_bp={&(0x7f00000000c0), 0x4}, 0x8800, 0x8000, 0xffffffffffffffff, 0x1, 0x7a0, 0x1f77, 0x9}, r4, 0x3, r1, 0x2)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000))
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0)

06:59:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:49 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3635564e, 0x2, @stepwise={0xfffffffffffffffa, 0x7ef, 0x8, 0xeea7, 0x10000, 0x6}})

06:59:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x7c38)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x20000, 0x1000, 0x4}, 0x18)
close(r1)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r3)
accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0)

[ 1359.594811] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1359.658679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:49 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0xa5, 0x2, 0x7, "5c52e18fb8c49d78042aadc636d5dd41dd3200f51fc37349f30771dff6556dcd90718fa3cb0bad5eb4d1930c6e30d0d763d2eddc5ae5a327bd4912ca5f3a5ee6c53a26daeef52a1229b24e121fca220dba2ebdbb4b0196833a0bf02f2f733af2c3869f94d181cdee89a56683476bf1830a34dbe7de58132621a12d59cb84af10b0fc5d6bdbb3eb496af8f479ed8a2c2e5191bf882e7c9026b8ead2213d82b0cbafc46e519f"})

06:59:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1359.893865] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1359.934853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:50 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17c)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040))
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r0, 0x1, 0xfffff000, 0x1000000001000})
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:50 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1360.126379] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1360.175629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1361.276269] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1361.287041] CPU: 1 PID: 27120 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1361.293887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1361.303238] Call Trace:
[ 1361.305832]  dump_stack+0x172/0x1f0
[ 1361.309474]  dump_header+0x10f/0xb6c
[ 1361.313197]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1361.318303]  ? ___ratelimit+0x60/0x595
[ 1361.322194]  ? do_raw_spin_unlock+0x57/0x270
[ 1361.326628]  oom_kill_process.cold+0x10/0x6f5
[ 1361.331138]  ? task_will_free_mem+0x139/0x6e0
[ 1361.335656]  out_of_memory+0x79a/0x1280
[ 1361.339644]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1361.344752]  ? oom_killer_disable+0x280/0x280
[ 1361.349253]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1361.354366]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1361.359057]  ? memcg_memory_event+0x40/0x40
[ 1361.363399]  ? _raw_spin_unlock+0x2d/0x50
[ 1361.367550]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1361.372660]  try_charge+0xfec/0x1570
[ 1361.376477]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1361.381333]  ? kasan_check_read+0x11/0x20
[ 1361.385491]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1361.390341]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1361.394935]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1361.399874]  shmem_getpage_gfp+0x69b/0x3520
[ 1361.404307]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1361.409417]  ? lock_downgrade+0x810/0x810
[ 1361.413578]  shmem_fault+0x22d/0x760
[ 1361.417302]  ? __handle_mm_fault+0x349d/0x3f20
[ 1361.421911]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1361.427215]  ? lock_downgrade+0x810/0x810
[ 1361.431377]  __do_fault+0x116/0x4e0
[ 1361.435022]  __handle_mm_fault+0x2cbd/0x3f20
[ 1361.439446]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1361.444300]  ? find_held_lock+0x35/0x130
[ 1361.448366]  ? handle_mm_fault+0x322/0xb30
[ 1361.452627]  ? kasan_check_read+0x11/0x20
[ 1361.456791]  handle_mm_fault+0x43f/0xb30
[ 1361.460864]  __get_user_pages+0x7b6/0x1a40
[ 1361.465100]  ? retint_kernel+0x2d/0x2d
[ 1361.469009]  ? follow_page_mask+0x19a0/0x19a0
[ 1361.473510]  ? retint_kernel+0x2d/0x2d
[ 1361.477408]  ? memset+0x32/0x40
[ 1361.480698]  populate_vma_page_range+0x20d/0x2a0
[ 1361.485466]  __mm_populate+0x204/0x380
[ 1361.489363]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1361.494311]  vm_mmap_pgoff+0x213/0x230
[ 1361.498228]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1361.503077]  ? kasan_check_read+0x11/0x20
[ 1361.507235]  ? _copy_to_user+0xc9/0x120
[ 1361.511216]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1361.516770]  ksys_mmap_pgoff+0xf7/0x630
[ 1361.520755]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1361.525692]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1361.530453]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1361.535213]  ? do_syscall_64+0x26/0x610
[ 1361.539193]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1361.544570]  __x64_sys_mmap+0xe9/0x1b0
[ 1361.548473]  do_syscall_64+0x103/0x610
[ 1361.552369]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1361.557567] RIP: 0033:0x457f29
[ 1361.560768] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1361.579673] RSP: 002b:00007f3ab022ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1361.587405] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1361.594707] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1361.602501] RBP: 000000000073c040 R08: ffffffffffffffff R09: 0000000000000000
[ 1361.609771] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab022f6d4
[ 1361.617399] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1361.628748] memory: usage 307200kB, limit 307200kB, failcnt 5046
[ 1361.635218] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1361.642953] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1361.649231] Memory cgroup stats for /syz4: cache:16044KB rss:215780KB rss_huge:180224KB shmem:16044KB mapped_file:4620KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4856KB active_anon:227140KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1361.672845] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27107,uid=0
[ 1361.688215] Memory cgroup out of memory: Kill process 27107 (syz-executor.4) score 1121 or sacrifice child
[ 1361.698900] Killed process 27107 (syz-executor.4) total-vm:72840kB, anon-rss:172kB, file-rss:35708kB, shmem-rss:4352kB
[ 1361.710555] net_ratelimit: 26 callbacks suppressed
[ 1361.710601] protocol 88fb is buggy, dev hsr_slave_0
[ 1361.711169] protocol 88fb is buggy, dev hsr_slave_1
[ 1361.711920] protocol 88fb is buggy, dev hsr_slave_0
[ 1361.712360] protocol 88fb is buggy, dev hsr_slave_1
[ 1361.713281] protocol 88fb is buggy, dev hsr_slave_0
[ 1361.713641] protocol 88fb is buggy, dev hsr_slave_1
[ 1361.714430] protocol 88fb is buggy, dev hsr_slave_0
[ 1361.714759] protocol 88fb is buggy, dev hsr_slave_1
[ 1361.767762] oom_reaper: reaped process 27107 (syz-executor.4), now anon-rss:0kB, file-rss:34776kB, shmem-rss:4484kB
[ 1362.100900] protocol 88fb is buggy, dev hsr_slave_0
[ 1362.106439] protocol 88fb is buggy, dev hsr_slave_1
06:59:52 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x11, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:52 executing program 5:
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getegid()
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB="5c0000001400010f0000000000000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5c}, 0x8}, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x9834)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x298, r3, 0x120, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd0}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x154, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @local, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x100000001, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffffffffff801, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)

06:59:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:52 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_bond\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', r1})
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:52 executing program 2:
bind$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x6, 0x20000)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000001c0)=0x5, 0x4)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e21, @loopback}})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0)
write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0)={0x0, 0x9}, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000001263484003000000000000000400000000000000"], 0x0, 0x0, 0x0})

06:59:52 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1362.518636] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1362.526931] binder: 27186:27187 transaction failed 29189/-22, size 0-0 line 2896
[ 1362.528099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1362.548446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:52 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x204400, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x4000080)
r2 = accept4(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000100)=0x80, 0x80800)
setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000)=0x4, 0x4)
getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @broadcast, <r3=>0x0}, &(0x7f0000000240)=0xc)
ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x1f, 0x8, 0x5})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000d40)=@newtaction={0x1588, 0x30, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{0xd4, 0x1, @m_csum={0xd0, 0x6, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x5, 0xd, 0x787d6681, 0x6}, 0x63}}}, {0x9c, 0x6, "b744e0d4432f93575f10afc87af9739e262e734e650867a49f68ff1fcb343096b3d220dc2a66efc5711ca06ecf67273d759cab54c2f90608a5e6e930967c154ce4ca7be10152d3eef7cd8d46315e6545b42916fe3b1f5f9d4d259a92a570337c90e38f2bd494c0c48a2fb5ea77d178eb60564cea7d6bc6e6e90b086914258aa6a4fc9aacc1fd2d8cf8c951c8c5aeeb3e4fb70fb3c4a7366f"}}}}, {0x8c, 0x1, @m_connmark={0x88, 0x12, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x7, 0x36e, 0x2}, 0x4}}}, {0x50, 0x6, "c8a49907182d1d5a2a592d99b2e6c1e616da95790ca6d73cc7b69e806066c1c2c49372e8d71c311816904887fa28101a80a78f77a3fff4792509f1307362c0e0982e300c5034c8d68851"}}}}, {0xcc, 0x1, @m_connmark={0xc8, 0x15, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x715, 0x6, 0xffffffffffffffff, 0x2, 0x3}, 0x3ff}}}, {0x90, 0x6, "2866a66c42396ed1cb6af16f0e1b8aa5cd69a709382fa8ca6565c4daece419de47e0e235afd58438a23b6c669621b5cf83df28d694efe5fb9e7e404a55a81ec66fc8d6765aae4b35c1a0ef9c1911a7067fe8d9e89fbb821a95ef6c17365f50c42c485b1ca208fbf55d8f206d773aae4c481acdb5acc2dc406113603604c6a1d820f0681a861eae81ef12c9"}}}}, {0x1040, 0x1, @m_mirred={0x103c, 0xd, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2, 0x0, 0x6, 0x5f}, 0x1, r3}}}, {0x1004, 0x6, "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"}}}}, {0x40, 0x1, @m_tunnel_key={0x3c, 0x18, {{0x10, 0x1, 'tunnel_key\x00'}, {0x14, 0x2, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x10, 0x6, "9afff40510790229e69900f0"}}}}, {0x100, 0x1, @m_vlan={0xfc, 0x4, {{0xc, 0x1, 'vlan\x00'}, {0x5c, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xab4, 0x7, 0x3, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x1, 0x10000000, 0x100, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x89a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x31c}]}, {0x8c, 0x6, "4f19f269814fe9e5fba39f619d55e8fe891ce946ee7c86cffe3823aacd8d21c21a5ac95040c2461e0ae1a965773bca82b2f792b2379315fefdd92015e37b4b8820ac5ff37be04192d1e7c2fda40d0e5f6fd382503c245ba7623a1192cb3a452777a79b6031a39788e17d55f8fba8ce734227ecd5f6253bd1278b9e8824e1b8e4e618629cf481"}}}}, {0x64, 0x1, @m_nat={0x60, 0xb, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1ff, 0x7, 0x6, 0x40000}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffffff, 0x1}}}, {0x24, 0x6, "783aee10ae47f68c077fadafed88c6db52c1e7435a4e94de3183523ff798e8"}}}}, {0x70, 0x1, @m_vlan={0x6c, 0xe, {{0xc, 0x1, 'vlan\x00'}, {0x54, 0x2, [@TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x39}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2148, 0x4, 0x3, 0x4, 0x101}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x89a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4b1, 0x0, 0x615, 0x3f}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x4d3}]}, {0x4}}}}, {0xf4, 0x1, @m_tunnel_key={0xf0, 0x1b, {{0x10, 0x1, 'tunnel_key\x00'}, {0x4c, 0x2, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x6, 0x10000000, 0x6, 0x14d3d43a}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x20, 0x4, 0x10000000, 0x9, 0x100000001}, 0x1}}]}, {0x8c, 0x6, "c1d1e697b525ab69dce64b7135897f37c8387e610ec1a4de6246a8fd131e9c8d4b8d24a427ddfc26639ef1a12fb31e930818c7fb6f4d3c1f5be34d5db715626c0e94f28cdb773677ed7ec1b6b5b637dfc8a4c082c85610fc94417cfdb3996756e2fc739738b03f7329429bcb927b21488ab9c08857365d9840816da5a0a09dfcd4b282f84fc451"}}}}]}, 0x1588}, 0x1, 0x0, 0x0, 0x50}, 0x20000051)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1362.579429] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1362.592876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1362.600343] IPVS: ftp: loaded support on port[0] = 21
[ 1362.603263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1362.617965] binder: undelivered TRANSACTION_ERROR: 29189
06:59:52 executing program 2:
mkdir(&(0x7f0000000bc0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='proc\x00', 0xc0ed0000, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84000)
execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000140)='posix_acl_accessq)$\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='securitytrusted\x00'], 0x800)
execveat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000280)='wlan1\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='{\x00'], 0xc00)
mkdir(&(0x7f0000000080)='./file1\x00', 0x184)

06:59:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket(0x10, 0x802, 0x0)
setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200), &(0x7f00000000c0)=0x10)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000003c0)="66baf80cb88ae4f88bef66bafc0c66ed66baf80cb850663882ef66bafc0ced65660f3882981be660d53e0fc798d79f000066660f38816dbc0f01d1c4c10968640db3b9ce090000b80676bd84bafee71d7d0f300f01dfc4e1c45d5b00"}], 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8)
r4 = gettid()
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x5, 0x1, 0x8, 0x8, 0x0, 0x4, 0x4020, 0x2, 0x6, 0x9, 0x1, 0x6, 0xff, 0xff00000000000000, 0x1000, 0x4, 0x240000000000000, 0x3ff, 0x7, 0x6, 0x8001, 0x5, 0x8, 0x8, 0x2ebb, 0x4, 0xef6, 0x7, 0x2, 0x6, 0xf3e, 0x7f, 0xffffffff80000001, 0xeb04, 0x0, 0x3ff, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x1008, 0x7e, 0x1ff, 0x3, 0x4, 0x7, 0x5}, r4, 0xb, r5, 0x8)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0))
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

06:59:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:52 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0x5, 0x1, 0x20, 0x1000, 0x101, 0x7, 0x1, 0x7, 0x46, 0x100, 0x2, 0x7439, 0x85, 0x600000, 0x1, 0x8]})
r1 = socket(0x10, 0x20000000802, 0x0)
write(r1, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)

06:59:53 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x800)
r0 = socket(0x4, 0x6, 0x80000000)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000002c0)={<r1=>0x0, 0xcf, "36a74b5670034de73baeb3df429cfc82f8cca152c6c112f6f8c2e9900852d9fc49889e487402ed8bab3f0949e8273dbc93d2af8b10927eb5681464f6a90812046cb5e02b116b1520af20473da5bd88bccbb16f237e27fa42f61c09b785cdec36dbded0131159a61517650a605bf8727c8d25463e58fda2c2312d7bbc83307d96f2ea57502f61f38614524ebb982b90d9d47c69acfd2238ee3435f7ab69c6331d94d24bd9feab15dd91425c3df39286c4eceaa5006fc1aa5501a9fed7aaaa6e0bb7ccdbf54f4dff9f3cf4722863c8f1"}, &(0x7f0000000000)=0xd7)
r2 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x745, 0x2000)
write$FUSE_BMAP(r2, &(0x7f0000000400)={0x18, 0x0, 0x4, {0x6}}, 0x18)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r1, 0x4)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0xc000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000001c0)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x0, @rand_addr="f29ddbed0a962d538ebe00c057b36861", 0x4}}, 0x3f, 0x4d3, 0x1, 0x2, 0x4}, &(0x7f00000000c0)=0x98)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r4, 0x8, 0x1000, 0x0, 0x6, 0x7}, &(0x7f0000000280)=0x14)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)

[ 1362.887897] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1362.913543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:53 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x1d, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:53 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r0 = socket(0x10, 0x20000000802, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000040)=0xe8)
ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x1)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080))
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x49b, 0x7fff, 0x9, 0x3b, 0x101, 0x0, 0x6}, 0x1c)

06:59:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
getpid()
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
getpgrp(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000002200000000, 0x800007f, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

06:59:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = dup2(r0, r0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x280)
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="efb92b2cde5b8ff7443b9a0ec5e61444d1d3cd8ff839a15b33e899854ad31680f3937c442bf24a1076956e5de7eddb8d87b25dc380b9ff553d6c6ed1166f2339635fa5d54b6b2327108431892106fd5eddf2bd5baf8cddc3b1ac6d51029b0a3fcf9963856b392e4512e1b3bb23de1cd9a3c830284e5b2894e5f29ee2c42fc846752b9240986f02da6f3500af9adeb4c212f766ed4910d325b4bdfc1392cbce1444042244732cdc40116949c62697b46c44233cc67a3cf805ee30f9c07474684d032488f9f4037309b2fca931f28c118fa4942f954b68021c619685fdf47db3", 0xdf, 0x0)
keyctl$get_security(0x11, r2, &(0x7f0000000500)=""/199, 0xc7)

06:59:53 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, 0x0)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200), 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1363.449336] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1363.456798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:53 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x800, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000040)={0xec5, 0x4, 0x2, 0x0, 0x0, [], [], [], 0x400, 0x3f})
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1363.548707] IPVS: ftp: loaded support on port[0] = 21
06:59:53 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x40000)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000200)={{0x3, @addr=0x1ff}, "b55d0ba8ba3cb61ddece8b4a4425eb1d0472ed6f9f3e14450e25f582fc1b7349", 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @reserved})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00')
preadv(r2, &(0x7f0000000700), 0x13b, 0x4f)

06:59:53 executing program 5:
r0 = socket(0x5, 0x1000000000000002, 0x100000001)
write(r0, &(0x7f0000000040)="170000001500070500e80000004c0305020803035f0000", 0x17)

06:59:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:53 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20}, 0x10)
mkdir(&(0x7f0000000a00)='./file0\x00', 0x0)
mount(&(0x7f0000000980)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f00000009c0)='ramfs\x00', 0x0, &(0x7f0000000000))
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
r1 = syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
setxattr$trusted_overlay_nlink(&(0x7f0000000740)='./file0/file0\x00', 0x0, &(0x7f00000007c0)={'L-', 0x8}, 0x28, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
write$FUSE_INTERRUPT(r1, 0x0, 0x0)
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0xffffffffffffffff)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = geteuid()
stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
execve(0x0, &(0x7f0000000800)=[&(0x7f00000004c0)='[cpuset#&\xdf\xb3\x00'], &(0x7f00000006c0))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x4d}})
mount$fuse(0x0, 0x0, 0x0, 0x3000480, &(0x7f0000000e00)=ANY=[@ANYBLOB="60db3d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=r3, @ANYBLOB=',subj_type=,\x00'])

06:59:53 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c00070003000100000000002500000000000000000000000000000020000000000000000000000000000000"], 0x2c)
getsockname(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0x80)
sendfile(r0, r0, &(0x7f0000000140), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x1e4, &(0x7f0000000000)=[{}]}, 0x10)
close(0xffffffffffffffff)

[ 1363.953606] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:54 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000000)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xfffffffffffffdad)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040))

06:59:54 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
dup2(0xffffffffffffff9c, 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000240)=r0, 0x16f)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
sendmsg$tipc(r4, &(0x7f00000016c0)={&(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x3}}, 0x10, &(0x7f0000001580)=[{&(0x7f00000014c0)="6581cab3f425ea8ef2a17fe4f2c06de0da4d3acf85e46fa07887349771c840a9f23f3c2ddf07eaa3ab0594cb977cef1e990f2b7227a427d70970c68982ff3535ec5d6fbcd5d13c4940e492a7572ea1f64dfdc2b468c54a6c55ef7d3662a76627d8c5c2b85a838a75d2a0f3f557dbaebc121d4e3db916101203f1ec2d9b5f38aa", 0x80}], 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = syz_open_dev$usb(0x0, 0x401, 0x0)
ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f0000000300))
socket$packet(0x11, 0x3, 0x300)
getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100), 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)={0x1fffffffffff})
ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0)
wait4(0x0, &(0x7f0000000200), 0x5, &(0x7f00000015c0))
r6 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
read$FUSE(r6, &(0x7f0000000500), 0x1000)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
read$FUSE(r6, &(0x7f0000001500), 0x1000)
r7 = socket$alg(0x26, 0x5, 0x0)
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000380)=""/200)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x5, 0x0, 0x0)

06:59:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:54 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x34, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:54 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, 0x0)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200), 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1364.622172] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
06:59:54 executing program 0:
syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2)
r0 = socket(0x10, 0x20000000802, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000140), &(0x7f0000000180)=0x8)
setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00000001c0)="2c58cec72e5b5ab9d30ac55ed8626fccb79882c84f796230850bd83627ba09623f4857a8f5bf611f941ab7f2c780d8530f6478d29a152d671a3cae5ded255ddf6e217584d7ea518198de22f94406ffc9d543563f4009fd44c15e7acf26e5d8cbcdca92e86d8dde260186d50b02c430fdcebf28e91f9035c411fa03a71b7fbe1a01fb2bd27191442ba6be3e0267667d2cfd2cde0a41edec5f06", 0x99)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000280))
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x3, 0x3})
socket$inet(0x2b, 0x1, 0x9fffff7ffffffc)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0))
fsync(r1)
write(r1, &(0x7f0000000100)="24000089d83732810613308d72001a0025e00018000400edfc0e800000000000000000000000080002ba57310100c607fd", 0x31)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40000, 0x0)

[ 1364.667739] __nla_parse: 1 callbacks suppressed
[ 1364.667748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1364.788788] IPVS: ftp: loaded support on port[0] = 21
06:59:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:54 executing program 2:
r0 = eventfd(0x0)
writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="0eff4a45de15627c", 0x8}], 0x1)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dsp\x00', 0x200000, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000640), 0x4)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x1000000000016)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101002, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000180)={0x5, 0x8, 0x40, 0x700})
readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1)
ptrace$cont(0xffffffffffffffff, r1, 0x1000, 0x7)
readv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000500)=""/222, 0xde}], 0x3)
waitid(0x1, r1, &(0x7f0000000080), 0x0, 0x0)
setpgid(r1, r1)

06:59:54 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e)

06:59:55 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80100, 0x0)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000140)=""/212)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

[ 1365.035050] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1365.084612] Unknown ioctl -2147203839
06:59:55 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={<r1=>0x0, 0x10000}, &(0x7f0000000180)=0x8)
open_by_handle_at(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x181000)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r1, 0x10001, 0x1000000000000020, 0x800000080, 0x2449}, &(0x7f0000000200)=0x18)
r2 = socket(0x10, 0x20000000802, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000000))
write(r2, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xfffffffffffffe6a)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000240))

06:59:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x23, 0x0, &(0x7f0000000280)="101ddffd8a194b8984c5b568cdd29267f72f2af9ed296737d9a98919e080e607ebf140"})
r2 = fcntl$dupfd(r0, 0x406, r1)
r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0)
ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000100)={0x0, 0x3, [{r3, 0x0, 0x100000000, 0x8000}, {r4, 0x0, 0x12000, 0x10000}, {r5, 0x0, 0xa000, 0x10000}]})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer], 0x0, 0x0, 0x0})

[ 1365.114230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1365.139146] Unknown ioctl -2147203839
06:59:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1365.195339] binder: 27352:27355 BC_DEAD_BINDER_DONE 0000000000000000 not found
06:59:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/165, &(0x7f0000000140)=0xa5)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24}]}, 0x15c}}, 0x0)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80082)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="ec6379cf3d2878ce69788fe6fe3080bc", 0x10)
ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431)

06:59:55 executing program 0:
r0 = socket(0x11, 0x20000000802, 0x80)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1365.242398] binder: 27352:27355 transaction failed 29189/-22, size 0-0 line 2896
[ 1365.280849] binder: 27352:27361 BC_DEAD_BINDER_DONE 0000000000000000 not found
[ 1365.321949] binder: 27352:27361 transaction failed 29189/-22, size 0-0 line 2896
[ 1365.341057] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1365.377126] binder: undelivered TRANSACTION_ERROR: 29189
[ 1365.383267] binder: undelivered TRANSACTION_ERROR: 29189
[ 1365.396238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:55 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x70, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000400000000d000040050000d90000004000fa0000000000400003000001"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000))

06:59:55 executing program 2:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4000, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={<r2=>0x0, 0x80000000}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0xff}, 0x8)
fremovexattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="736563757269658717736465762f766964656f3200"])
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x2aeb, 0x1, 0x0, "c24727047eab72b0a39f5e0000302d16915d20a365f000"})

06:59:55 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x1000, 0x8], 0x2, 0x8, 0x3, 0x4, 0xbc, 0x1, {0x3000000000000, 0x2, 0x4e3, 0xb4a, 0x800, 0x6, 0x100000000, 0x2, 0x100000000, 0x7, 0x7f, 0x3, 0x3, 0x8, "bbdbc5a838f25ccdb07c673c423275e874226befb58647b84c10ccbd81939beb"}})
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x80000001, 0x5])

06:59:55 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, 0x0)
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200), 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1365.843300] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1365.874028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:56 executing program 0:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x68be, 0x2440)
accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r1})
r2 = socket(0x10, 0x20000000802, 0x0)
write(r2, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:56 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={<r2=>r1, @in={{0x2, 0x0, @local}}}, &(0x7f00000002c0)=0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r2}, 0x8)
socket$l2tp(0x18, 0x1, 0x1)

[ 1365.931189] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1365.947348] IPVS: ftp: loaded support on port[0] = 21
[ 1365.992225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x40000000082009, 0x2000000000000003)
bind$inet6(r1, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c)
r2 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
sendto$inet6(r2, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0)
poll(&(0x7f0000000400)=[{r1}], 0x200000000000006a, 0x0)

06:59:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:56 executing program 0:
r0 = socket(0x3, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1366.165789] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1366.207297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:56 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x34)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000100)=0x78)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r2 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1008}], 0x1}, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x40000000000a132, 0xffffffffffffffff, 0x0)

[ 1366.932524] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1366.953686] CPU: 1 PID: 27402 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1366.960561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1366.969898] Call Trace:
[ 1366.972476]  dump_stack+0x172/0x1f0
[ 1366.976090]  dump_header+0x10f/0xb6c
[ 1366.979790]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1366.984892]  ? ___ratelimit+0x60/0x595
[ 1366.988763]  ? do_raw_spin_unlock+0x57/0x270
[ 1366.993159]  oom_kill_process.cold+0x10/0x6f5
[ 1366.997659]  ? task_will_free_mem+0x139/0x6e0
[ 1367.002300]  out_of_memory+0x79a/0x1280
[ 1367.006261]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1367.011381]  ? oom_killer_disable+0x280/0x280
[ 1367.015859]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1367.020950]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1367.025603]  ? memcg_memory_event+0x40/0x40
[ 1367.029917]  ? _raw_spin_unlock+0x2d/0x50
[ 1367.034047]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1367.039134]  try_charge+0xfec/0x1570
[ 1367.042830]  ? find_held_lock+0x35/0x130
[ 1367.046879]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1367.051708]  ? kasan_check_read+0x11/0x20
[ 1367.055842]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1367.060684]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1367.065340]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1367.070254]  shmem_getpage_gfp+0x69b/0x3520
[ 1367.074580]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1367.079681]  ? lock_downgrade+0x810/0x810
[ 1367.083817]  shmem_fault+0x22d/0x760
[ 1367.087516]  ? __handle_mm_fault+0x349d/0x3f20
[ 1367.092086]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1367.097357]  ? lock_downgrade+0x810/0x810
[ 1367.101493]  __do_fault+0x116/0x4e0
[ 1367.105116]  __handle_mm_fault+0x2cbd/0x3f20
[ 1367.109527]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1367.114355]  ? find_held_lock+0x35/0x130
[ 1367.118403]  ? handle_mm_fault+0x322/0xb30
[ 1367.122636]  ? kasan_check_read+0x11/0x20
[ 1367.126783]  handle_mm_fault+0x43f/0xb30
[ 1367.130832]  __get_user_pages+0x7b6/0x1a40
[ 1367.135052]  ? kasan_check_write+0x14/0x20
[ 1367.139291]  ? follow_page_mask+0x19a0/0x19a0
[ 1367.143779]  ? memset+0x32/0x40
[ 1367.147048]  populate_vma_page_range+0x20d/0x2a0
[ 1367.151807]  __mm_populate+0x204/0x380
[ 1367.155686]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1367.160615]  vm_mmap_pgoff+0x213/0x230
[ 1367.164492]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1367.169328]  ? kasan_check_read+0x11/0x20
[ 1367.173650]  ? _copy_to_user+0xc9/0x120
[ 1367.177631]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1367.183158]  ksys_mmap_pgoff+0xf7/0x630
[ 1367.187123]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1367.192039]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1367.196776]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1367.201514]  ? do_syscall_64+0x26/0x610
[ 1367.205495]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1367.210847]  __x64_sys_mmap+0xe9/0x1b0
[ 1367.214723]  do_syscall_64+0x103/0x610
[ 1367.218594]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1367.223862] RIP: 0033:0x457f29
[ 1367.227035] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1367.245928] RSP: 002b:00007f3ab024fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1367.253621] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1367.260875] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1367.268126] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1367.275378] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab02506d4
[ 1367.282634] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1367.290627] memory: usage 307200kB, limit 307200kB, failcnt 5085
[ 1367.296800] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1367.303820] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1367.310081] Memory cgroup stats for /syz4: cache:15988KB rss:215780KB rss_huge:180224KB shmem:15988KB mapped_file:4620KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4716KB active_anon:227352KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1367.332452] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27392,uid=0
[ 1367.347168] Memory cgroup out of memory: Kill process 27392 (syz-executor.4) score 1121 or sacrifice child
[ 1367.357131] Killed process 27392 (syz-executor.4) total-vm:72840kB, anon-rss:172kB, file-rss:35712kB, shmem-rss:4484kB
[ 1367.369696] oom_reaper: reaped process 27392 (syz-executor.4), now anon-rss:0kB, file-rss:34768kB, shmem-rss:4492kB
06:59:57 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x88, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

06:59:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

06:59:57 executing program 5:
mkdir(&(0x7f0000000680)='./control\x00', 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0)
r1 = gettid()
ioprio_set$pid(0x1, r1, 0x10001)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000080)={@dev, <r2=>0x0}, &(0x7f00000000c0)=0x14)
recvfrom$packet(r0, &(0x7f0000000180)=""/242, 0xf2, 0x100, &(0x7f0000000280)={0x11, 0xfc, r2, 0x1, 0x7f, 0x6, @local}, 0x14)
r3 = open(&(0x7f0000000600)='./control\x00', 0x0, 0x0)
mknodat(r3, &(0x7f0000000100)='./control\x00', 0x8988, 0x0)
socket$isdn(0x22, 0x3, 0x25)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaa8affffffffffff08004557b3802b223f8de12a05653489f651464599927b7e963bf16ab80a52c977696a7aff2ff9b2e5a7f80000300000000002000000ac2314bbac1414000304900000000000"], 0x0)

06:59:57 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x28)
ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000040)={{}, 0x8, 0x9, 0xc})
write(0xffffffffffffffff, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

06:59:57 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

06:59:57 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x3f, 0x8, 0x6, 0xce, 0x800, 0x6446, 0x3}, &(0x7f0000000100)=0x20)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x113, &(0x7f00000007c0)=0x1ff, &(0x7f0000000800)=0x2)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000780)=ANY=[], 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0), 0x0, &(0x7f00000029c0)}, 0x0)
ioctl(r1, 0x8916, &(0x7f0000000000))
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl(r1, 0x8936, &(0x7f0000000000))
getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f00000005c0)=""/147, &(0x7f0000000240)=0x93)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x105, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x141048, 0x0)
socket(0x11, 0x1, 0x0)
close(r3)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000002c0)={0x7})
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000180))
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x40000003, 0x10507e)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)

06:59:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f})
r0 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={<r1=>0x0, 0x10, "9a24c0bfe6fbbcf8196bac661ef77781"}, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000700))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000340)={<r2=>0x0, 0xfe}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x8000, 0x6, 0xfffffffffffff801, r2}, &(0x7f00000005c0)=0x10)
r3 = semget$private(0x0, 0x4, 0x10)
open_by_handle_at(r0, &(0x7f0000000780)={0x7e, 0x8, "ecc751c04afe657bbc493b02d003b85558ffc65394527ebe70f9af84b5cf71c20362bb558d214ba79b95b2c4717c8fee890acdcf92714edec4bc6fbaa9d73deaac8174d5ef744d7f852603d56eaafd192512c1529db967e3c318c680fe3a8553721c5cbe422e909ea7356c2b494aa3efdf075bd906e3"}, 0x20080)
pwrite64(r0, &(0x7f0000001f80)="d071b87bcc2dbe932b2b8dd7fea03e21a6ef747a37a113a44a9c1826c1996d3a85b417559cf1f8228c04e18da3e2d613be2302559d413cf37b2db06ccdb35d38932ba087d47012655530bd5246c622e39b71b9d2549b87c5ec505ea86137ed3cbcc1f924068fd95042428ceafe6c3604f73448168f6e11eb81a8a7f1c8ad583479bf13933fd7ee7690e663a5f748e6bdaf4a79997d7f972259900dadadc681f0c46b9d762fbc56747a1faa7a58fac8f08e9c3ca3a23ac60c51eca11ff02c2636dd0ab68ffdb9fbbef9d76ab1d3d74cea8e4e196248ae02962be93cf66a6c03680ad5a1fab8e50a4e8074cff9cccd8efc914e948dba29971f42b1173df471feb102ee26d9ed907dca1ddf8273ef3f4f6754041abbd2f183bb3e7db20b41b42f3e7a47ad68bc58c5d3ba02436db3c2849439eea3533f931327af2030978a62f360ccca08331f6c5bec1cf95fbad455c9a725d189dbb3c42011be4e2eea0d9a1b3d3e438bfe6ce717065b9f3605a139f63c7118a2773cc243ab41f0ce4108b1aa7055e969fe60b2f5d26b43fd1c16cd825b5a3bbc2cd0cee7c9073dab4badf01c98652048f9d11250c48d57d94849e279d5d2f778576e487c382aa2fbd0ba469ad547421d68c6e1c7a8375751d5a9e77e6c7c08d2fe97751960658a21f05d7e84f7cbdc135454b2670de8f461a560e46c3261f70fd6d2d5de231e250251c4e9da342e19afa04f8e33793c648ab6ce92929221267ebf3e9f5c901a5c37f327da339568a2feea56df831cdd2596b3c5a270ac6eccaae1cf65c6edb858b4dec6b3cc22b7e388851a3b1adae96c4aa7b6883d66800cd5e1e29e6e267208daebd7a3a49918dd4c550971574c3c4c252d8b4bbbc12db3bec39f7f8b61a274c5f79f0e747cf0896e3f6835e5d0af227e7123dec46894573e07409da570ff1bb0cad074051587fac2919de3333cf9c58ff112cfd4b8091ef39c9559d73d15ec003a80361e3597cc1c7ee74899bf7bb78cf93cf14a91099059add6d8cc4950de491983021cf72b8f9c11d586ebaa46c9301939443b3342457591d3ebd4c09df5a10e6ce1d5309dfe6e3f92294a5942c9a05b4c8cda69d16abd51da169b8565dd847ae3f4c9709cd7b57c793a5e5667840d0acb73c4c2e3820546985975ae051a1c0020c80a7b810fc762c7dab34761875181ab55b05e714c7042aeb15a5c8c01a93e18b4394054a6e5c27260688c06f47bc92b270af99d33991f478c2d96c9ee5766e2ba893609da1b7a1b65534663e5e279b924a2ad6a94dcaed27c5c94f1e0ba08d3163e91339c8b5e749c8ac16a5fd684209a1b2ae610d67656bdf4f28b28af9c8b2d0d13fc951c6083ac5f33dc4bf1a1747672904e394358412bf3daaf4af894abe662a07a738fb95fccaa378d4efb60e6055d7632e8bc6de0bd4ff3e7f214de0955dca0548a3e47a324b06218763eebf0e5b6a8281656dc880f6174fb3d995aa1e76122abefd28433a2bfd2ddb6b22d62616045786ed54df2929ac4e188756a89506a909ef7d659f800665ea366c07ce58cfb6c7291e59a38a5fdd26c64d9166b8689de7820edc0d1e12b96c116b877d1aa465b66d3652462cef083e83de8a3a35ebc739b9c1df0fecaa80abb60a21d095267f703b4bcebe0e1520c9e18c4a92c86465a91f219f7e9ed5746003b877090117cbe9d087e6efce2c3fcca444aad28c53334083366dfe7ad09303fb0553be847ef3ac7ba58bce00f0d02a8a24390b0e8f2631abd78ab8e27fba3fc2dbc1b726f4ff6f7b97acf57053daa533d19cbd4ec1be471f57a595014f949b877e426adde0ee6bf4827d3a07b62c54e18b1be210f1b4e7445953d2521cfdc2c8737d54cec796bb2049ca85c00eb0fb126d036307e598cd51580abd4dd3ce18d12a1aeafc483add51488aa45cdc0035445752c5dbbbd996ae1d078c382fe409b0cbf26a245ef5b483572c7d76d67907446919b6b9a1be3321c50df5ec0255708f648b4166821a0f5a0e2b6497478ae25d761c3e514cde907cb1783c69428b494f09a70ffdde4b7a70235c8a94449e448a97a9f24ca51d16583cbf0ce656ec9f0460d75d532bed168a152ad6b1443d31f971737f5717ef915e3357421345571e88a1bfcb452965df8f66b4b28eabbec83b6359032b10183938317ef6be1c7a7092ac23965f01602f5476bd0164507847268136f54baf20a7bdba8aa7f00af3e1140b92635949f6a87b79ed66819fb7e26241ce2bcae8cf3de41befc750738785eac86b73c8df58b759182606824d124d3a2f0ab048b65d737145b2bcef52fd879923065121463e6afc0bd588825f7fa7d3467610e04679b4a1bbaa56a964044462774f4fdccdf935107694271f98406e07d60d10481f8bf97ccfadab6b0d31b15e5544750e180407aec654f28c46695186e0605f688bb5cd794c207aad4db0bfa00214b4a6a25b7a5cba72dbfbee95706d9e9b1d491a65a6d85925178141fff33c2b4218a5d6982add1ce15567341f48aac344882fbad285012ed55387f31bc280b26c6a1ae6f9e8b11f114d12edd91eb54d8eaff99251f355c26527e20754635c7a3fbb744f5b9c5d49889ba8d0257e154d0690f28f8ba2700632cfe64bdf8abe2408e520ba484ad59111601b2b18bb678785aa358726681efebd374626d8a9bb7c89d891271241f5ee8fca731bb7ef12b5151742d62d72b44fee37a57012382b50ab34e876f199fe6c317a655a5f16a175da4735659b4a9d2b33e20aeda1218812c1096882eced41f763fa876b327618a11b1020d7aeb214b6528d2270401a2d895a94ae6e404924a5c997411644f518c9c8ce6654d58d4f5aa05eee416f14d4e8e001af5319cfb503bdcc5f1c345d795859a355846704dc55495a97f28d6e4241c332567b2552a86da969982637966a2aa4b91f380d5215702bf7a40f8ced7f9caad1dbd6b8dc188099267c2f395dd4dff996d353d0a9cfa49babd10feebe2fc5085bca585f0b0934b8b17b95041afe172723f538e3707c5487cf7c959bbb578b1de4aba5a68adecc002187ce7dff2af271d587b1ded00c80968fc566fccbeaa5186e51497ea8fca1b66fc75d528489e97c661db7b4e5b5ee2391edece049ef0ce993268e2ce462c331b62f1d3aeb4082d309cfb6066e32f4b4534d84f2dba91f024c665f42aabdfa3ed4eca2182360a3aa3adb1812e1f4df0c62fb456ab76c5819959c6f99f603e381cfe72eaf66fae20928213b5c868f52af28c990cd82a2bdcd67bb699c05db2157d5910154044eb2913bce1c48ae9ed8d846a748d5e7a87eef5b5b7ab26a0c984c27e6498fea8c1ab9f3ec317d81353d982a787c12758926e8af6d6b7ebdc6b109f2efe0489971645d3806aced5029ee8840a4876794cd5a71421aff21a49f9da1aabd55a450f8e63b0786fd990c4d43f3e228ec21ca796abdf614e35e2c29951c3f5ffae51208f1460aedecebfeaf2f719cbb96d810b882dead2065f28a86c74e4ebd06a857c164b71f1a4ce63be31ffa87ed07b6e667da6b6430d2080c5cb2cf276ef5640580be36551293d206faac31e454feea43740be892a1dca2114e364961cd5a6c0c2d369f4f0b27aa372137c58cbd98503789bbeb61bb0e289e8df34d3683fc06d633cdddee3f6a1bb0bc2dbe7a45d11b719da9473faa0e556d446870295cfc4dfea1614d55b030f7f1b4bcf72a79555e54d36c1c594706012294e2f9f736acc99bcde2da4e33c4705b03000b91e56d4e9adb44a6b3a33bff85bdc3581066ec2dc1cf6203807a28514714bb9545ba3a3323ed93b806ee3fd9a18ce67a6001624a06aa72f18159f59d1dd0b530fd3f4eb904e7115d10633ce7f52357e0ed31cfa1d627efb6d3d613e67edf1e96cad458b20fe2ef5962b4c0d7c4f7e34182465af6e1d8e9afe3260fb2048ce332949e6bc15ebaa91c97ae913ccea8a11bf931a783642cf072064a56c2580f71c8274ebda44b1906d9b5cd281c1cfa52fde4a9e87390ba5cc5ab27b17c5b9332469abb86d7bff5360a444d7204d9bafb029b2c6e047c2547d42247bce04a3c40cb7b7eb7a3ba46cb06d9b55a36fbd5467cee5918cc5946ec943d94a39c8085440bb388043f7c499b4a85b7cfda4b8c5ae59c9339719d4d6c8064cfebda9e5e960a0f694cc3c640aecd6efb2c826ddf60e37b9f3a24cf4ea79794486bc10eef2500e2dc23e7c33d93226efcd8a353cedaa810ed87d82a79344963bd409d01e3aba8956499546f20a931c1d307c8760c70b9541088a9bae61df6d0505dcd1508ebd56a6e6825704c86dfc4c6743bdba9a922928f737dca5000a3fa748a8fdbee1a4dc79019c84bf6fbada26c4cd1492f4db0752de70565bfd015f402b353ff3cf4dadafc50cedb6b15c1068d3fbdc90e6269b5902f8c686e2b9b2cd81f890f75ecef579a06a188880dda860ef9de3e7075a288c5dac3c0e0e60a01f16f8158239ac32a76a9505615224e4f4bbd421a73c27a9fbf9eea733a277989ffd37096693ad52b7dbebb0f4694ac2a6315592ef6cebf66fbb73b75278df48daff31e471ac69b5cd0fd9f082b5b00deaa499e55e1e91c379fa5bfa5a607d156336d23b663da7c9d7e3c12b37f1fe7fc9fbcd65ad53bcc0f71826b13d13429abea244eed3191c6638e53ac975e9e24d5102a0f5a0b835bd6dca87ecff33e1829ca63920c90da9661d1388854dbad1117375c8fa333cf078f8741efe03badcf83c652bbb067b60894ddefe6f8550932dab4ea785be27e771135f332a7b51b08f7064f443aac40f6f811518e47018ab339be14de21a091d610ff2d6ade890a0414dcc151dda038acf1367a25ecc7caabd72a0d7c8bbb218f7d12fa3a0aa2dadd75f0c808d55cca6d2626874edfb9446bc70c04bd2b916bd5f199723ad0571ac6e3e7435f956fc24a2e1eaf6182303e57b9d7d6eee38d97a4e4759d46d5e4bf98958236ca1399fd9ca44bdf120940f09d99260da8a00149670fd6ffc960100f74b7e86a5b34f0ef4b355c4558abc2aea324d86c821e4e251d55adb312fb4ee6326d40d128fe7f0c7637fab47bac6315ad04f27db760d738eb73e9b96301891500de57d46e635edc546c28ebb110896d7f928b8ec8c831110a291d779acd064be9932881ff8137b7e8e5895b638f2e94efdf7b421aede3ded3866b8f1bde47b58527c43df0cc4bfe59763ab77951ca26bc7051be1a712b60bddae84bdfe5bcedbebe8a8e0ca980860c7bcdd1d5a52073d16aa5ae811737b67ffd55b2ffbcfb446143d68504331870b37ff83b0ac2ee21a0c5edb571d01b124b0008e27052684a305919693f128e50c22b9dc5e35c0832fee452c4414de6049d5c3326424c20ca7a8d6ca6a411ead674e4ce920f0004bc29e7cd41895203a04646fc87ba7039c72c4317e6a3ace4d971fe433cbb3e564fb4dca6df371ad79b4405ddaa6a11a4447bd07226241b3b43d669a00c6ce2117111909b3e2f43af1aebd5fe840f9254b30959c6ca6c0a6a0784987cca1ee96b2b2109cd37ebfb14838eb59df82b66cd36beaa330d4eabb87a30b4bef3e3e78b68ccbc7443e1249b437de0b82aa7a50f99aa72c31d7e723723f58bcacf3434feefb8739902d9ef2807a7326f00899ac0297ae7a9e9e93d683eae814ed3f9f137ae7e1f58b4b6b4c4fe91b2ad630983ccf2467d973f932208c803817a3ecf481d14116a6685e4ea441dcdd515d7c09636d5a8efbc5ba99e08433ab3e371f60b909c81768229d2458dc0d80e66f972562acba0112b2cd6f", 0x1000, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x02k\x00'})
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r1, 0x5}, 0x8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140))
semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000f80)=""/4096)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000326bd7000fbdbdf25020000000c000200127f0000000000000c00060003000000000000000c000600010000000000000008000100000000000c0006001c000000000000000c0005000401000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x2400c880}, 0x20008001)
ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000100)=0x3)
clock_gettime(0x0, &(0x7f0000000a40)={<r6=>0x0, <r7=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000a80)={{0xa, 0x2, 0x5, 0x100, '\x00', 0x7ff}, 0x1, [0x1, 0x12b, 0x8, 0x4, 0x4, 0xec, 0x3, 0x7, 0xa, 0x101, 0xfffffffffffffff7, 0x8, 0x6, 0x816a, 0x97, 0x8001, 0x200, 0x3, 0x4, 0x7, 0x0, 0x1, 0x8a, 0x6, 0x11, 0x80000001, 0x8c, 0x6a87, 0xfffffffffffffffc, 0x1, 0x6, 0x0, 0x18000, 0x9, 0x100000001, 0xf128, 0x3, 0xfffffffffffffffb, 0x3, 0x4, 0x3, 0x3, 0x9a, 0x3f, 0x7fff, 0x3, 0x6, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8001, 0x6cb3, 0x0, 0x0, 0x0, 0x1, 0x7, 0x40, 0x0, 0x1ff, 0x0, 0xfff, 0x3ff, 0x3d7, 0x3, 0x1, 0x2, 0x2eca, 0x1f, 0xfffffffffffffffc, 0x6, 0x3c, 0x0, 0x7, 0x4, 0x6, 0x0, 0x4, 0x9e, 0x40000000000, 0xc1f2, 0xffffffff00000000, 0x20, 0x99, 0x1d, 0x0, 0x27bf, 0x0, 0x1f, 0x81], {r6, r7+30000000}})
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400))

[ 1367.442679] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1367.479759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:57 executing program 0:
r0 = socket(0x3, 0x20000000802, 0x81)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x2000)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/170)

[ 1367.529125] IPVS: ftp: loaded support on port[0] = 21
[ 1367.560700] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1367.568182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
06:59:57 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x2, 0x0, 0x3, {0xd, @win={{0x5, 0x6, 0x71, 0xffffffff}, 0xb, 0x7, &(0x7f00000000c0)={{0x8, 0x1, 0x9}, &(0x7f0000000080)={{0x240000000, 0x8001, 0x3f, 0x4}, &(0x7f0000000040)={{0x5, 0x6, 0x100, 0x3}}}}, 0x8000, &(0x7f0000000100)="612b9bf064b6d0408d232900a78f7de3c72a4f1778d7e46b4d0c8c424b5df06036e5f1fabbd70ca0187d1f087e2a6cfc0678ea21628aaf739c6b9f3e6950afbdb1b9d5f363d6de1c5019890cbfbc8b2b47dc3e31f2c2a3c82ccd651f23cc7a77cdb0984af0e50ed2bfd50a26998dd46ff74359b31525a3e32ec9c8f35e12d07b9df4e3034320a4e76cdc1a6ef47df789383be1265ef808117f4ee6fac04b154d9032a27f8a2e84aa1e64a85b1f671654022b7f50c55c9f5188751d652a9f24156e9c2d771a664b069c7293b86ec5f56aa62c9fb6b78ab1", 0x2}}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x8}, 0x1, 0x9, 0x11e0, {0x400, 0x9}, 0x6, 0x10000})
socket(0x1b, 0x1000020480000802, 0x9)
write(r0, &(0x7f0000000d00)="240000001a0025e000180000080002ba57314100", 0xffffffffffffffe1)

06:59:57 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a1f00e00018000400edfc0e800014000000000000000000080002ba57310100", 0x24)
r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7fff, 0x0)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000f500000000001c0012000c0a0100626f6ef8dd0000000c00020008"], 0x3c}}, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x1000}, {r0, 0x41}, {r0, 0x2029}, {r0}, {r0, 0x84}, {r0, 0x685}, {r0, 0x2008}], 0x7, 0x4)

[ 1367.708142] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1367.715824] bridge0: port 1(bridge_slave_0) entered disabled state
06:59:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1367.939374] net_ratelimit: 26 callbacks suppressed
[ 1367.939382] protocol 88fb is buggy, dev hsr_slave_0
[ 1367.949569] protocol 88fb is buggy, dev hsr_slave_1
[ 1367.954704] protocol 88fb is buggy, dev hsr_slave_0
[ 1367.959799] protocol 88fb is buggy, dev hsr_slave_1
[ 1367.964932] protocol 88fb is buggy, dev hsr_slave_0
[ 1367.970040] protocol 88fb is buggy, dev hsr_slave_1
[ 1367.975226] protocol 88fb is buggy, dev hsr_slave_0
[ 1367.980326] protocol 88fb is buggy, dev hsr_slave_1
06:59:58 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1368.339467] protocol 88fb is buggy, dev hsr_slave_0
[ 1368.344737] protocol 88fb is buggy, dev hsr_slave_1
[ 1368.585266] IPVS: ftp: loaded support on port[0] = 21
[ 1368.767857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1368.784186] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1368.802866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1368.821635] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1368.940004] CPU: 0 PID: 27487 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1368.947015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1368.956381] Call Trace:
[ 1368.959001]  dump_stack+0x172/0x1f0
[ 1368.962653]  dump_header+0x10f/0xb6c
[ 1368.966384]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1368.971506]  ? ___ratelimit+0x60/0x595
[ 1368.975409]  ? do_raw_spin_unlock+0x57/0x270
[ 1368.979841]  oom_kill_process.cold+0x10/0x6f5
[ 1368.984361]  ? task_will_free_mem+0x139/0x6e0
[ 1368.988885]  out_of_memory+0x79a/0x1280
[ 1368.992877]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1368.998002]  ? oom_killer_disable+0x280/0x280
[ 1369.002510]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1369.007648]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1369.012329]  ? memcg_memory_event+0x40/0x40
[ 1369.016670]  ? _raw_spin_unlock+0x2d/0x50
[ 1369.020831]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1369.025951]  try_charge+0xfec/0x1570
[ 1369.029670]  ? find_held_lock+0x35/0x130
[ 1369.033747]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1369.038604]  ? kasan_check_read+0x11/0x20
[ 1369.042768]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1369.047638]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1369.052240]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1369.057286]  shmem_getpage_gfp+0x69b/0x3520
[ 1369.061634]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1369.066759]  ? lock_downgrade+0x810/0x810
[ 1369.070927]  shmem_fault+0x22d/0x760
[ 1369.074661]  ? __handle_mm_fault+0x349d/0x3f20
[ 1369.079256]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1369.084548]  ? lock_downgrade+0x810/0x810
[ 1369.088707]  __do_fault+0x116/0x4e0
[ 1369.092348]  __handle_mm_fault+0x2cbd/0x3f20
[ 1369.096770]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1369.101723]  ? find_held_lock+0x35/0x130
[ 1369.105802]  ? handle_mm_fault+0x322/0xb30
[ 1369.110064]  ? kasan_check_read+0x11/0x20
[ 1369.114225]  handle_mm_fault+0x43f/0xb30
[ 1369.118304]  __get_user_pages+0x7b6/0x1a40
[ 1369.122568]  ? follow_page_mask+0x19a0/0x19a0
[ 1369.127097]  ? memset+0x32/0x40
[ 1369.130396]  populate_vma_page_range+0x20d/0x2a0
[ 1369.135189]  __mm_populate+0x204/0x380
[ 1369.139090]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1369.144045]  vm_mmap_pgoff+0x213/0x230
[ 1369.147964]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1369.152850]  ? kasan_check_read+0x11/0x20
[ 1369.157020]  ? _copy_to_user+0xc9/0x120
[ 1369.161016]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1369.166577]  ksys_mmap_pgoff+0xf7/0x630
[ 1369.170562]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1369.175512]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1369.180288]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1369.185060]  ? do_syscall_64+0x26/0x610
[ 1369.189056]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1369.194438]  __x64_sys_mmap+0xe9/0x1b0
[ 1369.198344]  do_syscall_64+0x103/0x610
[ 1369.202250]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1369.207882] RIP: 0033:0x457f29
[ 1369.211085] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1369.230097] RSP: 002b:00007f3ab020dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1369.237829] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1369.245113] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1369.252397] RBP: 000000000073c0e0 R08: ffffffffffffffff R09: 0000000000000000
[ 1369.259677] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab020e6d4
[ 1369.266960] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1369.315117] memory: usage 307200kB, limit 307200kB, failcnt 5118
[ 1369.325003] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1369.335854] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1369.346019] Memory cgroup stats for /syz4: cache:15932KB rss:215780KB rss_huge:180224KB shmem:15932KB mapped_file:4488KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4636KB active_anon:227368KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1369.375376] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27448,uid=0
[ 1369.397288] Memory cgroup out of memory: Kill process 27448 (syz-executor.4) score 1121 or sacrifice child
[ 1369.407799] Killed process 27448 (syz-executor.4) total-vm:73104kB, anon-rss:184kB, file-rss:35700kB, shmem-rss:4352kB
[ 1369.446637] oom_reaper: reaped process 27448 (syz-executor.4), now anon-rss:0kB, file-rss:34740kB, shmem-rss:4492kB
07:00:01 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x98, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

07:00:01 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0xffffffff)
socket$bt_bnep(0x1f, 0x3, 0x4)

07:00:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f})
r0 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={<r1=>0x0, 0x10, "9a24c0bfe6fbbcf8196bac661ef77781"}, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000700))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000340)={<r2=>0x0, 0xfe}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x8000, 0x6, 0xfffffffffffff801, r2}, &(0x7f00000005c0)=0x10)
r3 = semget$private(0x0, 0x4, 0x10)
open_by_handle_at(r0, &(0x7f0000000780)={0x7e, 0x8, "ecc751c04afe657bbc493b02d003b85558ffc65394527ebe70f9af84b5cf71c20362bb558d214ba79b95b2c4717c8fee890acdcf92714edec4bc6fbaa9d73deaac8174d5ef744d7f852603d56eaafd192512c1529db967e3c318c680fe3a8553721c5cbe422e909ea7356c2b494aa3efdf075bd906e3"}, 0x20080)
pwrite64(r0, &(0x7f0000001f80)="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", 0x1000, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x02k\x00'})
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r1, 0x5}, 0x8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140))
semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000f80)=""/4096)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000326bd7000fbdbdf25020000000c000200127f0000000000000c00060003000000000000000c000600010000000000000008000100000000000c0006001c000000000000000c0005000401000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x2400c880}, 0x20008001)
ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000100)=0x3)
clock_gettime(0x0, &(0x7f0000000a40)={<r6=>0x0, <r7=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000a80)={{0xa, 0x2, 0x5, 0x100, '\x00', 0x7ff}, 0x1, [0x1, 0x12b, 0x8, 0x4, 0x4, 0xec, 0x3, 0x7, 0xa, 0x101, 0xfffffffffffffff7, 0x8, 0x6, 0x816a, 0x97, 0x8001, 0x200, 0x3, 0x4, 0x7, 0x0, 0x1, 0x8a, 0x6, 0x11, 0x80000001, 0x8c, 0x6a87, 0xfffffffffffffffc, 0x1, 0x6, 0x0, 0x18000, 0x9, 0x100000001, 0xf128, 0x3, 0xfffffffffffffffb, 0x3, 0x4, 0x3, 0x3, 0x9a, 0x3f, 0x7fff, 0x3, 0x6, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8001, 0x6cb3, 0x0, 0x0, 0x0, 0x1, 0x7, 0x40, 0x0, 0x1ff, 0x0, 0xfff, 0x3ff, 0x3d7, 0x3, 0x1, 0x2, 0x2eca, 0x1f, 0xfffffffffffffffc, 0x6, 0x3c, 0x0, 0x7, 0x4, 0x6, 0x0, 0x4, 0x9e, 0x40000000000, 0xc1f2, 0xffffffff00000000, 0x20, 0x99, 0x1d, 0x0, 0x27bf, 0x0, 0x1f, 0x81], {r6, r7+30000000}})
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400))

07:00:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:01 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
clone(0x2000, 0x0, 0x0, 0x0, 0x0)

07:00:01 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1371.771804] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1371.788917] IPVS: ftp: loaded support on port[0] = 21
07:00:01 executing program 0:
r0 = socket(0x110, 0x20000000802, 0xfffffffffffffffd)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)="4cde5cf544c41391a063c44d3d5008724d68e775eb8df1b411f63f4d647e7ea459dc660181b58046574527b3c996fcd4f81e4c684eaf9e9a3ead1729cefb20fb8817982c602f084dd29c88436747bcb2f3ff6271b51521cfcecc61b00fe1a52ae1bd393d6ff8a70ad679e737cc77e04bede7dd9e7414a8810d4d168110548393873d051cf81d2bfb06aa27770ed71b224b39cc125802d2c96c4c2e13538ec1aa2e1fae31b58d319a1006f76b2634cccd8c9deaa906731d311c75d79a82ae032e349fd9066d1c9297dafaf439e99d994ee0bf03b8ba4c6e71e744f3a687bf2ce8ac1b", 0xe2, r0}, 0x68)
sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000d40)={0x2878, 0xe, 0x2, 0x2, 0x70bd2a, 0x25dfdbfd, {0xf, 0x0, 0x6}, [@generic="3102a6dbfbb1de1a67de8271834ff228f37193ecbbb933cfdcbea26060ed52be2bb9a95f7128b029df70e70036d131a7e4116b5ae4fdad3c15b33fbe05242d560e37da3ec642e945543d811ce3c0e59d003bab9d1268815570d589b6a9e6c55b740f2e450741d74950205155f68e09f8111faaf7c146a91fa1b64fcdab7618593d9e1cd7887f16b5fff6e6195a5b0f473d188c72745e0f0fb51b00867cb70d7d8c5b46c6d670f823aff885aff1dc9a446ff6", @nested={0x11cc, 0x17, [@generic="9af23523328b66df34b629eaa4c7b0c6527e5878d948d6be4235acb6df33587012828da3cb977ab73c699d1ab7230966830608f4f82c591dce7ab9d7fd49a81910e64c0fe846655187c648f67482112acd6b01bec7ccbc4867ec5d042de452dd186761fa23acd3da3671ea43deca836ff0849d86f918386aed84e652dba3191e1003da56306d769e100062f08fc77772953d832267307a54e085a1a1009b881ac10301bc611d59c0c67c239e20b27ddfe4a8dc5ddde4a27f85607aee4d76f21621913e80da000f1845a7e51d968a5e6917bcaf5431f8574ee316b005c8bf853dcc817b8884", @generic="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", @generic="869e7b1d17f6ccab819da934623d8f305d79f2bc29db35faee5217ee7a9886602c377a62260ac59176c00cdd89bd015965de7cf84541cf7c71ba0d7f406edf571ac56ed48039649751680a02d5cfcfe21432ff1a49a56c5222894a343c8ca5652237e2736a57303e5f5a2d0d3d56f3b489c89edcc4281dce762ac84461880ae25983d08e396ba02e63df31c3b361d79e978d007f8e6b81db24d44c7f04721d43b3117e287030a78dc7f3925ede2ddb4d87c40c79ac62a3ceee1cba225ba3b41a0fb0c4776bc8024378fbbc66d90a5535a570", @typed={0x8, 0x80, @u32=0x2}, @typed={0x8, 0xd, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0x1a4, 0x16, [@typed={0x14, 0x87, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @generic="fe712fa983405e3e408de459601fd9d12a51a0fba670be12f8c30a8d7b83f30a109b348d9dcf988f8f372100d3e68e0b2e43672c98b5f02c0bd133ee22a4650b76728880743913432049f3a3d04c9f2a5b251ea4712f4e0bfe9fbfeb7c27cc0e10524aa6bd8c673ae48de08902564f79f9415b9015bdd6f24b77dc48222bfebc5d1c158f5ccb602d9eee6afe08878b27b413ca52f08c14701e0ad29a5bf1ee13bbfb59b100415e3adf00c736d39b8b51b61677e59f4075c386e100e7581f040912011a880ac23b351d5dbc5256d3b5e80bc753a4550acdb4598044afa382def3938819adf845d5b815db918853ce", @typed={0x8, 0x6e, @u32=0x8}, @typed={0x4, 0x4b}, @generic, @generic="c03f907e0f87c93a214fea904c2648bcd8c3e66aa8816f36d3042492dc8536d376a6310dbdb2d5f82f2bdfebe3232923105441a0abfa4405af21c55ab3b39d5677ebaaf18f9f7640e594e0c97d55e15f7dfca44de14880a6293d5e158e3a830388f8458ab570b0831eddfaf16a694604b0b4577539a0d2e53948ac58", @typed={0x14, 0x7, @ipv6=@dev={0xfe, 0x80, [], 0x28}}]}, @generic="14f85cdf36fa693f0f270156104b9e6ec308317fbd950d0e048dc74f151a55f23c0ebd0fecee4f26627063015d8c", @typed={0x20, 0x93, @str='keyring@em1[{\xc5em1@vmnet1\x00'}, @nested={0x1224, 0x41, [@generic="759beda070ea5c0a7c7226378bd38a15c815b89f4888fa37b266af0131ab639add4076a1a3dd2e22aedbdc186de99a6540623c5d9f8a85854abd09e9b194bd2b3d9faa1e860530a12bec1543832987d501d9878fccd0f68244765dd99a13e0d47f2622c522de75bb31a74e454988b93eb9220068a309be770d98937a1852404913ad141bf23d4fd50fdff8bfa1d156c3114519e04719c11d0df88b094b64d0dc0482fa884dc18c6d02c5c578589f434768ddd6b955bc37f310676295442c4f6f6c644b7596115bdc404956", @typed={0x4, 0x31}, @typed={0x8, 0x69, @u32=0x8}, @typed={0x60, 0x86, @binary="3a10d4818c5ec3b2cc3bdab29d73de0d0c4180d1553379cab5498efc7ded87c80a60138e7440c09596c54ae57375f29f5cb020be2e03a686b6314f37c0bb51475f0c154164f6c6662f6f1e553ecee5f2583c7cd16fd15ad93c69fc23"}, @generic="dc6794169f007d0596ae2593e4bb367fad4db7c2d5f46c61644e022469b66eec6a9a4d7f1711f6c6b9bf8c43deb4ddeddadc341e3ea5512ced4a6f74f398f83f1c60602a507fa4b9e6d705e4d6a0cd93e56f3809b8ea1ba9c2a5b571e54b78de2f21096aa613a7c1d8466d84c6f364f3d8bfbfeb56f21706f5af6d4d6655b5dedd150c9198be8f16b8ed332d5bb25be6504b1188a02a6a383bad81056e397ebe1b0161dfafdb8f5557954e5a426d3b6b685d91211f1ffb21cbe44cf96fbfac786bd55c569b27476f8788c4357c4ba450f82b0cbea07103", @generic="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", @generic="e8915d9c48f7a6eb2cdba22efc3f6bb7fe"]}, @generic="793058eb1965af82c58bc54d6b2008ca40e074fa20c3b2f263e5e87a79518ff8f29c45df97dbd3bbda3f6428aa5046321cee3007ca0d908efeeae96b7b88a747419dff619d457ee6923554250c5fe738a070102deb609f1fd4ab0c0e8375e2a68d06aea5a959111707ec5a9b3c3e3bd4010b196c8ce8b4db8c5380c720118b33725b103caa31ff3da8bc602bb275d978a95775117bd3de3bfe8dfe663191cdc77ae7cf36a2411e873ab92557803f05865f8230618737924d9c90c15f937a1e67cea84299dd0e2599d4c6", @nested={0x104, 0xd, [@typed={0x14, 0xb, @ipv6=@rand_addr="10b8a966ccf1f7f40ceb5efa8f1df699"}, @generic="8b227669d1bed36c9e045135a371e654e77515b68a303bb9e99c6643e0ca1ffd1951f707e63ddf6f0ae385ba98cd740ebe907744ed2278d7c1d2da32f24cf4e7173b13", @generic="4136e23cbda5f5c9f5868fd425e7e5e4cc1f6eb44500", @generic="17d893bb0362eb75ce15015910d4c73331fd7bda7ef55afb044fe8b414cd5627df7c0ae8469725f2e1970355fc07415d20aac7efa5357f9af939d2aada9212b285a7964236cd498b437399c9345e2459876083fb08481ef9435849c7ef0d3ebdb650ee359e26bad9ddd59951ab58b664189064b6050aed65ce2835d92c96d0531659e67a598d7d9b3e59466883f6ea1f"]}]}, 0x2878}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

07:00:01 executing program 2:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0}, &(0x7f00000001c0)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@local, 0x4e21, 0xffff, 0x4e22, 0xfffffffffffffffd, 0xa, 0xa0, 0x20, 0x7e, r2, r3}, {0x5, 0x1, 0x8, 0x800, 0x5c, 0xff, 0x400, 0x39a}, {0x93e6, 0x0, 0x0, 0x8000}, 0x8, 0x6e6bb0, 0x2, 0x0, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x3f}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3501, 0x0, 0x2, 0xedee, 0x1, 0x3b7e, 0xffffffff00000000}}, 0xe8)
r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x62a200, 0x8441)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100)=0x4, 0x4)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[0xf001], 0x0, 0x100, 0x279d})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

[ 1371.822472] __nla_parse: 1 callbacks suppressed
[ 1371.822481] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
07:00:02 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0xffffffffffffffa5, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d55008475bab582e0aa8ac048d0c752"], 0x2c}}, 0x0)
socket$rds(0x15, 0x5, 0x0)

07:00:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:02 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280))
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @empty, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0xff}}}}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)

[ 1371.988451] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1372.027202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:00:02 executing program 2:
r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x5057, 0x13)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{0x3ff, 0x1}, 'port1\x00', 0x20, 0x40000, 0x10001, 0x5f22, 0x1000, 0x7fffffff, 0x7fffffff, 0x0, 0x2, 0x5})
fstat(r2, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x800, 0x9, 0x7, 0xffff, 0x0], 0x6, 0x8000, 0x6, 0xff, 0x9bf, 0x1f, {0x3f50, 0x1, 0x80000001, 0x2, 0x3, 0xffffffffffffffff, 0x3, 0x9d2d, 0x26b, 0xffffffff, 0x1, 0x8000, 0x7ff, 0x3ff, "735e1d6fa90f4f82cb82c628e57ca6867c846ebf35d7444783b91f1648103d7c"}})
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x400000001c0123})
write$binfmt_misc(r1, &(0x7f0000000100)={'syz0', "89f176e4ca93885fd1b8b8953f460463b9bba69c279160bed526831fd779b62759c9e53442fffefa3fcbf41d0e2ed62bdfc10d571a2404e98de9a92eb3ac2baeae7de4c3f131aef7739ca6b0d43a221ce33749eb3511c30d9d04c4aa123ab9dbb26bb7522baa3138bafc95fe1582c542c82579aeb8ce7800c6f863c532a4ce19459a3f6e11f0cbbbf9d5d62280c8ffd10877bcf1b2a038795500a87ce352a6607c7bc39eddb6fe8655e42c0ebd136f275c42b39b064032ddc27233e6ee82d2aeee166705e10282991dd6c214d9154782cb9a02a21a931bab0d5d2b1a9c309360f87859ed975c9f856280b9"}, 0xef)

[ 1372.120416] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1372.120428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1372.183377] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1372.266223] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
07:00:02 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0xa4, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

07:00:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/if_inet6\x00')
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000))
preadv(r0, &(0x7f0000000480), 0x89a5e5667804b19, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x80000000)

07:00:02 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={<r1=>0x0, 0xd1, "630964c7ea9450cdfc50e77d0799f176871fbf8f57f1697029d192c1bf47b429353848869687e9296cabaa3921106b22c1bc932f525770a93dcbd3405757c82101851fde3920832e56db993325cd2845297ca75dbba7bfefa2f1c5c3fabec9051bf05ab3044858d36af8fb51b4428bbf0aba630d6b57488d3f500f7c013a109f3d626f3fd7babac37ea5ab47e9a7dff076133ed0b4b2aae355c809ff31024c3e1874d9f87af17ae2f9c4a3f4696d49f0977299f4ac786e11db670a837b99951d4e112b57a7ff9a14541e5078872503c1b3"}, &(0x7f0000000180)=0xd9)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0xcf, 0x4, 0xa2, 0x2, 0x3}, 0x14)
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x400)
ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000040)={0xffffffff00000000, 0xffff, 0x1})

07:00:02 executing program 2:
r0 = socket(0x11, 0x803, 0x300)
r1 = socket$inet(0x2, 0x80003, 0x4)
syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x10000)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x44, 0x4)
recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x0, 0x0)

07:00:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:02 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1372.700051] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1372.707523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1372.736275] IPVS: ftp: loaded support on port[0] = 21
07:00:02 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x400000000008000, 0xff0d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="747275737465642eff"])
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0}}], 0x1, 0x0, 0x0)

07:00:02 executing program 5:
r0 = socket$kcm(0x10, 0x80000000002, 0x10)
socket$alg(0x26, 0x5, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getpriority(0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100))
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={@ipv4, <r2=>0x0}, &(0x7f00000001c0)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}}}, &(0x7f0000000300)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@local, 0x4e24, 0x9, 0x4e21, 0x79d9, 0x2, 0x0, 0x20, 0x2c, r2, r3}, {0x8000, 0x5, 0x9, 0x10000, 0x100000001, 0x3, 0x3, 0x20e9}, {0x0, 0x8, 0x0, 0x400}, 0x3f5f, 0x6e6bb0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0xff}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x1de, 0x1, 0x20, 0x1000}}, 0xe8)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0)

07:00:02 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
personality(0x40008)
fallocate(r0, 0x50, 0x7, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

07:00:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:03 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x39)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)

[ 1372.984090] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1373.023752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
07:00:03 executing program 5:
rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0)
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000100)=""/83, &(0x7f00000000c0)=0xfffffffffffffe0d)

[ 1373.111310] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1373.132455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1373.683234] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1373.694268] CPU: 1 PID: 27572 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1373.701120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1373.710478] Call Trace:
[ 1373.713081]  dump_stack+0x172/0x1f0
[ 1373.716733]  dump_header+0x10f/0xb6c
[ 1373.720457]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1373.725574]  ? ___ratelimit+0x60/0x595
[ 1373.729467]  ? do_raw_spin_unlock+0x57/0x270
[ 1373.733933]  oom_kill_process.cold+0x10/0x6f5
[ 1373.738440]  ? task_will_free_mem+0x139/0x6e0
[ 1373.742953]  out_of_memory+0x79a/0x1280
[ 1373.746941]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1373.752059]  ? oom_killer_disable+0x280/0x280
[ 1373.756568]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1373.761687]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1373.766450]  ? memcg_memory_event+0x40/0x40
[ 1373.770788]  ? _raw_spin_unlock+0x2d/0x50
[ 1373.774943]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1373.780057]  try_charge+0xfec/0x1570
[ 1373.784255]  ? find_held_lock+0x35/0x130
[ 1373.788332]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1373.793191]  ? kasan_check_read+0x11/0x20
[ 1373.797349]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1373.802211]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1373.806805]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1373.811741]  shmem_getpage_gfp+0x69b/0x3520
[ 1373.816090]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1373.821199]  ? lock_downgrade+0x810/0x810
[ 1373.825451]  shmem_fault+0x22d/0x760
[ 1373.829172]  ? __handle_mm_fault+0x349d/0x3f20
[ 1373.833767]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1373.839061]  ? lock_downgrade+0x810/0x810
[ 1373.843219]  __do_fault+0x116/0x4e0
[ 1373.846852]  __handle_mm_fault+0x2cbd/0x3f20
[ 1373.851271]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1373.856116]  ? find_held_lock+0x35/0x130
[ 1373.860183]  ? handle_mm_fault+0x322/0xb30
[ 1373.864439]  ? kasan_check_read+0x11/0x20
[ 1373.868598]  handle_mm_fault+0x43f/0xb30
[ 1373.872668]  __get_user_pages+0x7b6/0x1a40
[ 1373.876922]  ? follow_page_mask+0x19a0/0x19a0
[ 1373.881432]  ? memset+0x32/0x40
[ 1373.884722]  populate_vma_page_range+0x20d/0x2a0
[ 1373.889491]  __mm_populate+0x204/0x380
[ 1373.893392]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1373.898341]  vm_mmap_pgoff+0x213/0x230
[ 1373.902243]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1373.907093]  ? kasan_check_read+0x11/0x20
[ 1373.911244]  ? _copy_to_user+0xc9/0x120
[ 1373.915224]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1373.920771]  ksys_mmap_pgoff+0xf7/0x630
[ 1373.924769]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1373.929721]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1373.934482]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1373.939256]  ? do_syscall_64+0x26/0x610
[ 1373.943236]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1373.948610]  __x64_sys_mmap+0xe9/0x1b0
[ 1373.952506]  do_syscall_64+0x103/0x610
[ 1373.956409]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1373.961600] RIP: 0033:0x457f29
[ 1373.964797] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1373.983702] RSP: 002b:00007f3ab024fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1373.991416] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1373.998688] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1374.005961] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1374.013244] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab02506d4
[ 1374.020525] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1374.051038] memory: usage 307200kB, limit 307200kB, failcnt 5137
[ 1374.057451] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1374.083820] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1374.093800] Memory cgroup stats for /syz4: cache:16124KB rss:215780KB rss_huge:180224KB shmem:16124KB mapped_file:4620KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4752KB active_anon:227348KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1374.125718] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27565,uid=0
[ 1374.148086] Memory cgroup out of memory: Kill process 27565 (syz-executor.4) score 1121 or sacrifice child
[ 1374.158577] Killed process 27565 (syz-executor.4) total-vm:72708kB, anon-rss:172kB, file-rss:35712kB, shmem-rss:4484kB
[ 1374.189384] net_ratelimit: 26 callbacks suppressed
[ 1374.189392] protocol 88fb is buggy, dev hsr_slave_0
[ 1374.199509] protocol 88fb is buggy, dev hsr_slave_1
[ 1374.204723] protocol 88fb is buggy, dev hsr_slave_0
[ 1374.209797] protocol 88fb is buggy, dev hsr_slave_1
[ 1374.214922] protocol 88fb is buggy, dev hsr_slave_0
[ 1374.219993] protocol 88fb is buggy, dev hsr_slave_1
[ 1374.225125] protocol 88fb is buggy, dev hsr_slave_0
[ 1374.230209] protocol 88fb is buggy, dev hsr_slave_1
[ 1374.244141] oom_reaper: reaped process 27565 (syz-executor.4), now anon-rss:0kB, file-rss:34900kB, shmem-rss:4488kB
07:00:04 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0xd6, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

07:00:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b264000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008001400ffffffff"], 0x3c}}, 0x0)

07:00:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:04 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x587195ed, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040))
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

07:00:04 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

07:00:04 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000180a43ba5d806055b6fdd80b40000000030001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)

[ 1374.366629] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1374.392971] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
07:00:04 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
socket$caif_stream(0x25, 0x1, 0x1)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

07:00:04 executing program 5:
r0 = gettid()
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, 0x0, &(0x7f0000000100))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="6a00000018312d658eb7574158d5c48c990e92803bd73c79787393367bd0cd4a096acd15211525d04ac4d5af2fbd01e6718b4047f44aedafc1746a3e365ef78fbd0034d0e6b0d114c2eb988667610b5453e32ef7033ded03cf6d24b04824bfe3922192436f6c039983de9def29f3"], 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="350000004f47db9e66b37eee7649254c820a4c782737f903a65d00b1dc63f6f4e18a3a795f236a2f44d2ad1fff015423251e6351f7e004f649"], 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x61}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x7, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
readahead(r1, 0x3, 0xfffffffffffffffa)
write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x8}}, 0x18)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000280)={0x90, 0x0, 0xbf, 0x8, 0xe, 0x3, 0x4, 0x10000, 0x9, 0x7fffffff, 0x8001, 0x6})

[ 1374.429916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1374.453940] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1374.473852] IPVS: ftp: loaded support on port[0] = 21
07:00:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:04 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='gid_map\x00')
exit(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

07:00:04 executing program 0:
r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0xf3, 0x0)
write$P9_RLOCK(r0, &(0x7f0000000200)={0x8, 0x35, 0x2}, 0x8)
connect$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x84400, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x58}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x49d}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c010}, 0x40000)

[ 1374.579448] protocol 88fb is buggy, dev hsr_slave_0
[ 1374.584614] protocol 88fb is buggy, dev hsr_slave_1
07:00:04 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0xffffffffffffff0d)

[ 1374.735518] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1375.258776] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1375.273404] CPU: 1 PID: 27631 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1375.280261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1375.289605] Call Trace:
[ 1375.292186]  dump_stack+0x172/0x1f0
[ 1375.295822]  dump_header+0x10f/0xb6c
[ 1375.299539]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1375.304642]  ? ___ratelimit+0x60/0x595
[ 1375.308555]  ? do_raw_spin_unlock+0x57/0x270
[ 1375.312993]  oom_kill_process.cold+0x10/0x6f5
[ 1375.317483]  ? task_will_free_mem+0x139/0x6e0
[ 1375.321978]  out_of_memory+0x79a/0x1280
[ 1375.325947]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1375.331045]  ? oom_killer_disable+0x280/0x280
[ 1375.335531]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1375.340633]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1375.345348]  ? memcg_memory_event+0x40/0x40
[ 1375.349688]  ? _raw_spin_unlock+0x2d/0x50
[ 1375.353834]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1375.358938]  try_charge+0xfec/0x1570
[ 1375.362652]  ? find_held_lock+0x35/0x130
[ 1375.366717]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1375.371566]  ? kasan_check_read+0x11/0x20
[ 1375.375709]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1375.380551]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1375.385126]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1375.390060]  shmem_getpage_gfp+0x69b/0x3520
[ 1375.394419]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1375.399518]  ? lock_downgrade+0x810/0x810
[ 1375.403662]  shmem_fault+0x22d/0x760
[ 1375.407381]  ? filemap_map_pages+0x8b0/0x1320
[ 1375.411901]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1375.417171]  ? __lock_acquire+0x53b/0x4700
[ 1375.421410]  ? debug_smp_processor_id+0x1c/0x20
[ 1375.426074]  ? read_cache_page_gfp+0x90/0x90
[ 1375.430494]  ? pmd_val+0x85/0x100
[ 1375.433944]  ? pmd_val+0x85/0x100
[ 1375.437430]  __do_fault+0x116/0x4e0
[ 1375.441074]  __handle_mm_fault+0x2cbd/0x3f20
[ 1375.445497]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1375.450343]  ? find_held_lock+0x35/0x130
[ 1375.454414]  ? handle_mm_fault+0x322/0xb30
[ 1375.458658]  ? kasan_check_read+0x11/0x20
[ 1375.462798]  handle_mm_fault+0x43f/0xb30
[ 1375.466864]  __get_user_pages+0x7b6/0x1a40
[ 1375.471114]  ? follow_page_mask+0x19a0/0x19a0
[ 1375.475605]  ? memset+0x32/0x40
[ 1375.478875]  populate_vma_page_range+0x20d/0x2a0
[ 1375.483629]  __mm_populate+0x204/0x380
[ 1375.487510]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1375.492448]  vm_mmap_pgoff+0x213/0x230
[ 1375.496332]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1375.501181]  ? kasan_check_read+0x11/0x20
[ 1375.505343]  ? _copy_to_user+0xc9/0x120
[ 1375.509360]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1375.514933]  ksys_mmap_pgoff+0xf7/0x630
[ 1375.518925]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1375.523904]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1375.528674]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1375.533441]  ? do_syscall_64+0x26/0x610
[ 1375.537432]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1375.542816]  __x64_sys_mmap+0xe9/0x1b0
[ 1375.546725]  do_syscall_64+0x103/0x610
[ 1375.550619]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1375.555806] RIP: 0033:0x457f29
[ 1375.558994] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1375.577893] RSP: 002b:00007f3ab024fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1375.585593] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1375.592854] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1375.600116] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1375.607396] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab02506d4
[ 1375.614901] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1375.622962] memory: usage 307200kB, limit 307200kB, failcnt 5181
[ 1375.629126] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1375.635960] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1375.642210] Memory cgroup stats for 
[ 1375.642220] /syz4: cache:16108KB rss:215912KB rss_huge:180224KB shmem:16108KB mapped_file:4620KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4692KB active_anon:227348KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1375.665917] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27624,uid=0
[ 1375.680613] Memory cgroup out of memory: Kill process 27624 (syz-executor.4) score 1121 or sacrifice child
[ 1375.680698] Killed process 27624 (syz-executor.4) total-vm:72708kB, anon-rss:172kB, file-rss:35712kB, shmem-rss:4484kB
07:00:05 executing program 5:
r0 = gettid()
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, 0x0, &(0x7f0000000100))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="6a00000018312d658eb7574158d5c48c990e92803bd73c79787393367bd0cd4a096acd15211525d04ac4d5af2fbd01e6718b4047f44aedafc1746a3e365ef78fbd0034d0e6b0d114c2eb988667610b5453e32ef7033ded03cf6d24b04824bfe3922192436f6c039983de9def29f3"], 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="350000004f47db9e66b37eee7649254c820a4c782737f903a65d00b1dc63f6f4e18a3a795f236a2f44d2ad1fff015423251e6351f7e004f649"], 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x61}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x7, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
readahead(r1, 0x3, 0xfffffffffffffffa)
write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x8}}, 0x18)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000280)={0x90, 0x0, 0xbf, 0x8, 0xe, 0x3, 0x4, 0x10000, 0x9, 0x7fffffff, 0x8001, 0x6})

07:00:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:05 executing program 0:
r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x4000)
write(r0, &(0x7f0000000140)="240000001a0025e00018000400edfc0e800000000000000600000000000000840722dd882d95c89a950f02ba57310100", 0x240)

07:00:05 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0xea, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

[ 1375.705829] oom_reaper: reaped process 27624 (syz-executor.4), now anon-rss:0kB, file-rss:34892kB, shmem-rss:4484kB
07:00:05 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

07:00:05 executing program 2:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d46", 0xce)
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x4c0040)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106, 0x100b}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x2, @mcast1, 0x3f}, r1}}, 0x30)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14)
clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)="5a53ef1d3c69554f356fc90b1fc511933a214659e62ad87ac330e91daebc9f2f2cae9d1339496819603be03a92")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4)

07:00:05 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={<r1=>0x0, @multicast1}, &(0x7f0000000300)=0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000340)={@local, @empty, r1}, 0xc)

[ 1375.800983] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
07:00:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000180)={0x6, {{0x2, 0x4e24, @multicast2}}, 0x0, 0x7, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23, @empty}}]}, 0x410)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}})

07:00:06 executing program 0:
r0 = socket(0x10, 0x20000000801, 0x8)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0)
r3 = getgid()
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r1, r2, r3}, 0xc)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x140, 0x0)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000180)=""/239)

07:00:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="777195e6dcc29f44de", 0x9, 0xfffffffffffffffb)
keyctl$set_timeout(0xf, r0, 0x3)
r1 = socket$kcm(0xa, 0x4000000000000005, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x3a01]}}, 0x80, 0x0}, 0x0)
sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xa}}, 0x101d8, &(0x7f0000000640), 0x98, &(0x7f0000000280)=ANY=[@ANYBLOB="db0763cbe30000000000cc3e60fe150d19908c0b59bf4cdcd5ee5c57778347fc5d46c8532f12f8c4909c1eb6d2e63214e2a8f41c8bb6a52c53c6a3b629687079e97701347339f71d855e9bf1b893330f342a20413370ae303623d2c82c480202c69a04868fbdaf48d3a616b4ccf033a4ee157e596ff64d726c112478758f38a65105290cc02103ee925ac6f71707d9dfb55e64c62a4dd32b7c8f6acc6e2457e552b7ecc4a61debcd7adef96e0c551efd620373d6c80aa73d0cda95a58dac9ad9eaf40398e3a4680ba8a1122b6a591e"], 0x20}, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:00:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1376.389247] IPVS: ftp: loaded support on port[0] = 21
07:00:06 executing program 5:
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000500)=ANY=[], 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200000, 0x0)
bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000440))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0)

07:00:06 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'\x00', {0x2, 0x4e20, @loopback}})
r1 = getpgrp(0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r2=>0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r3, r4, 0x2})

07:00:07 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0xf6, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

07:00:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:07 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

07:00:07 executing program 2:
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_reqkey_keyring(0xe, 0xf000010000000002)
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x8, 0x1, 0x2, 0xff, 0x7, 0x7fffffff, 0x5})

07:00:07 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc00, 0x0)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

07:00:07 executing program 5:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000)
r1 = perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4000000000002000, 0x0, 0x3f, 0x0, 0xa5f, 0x7, 0x8, 0x7, 0x1000000000000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x48, 0x0, 0x0, 0x80, 0x8, 0x80, 0xebc, 0x377, 0xafb8, 0x0, 0x10000, 0x3, 0x9ddc, 0x0, 0x5, 0x7, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x1}, 0x10, 0x0, 0x0, 0x6, 0x3c0, 0x10000}, 0x0, 0x4, 0xffffffffffffffff, 0x1)
r2 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000001c0)=0x3)
setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4)
getsockname$inet(0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x814)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x840, 0x0)
mincore(&(0x7f00005ed000/0x1000)=nil, 0x1000, &(0x7f0000000240)=""/17)

[ 1377.010160] validate_nla: 3 callbacks suppressed
[ 1377.010168] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
07:00:07 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x0, 0x5, 0x0, @time, {}, {}, @addr={0x4, 0x8}}], 0x30)
syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x9, 0x40)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="0fc3d2de35e67726ccf27de8ce708ef76fd15b9cbfadc76f9b8d68323c829b0a2510abec13399e45fbd9d6d2b9026a877a2368bb589d69072c1918df9d74225ffe0b8321762d7e4b548b8c30529d1c9c49e48c4174428f2aed5f73f6ea6158e5260de1355f7b73f8c217900ee9b3f70ed6e1a431e1c3e2d5ca6bb36a7893cc689d9b246d240f1d06c56dfb2ac8ae0efc3d92dff3f3ff436e07149fb77b412cc044aacd5f0b155bb92def7d5d5f383bab7fffcf6d986f1f9ac1de9dc8ad29c12afd48b5f511afc73fd37de6aaab67202450015a65bdabfa72f887f7e9c3a5f34e26aaebf46a20d7fc546af0f516c7909eb751336e", 0xf4, 0xfffffffffffffff8)
keyctl$set_timeout(0xf, r1, 0xfffffffffffffff7)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/151, &(0x7f0000000300)=0x97)
close(r0)

07:00:07 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1377.056166] __nla_parse: 5 callbacks suppressed
[ 1377.056176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1377.092073] IPVS: ftp: loaded support on port[0] = 21
07:00:07 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000054c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802010000000000000000000105000600200000000a000000000000000b4700e50000030000001f00000000e5002500000000000002000100000000be000000020000627c05000500000000000a0000000073a4c78852471f65000000ff170000000000f690b9a7008807a4cb"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x23a}}, 0x10000)
sendmmsg(r0, &(0x7f0000000180), 0x4000144, 0x0)

07:00:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0000000100001000000000000000000e0000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000"], 0xf0}}, 0x0)

07:00:07 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x2c000000}, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3c, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$read(0xb, r0, &(0x7f0000000080)=""/26, 0x1a)

[ 1377.363531] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1377.401114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1377.956606] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1377.974347] CPU: 1 PID: 27766 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1377.981211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1377.990567] Call Trace:
[ 1377.993171]  dump_stack+0x172/0x1f0
[ 1377.996912]  dump_header+0x10f/0xb6c
[ 1378.000639]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1378.005757]  ? ___ratelimit+0x60/0x595
[ 1378.009687]  ? do_raw_spin_unlock+0x57/0x270
[ 1378.014124]  oom_kill_process.cold+0x10/0x6f5
[ 1378.018633]  ? task_will_free_mem+0x139/0x6e0
[ 1378.023150]  out_of_memory+0x79a/0x1280
[ 1378.027142]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1378.032257]  ? oom_killer_disable+0x280/0x280
[ 1378.036758]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1378.041879]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1378.046551]  ? memcg_memory_event+0x40/0x40
[ 1378.050889]  ? _raw_spin_unlock+0x2d/0x50
[ 1378.055167]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1378.060281]  try_charge+0xfec/0x1570
[ 1378.064016]  ? find_held_lock+0x35/0x130
[ 1378.068089]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1378.072948]  ? kasan_check_read+0x11/0x20
[ 1378.077116]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1378.081968]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1378.086565]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1378.091507]  shmem_getpage_gfp+0x69b/0x3520
[ 1378.095854]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1378.100969]  ? lock_downgrade+0x810/0x810
[ 1378.105131]  shmem_fault+0x22d/0x760
[ 1378.108856]  ? __handle_mm_fault+0x349d/0x3f20
[ 1378.113449]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1378.118743]  ? lock_downgrade+0x810/0x810
[ 1378.122903]  __do_fault+0x116/0x4e0
[ 1378.126535]  __handle_mm_fault+0x2cbd/0x3f20
[ 1378.130988]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1378.135923]  ? find_held_lock+0x35/0x130
[ 1378.139989]  ? handle_mm_fault+0x322/0xb30
[ 1378.144251]  ? kasan_check_read+0x11/0x20
[ 1378.148437]  handle_mm_fault+0x43f/0xb30
[ 1378.152514]  __get_user_pages+0x7b6/0x1a40
[ 1378.156789]  ? follow_page_mask+0x19a0/0x19a0
[ 1378.161315]  ? memset+0x32/0x40
[ 1378.164608]  populate_vma_page_range+0x20d/0x2a0
[ 1378.169375]  __mm_populate+0x204/0x380
[ 1378.173284]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1378.178231]  vm_mmap_pgoff+0x213/0x230
[ 1378.182135]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1378.186992]  ? kasan_check_read+0x11/0x20
[ 1378.191161]  ? _copy_to_user+0xc9/0x120
[ 1378.195159]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1378.200798]  ksys_mmap_pgoff+0xf7/0x630
[ 1378.204788]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1378.209724]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1378.214487]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1378.219353]  ? do_syscall_64+0x26/0x610
[ 1378.223333]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1378.228709]  __x64_sys_mmap+0xe9/0x1b0
[ 1378.232607]  do_syscall_64+0x103/0x610
[ 1378.236509]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1378.241698] RIP: 0033:0x457f29
[ 1378.244896] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1378.263801] RSP: 002b:00007f3ab024fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1378.271514] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1378.278802] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1378.286078] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1378.293353] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab02506d4
[ 1378.300625] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1378.321358] memory: usage 307200kB, limit 307200kB, failcnt 5213
[ 1378.327550] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1378.342944] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1378.349127] Memory cgroup stats for /syz4: cache:16084KB rss:215776KB rss_huge:180224KB shmem:16084KB mapped_file:4620KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4700KB active_anon:227348KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1378.374764] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27745,uid=0
[ 1378.396297] Memory cgroup out of memory: Kill process 27745 (syz-executor.4) score 1121 or sacrifice child
[ 1378.406805] Killed process 27745 (syz-executor.4) total-vm:72708kB, anon-rss:172kB, file-rss:35712kB, shmem-rss:4484kB
[ 1378.430235] oom_reaper: reaped process 27745 (syz-executor.4), now anon-rss:0kB, file-rss:34900kB, shmem-rss:4484kB
07:00:08 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0xf8, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

07:00:08 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @empty, <r1=>0x0}, &(0x7f0000000080)=0xc)
sendmmsg(r0, &(0x7f0000006180)=[{{&(0x7f00000000c0)=@hci={0x1f, r1, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="e30efbd500d9bd38461b69f44cc9883a85e6b126196c3f75733cffcc91bbabd184cee34aa3170a3b542cf30f598e95ce26f4b3e3c434adcdfc8320800024172ca947fd699e2e072b7d465be3549226230c161c526cabe1034441f5981d1504ca8f3dac573d428a189d5c3eaee0e4ed0371ca1ffd6928e12ca89769189377ed2c46777e8719e8feec803b727c847b625a0be99f6e685e1bb1b5abd77be153c3d01634ac0acb1c1c9430872b296cc86ff77ce7cba11e52960d82017f9acc66e36ff39b1ba9aff256e3d7472c563601f6184591c55871b4652fc3f8616a89dc231759ee0c086b9fc7a6e89647b1aaa30dbb9186ee77bc32de0e", 0xf8}, {&(0x7f0000000240)="3d08ba2b550aa3bded8af2d4156dcf4ced0e513aabc4", 0x16}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000280)="90f13c112b390e123d70e7570b0b23c8bdbb2e300df855f1e3d94bf4dbb1d2e21d36e20b1d4b4a96d4fce0b66d72cdc421922eb51d990e868d94aab92e9008103ad7d11c5080597f89832f94a273adc4289af6d6018a9413979a4bba2da207a0f121b3", 0x63}], 0x4, &(0x7f0000001d40)=[{0x110, 0x0, 0x20, "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"}, {0x1010, 0x102, 0x9, "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"}, {0x60, 0x13f, 0x4, "cf1825130c3f89e42ad367da1319f468b0fcae37b0844e6ebf4b094b7105002db91643d831da5ddb2fb66a9100706f8d9122b4fbd6415bba1b0f02b098b73f8c3e006177e47953f03def"}, {0x110, 0x1ff, 0x10001, "1fe3895b63016f0d304ab3ef8b97c73ef63d473a15678f563be640cb678a53c456b98ddeeb91a0e18585f6ca7f31918359dd37da945d1a593f7182adfa2055a624aac0e6afb1b26e6c425405abc3b97255c50f143d132f54b580123ed4f7eda16a32f32c5cb177a194c372da38012347121eb5a534bce201d0d55263f817adf6a90f500b48d6249d99b2e8cb903019ce9e746b7f2cfaa124bed0d60fc7c929edf26694e11c4f3dbd2bdc06ebceb7d36773bdaab07ac1e6e12cf23313079c9187284db0189941bc7a2ee8b1e3c76aa482c2c5f1749f5ae6ea545c46f504f4d9225c03f0ffecc02cc638980bc33df7707049557d3a64e514237822c6f4a1"}, {0x38, 0x111, 0x10000, "3bff7a669fac721aa055f41fd06431cd4c25e4cb11eccbe73384c0edb5ca5f7098f2a49fb5"}, {0xd0, 0x11f, 0x49, "7933a7095ace667224b6d739d62b2644c4e3a7228b52aeedc6c65d94a5f4ff31c7458a1bb2f4804647afe38cd2fa10907b364ffb3b72c6eedae0da225d143bf75667e8e07dbb486d6363f70055df28d14a16c737115388058392b55f47522891dda46206f8b7e7debba3281590356a77304ac862873d10aa2b5dec3d22889d337734d85e88ecdbc61a91058b456416b41031f556eee97c4f770c87b3412ae45d37073ffb1c5fccb6997f0357d5f66621f2de9dea46eafd8075dff5e2b1df4c"}, {0xc0, 0x102, 0xa5, "b42d488c2f057e864ff1defb7980610a4df8d473affeb50e6cbd23ebc6f920fd1e48112557bf28ec1c8151c585315d425b812594c8e6fa6f37f722f362a5c817b3a3dc1ba28a136a7096e89cb50f8c2d908955d80acc9e16e0c60614ad12ef35d48dde58e48ac98e838159fa2e96aed7051e7212c5771acefba5b5c950b27f7ac160a853debb29e8ea41beb495dccb7dbd3671d88d23f2a0bcece2d13a38b7360021a29b57d3549617b8cb07cc25f1"}, {0x30, 0x3a, 0x6, "ec33957a6a6c5ca2ff80009462d6349a7ceb7d3e911082fd93d66197c7"}], 0x1488}, 0x3}, {{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1}, 0x3, 0x2, 0x3, 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)="141f48b783bad7fa90e11f7c9f36a2100d783f8f1313c21e857ce18556776959902e831560665406e872a5571a5cb3020e798542c571f289099419305705dd6be0814ca02ec68bdd3b2cc5a31044af31e192fc500a57ab8853cc88cf3eaa781030811bfa337e76200220b3c3", 0x6c}, {&(0x7f0000000440)="9475b70619e8e3600d489e1017b27b9302ed3e6ea252db2723f6651fb81358eed0f1440f2426b992a2b79362981d520699c3483e91bf00fe14caa516a1cd1f18dfb2c9ac4c4e14d4d477c9d8a533ee76be1928a55b69444c37c55c943c8cb93d1d7bf9a6c5abf4747afee9b68a69122594f539f1ee45", 0x76}], 0x2, &(0x7f0000000500)=[{0x68, 0x88, 0x8, "ce9657669a9dd95033f793233678b37e53cd6185f777bcefbfa85ceb4250d1ca9c0b247e9e4cdd86d5453631af689766fc61bbde8b2049d2c6a6c5e38d7ea855ad8e50cbf9e5575ebd690b790d3a51ed556383c23a50e7"}], 0x68}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="548cb64275400a84b9f4a88fcbfe22bf8e75d06c62f981273f38cef3b8e4ce546ce2f4547b946913450a824de19316c77c8b4b4526bb8f6d32d8fdaceacbfa0f32d0471af3dac6d381c24227c25e67dae1c533b3e7232c0c6b6c65bb68e75fc95ceca3af36d2a2a9fefa2b96ad9c610bc4dbe2fcebd9f2eadc9e1d4dbd7163cef2f60ee9bf0d986db073f7b6a1275e39ae3ba2777231b16fc143ad5bb3e280d70b2c26fcaf56fc9e8cca62106a30a923d6627d588595b7e6d76ad2925365e613ce38cde19a763df0540b3320dcccbc48da9c35019bdfb4e76d0d45fd6c9135cb3c57800328ca6a37f19c3972de55", 0xee}, {&(0x7f0000000680)="6e4a7b34891986686f39642906e13f2f309d92eded072b723f826a5cc6a840a6d8478e3d06212900592b4b9fd976614fa288938ae775", 0x36}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="80000000000000001f0100000400000060663550f00c9c09410800000000000000dd1e608dbdbb55c44afb59700318cb4c47af6097d2f72e078b769107f158a4f0642aeb1cdf3b3a05b6dbcb16decc98687bc4906a19cf38f3556c22efa22b09006725acbf430a337702018f19b1502cb0d27144d14d0cb573b726c3cbe58792"], 0x80}, 0x80000001}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x4, @empty, 'veth0\x00'}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)="e97bf01dfa556f2576512cfc5f908c0a5949516d8e8c6f377d19185fd2d12ce1c4703d58c6620e8691aa7b99c86a72d6206a9161cb27ba81d0d6de25bbddc6ac70536336241d1c9c08e75584bd10198ba5b217a859afa0b428", 0x59}, {&(0x7f0000000880)="adb0875d81d23c2762b3642476936bc3dc675f320894e305d5d71d2d2da8dd5cae1c2791232ee0a2f6a2a234c62e9fb821701ae36da0873d45701fcc7c4d253ceac30f0f7990630fb9a1d466a30d1201b3c0801e20d2f07a637edafb577fd9bc622eeeaa9dcfc39becd55db8e4e5ae384c395fef6fd13542ebcff271f1e5ff99a0aadafe3b047c4abae2a3b85ec510d288f47a68ea8e43ee6d4e339188dc58473631816e9afd9b544087ab0b7a63f8b323fa0c6bf097175128be315221622b1ee73b2fa95817bbb43b80827d203c27b0cd8345239765989c91749eb0fd", 0xdd}], 0x2}, 0x320}, {{&(0x7f00000009c0)=@caif=@dgm={0x25, 0x100000000, 0xffffffffffffffff}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000000a40)="f6f5d2a1b8ea3e625586e6f19746b1ffba082dd8aa2921c6c09e4efc43de34807b359f2f702c4f6fd71ba5f610510fcbb4806c8603b76262a875f21dc0dbc39f86f2a3edf0178f9c8b1cf1ba1c60d4a92ac8a414468389a7d40ef380873fa52f900e7d88ef2bc277ad14f56765008622fcd65f97982871cd30b35316068a29584080b1b9421779ed9a74f614cf489ce37a2cd181bb12a086f882229fdd74d0a0697ee388e42372af4f6a7a5cdc249839d1a3979c3c76b68598fd67fb77", 0xbd}], 0x2, &(0x7f0000000b40)=[{0x58, 0x1ff, 0x401, "2607fe20f48529c920dafc9f4d3201ad6cfde5394ad30b402ae4a4011acfc736f3d6896ccd588df7de71991d89fc6a2fe7a7c6561d5a2178f66c90b5f45b63701f1ed30e"}, {0xc0, 0x114, 0x7, "956ba3595abd2f3b1ca058714c32c9fb270efa934e6e38ecbaa78e2f56fddf3fead6624d158850c3eb77411f8a7f2d29de5dd7fd626d4152d8a6074515368612e881ac02477ed934313bb140adf8a1abf81eabac0809a462385fc6a964c1ee4982c71e94b6245551d87ae523c035043198771d21cb65c9ecde3adb7eb67954975efff90aeaa127577e73ed53d098f76426fe32089a40fda6e75015733b55ef0ea187873a9110c1ac8738b5e93b"}], 0x118}, 0xfffffffffffffc01}, {{&(0x7f0000000c80)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x2, 0x4, {0xa, 0x4e23, 0x7, @remote, 0x7}}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004200)="c0bebc5d70fb62e1", 0x8}, {&(0x7f0000004240)="12d0ce43a2baf3a5dabbcc2d14839bffe600a995cfe184ef37040d0f49a2280c81ed091483e2b7eda7921ed830147693ba61acd14d12247286b1da46ad3b8667c17c4166522ae6d552aa9f1b5880b42d2ced36ad7c3711a38adadaf1a7fbfaf1d9ff3df1d6d62c74534bdb7935f4d1107a6b9f7413fd1537478a1abadcb8b480efd7418010c7d11e6ac00fbb7d58896a56cd39d2d9294088c79d1e3124b1ff5382e0d457d79c94b70cb0908a6cbf1d95640bdba05676309e5de7d229393379b7ec09ff4222e2780617f6b018aa76b10317f82854c354780952fac4dc0917195cab9e5d14619a304f56dc307367", 0xed}, {&(0x7f0000004340)="84aa524255b03e299fbceb522218436ff473aeb4d97335ec51443706e63939b853c12c1636430b38cce1baec2199ad651fc0fc48e301e2315c35ea465a1dad693765910b2f52a9ede07e1b8ba688a16d712bfaca5a497c54592e783163085dff5e2e0df65aae8d57f4717dad22a860dacaaab0415b11a2b4fce4970a2cc39b5363253107edfee42607a2ba1465f09c6040d1697fb4fdd478845c136a7ec82ff5a079576eaaee24a81ccc2e500d55fe90af6c03bfe4c2abed8a0f1bf76555ecb1932fd87503cfba3f6415ba35eca41fe33fc9cd", 0xd3}, {&(0x7f0000004440)="3d4f32140c287b11ad5edbac3e0473ba599527e25c790588b08c81cd727ceb215371133d9cec34878b06af7b36547888986258f01c2d194e126d47bf004250f737c66331cdadfea951f958300a67d59f0a7ae327d734c94edc3bccd93ce4abc568357bedd8317e84c1282356acc7d7c9d9dbd9ea7839eede37dd5f9d96aa10874ecf3cf6297e487c7fad20af1e038a1905d9c55591598b21f56fd02c71afb14e546712c09e9231bea746db73408022e001dab90af4e1ac55d01d416d3ab5e9a4ec8bb9267aea28db8356c1eca2b691d8705b295fa3c1a605", 0xd8}], 0x4, &(0x7f0000004580)=[{0xd0, 0x102, 0x0, "e787d1c2822b7de51a80f7f66535c76500c3f36047c5b0d121af4b2f430e8a408ef029bdb5994ede3ee0c7ff0f84da4dcee9e02f919d361d2d4fcb44d9c456369dd9d18ef20759baa04ba62caa1b0e326ec09d34da0de684d30ef10c40a513e87b88ed36e47779226057b8819595ad365b06e077613d0258722c494da62170934081aa7b51f334f42d003823cebb2f3fcae14898e06cc7806a0e6108192fb7095ee0fc46b2bb88b2e0eb5a4eb1ee8b28484c978cec7420ce64f877"}, {0xe0, 0x1ff, 0x7, "acbf2cdf23c607d8bb238105125d0fa4504efe5abf0782d3786a079392cc0ad5b12073ca48f581bbb7fd000e2dca89a29006c904048e1f7fd83a5926e7b8e8d0690a2f319d4cd52e27769199ab621a5f6f2d878eb3abebe2d80eae30554bb04454f4e0c61df66bb75ef2de9c7794e1edb84cb10f2531168e8bd73df0edf5908487ab2ed01ea2745d79850e5119342a2a2ad31689e56e3dbff9d6ddab4ba4bacd1e672d0c19234046ec4a30f6d1c8aaba5ed6178ed53ce9405ce5e7a3e3cd04cc0c460a5b07d3c1a67119218c"}, {0x110, 0x10d, 0x353, "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"}, {0x58, 0x11e, 0x7, "e18514bc0bc6efd69f7e5a9b5d24ad13862d1cdbe0aeb27828c24b7a5fb6bd5625879d17587e873ea3aa7cbf76dda11862359a506e19113c162141da0246c4255acfc8"}, {0xf0, 0xbe, 0x3, "86dff1c0d28505d7d7a344eef60b80ea8689669837099836011c5d06ef7b918fe10108a6d2fd3922460fcfd7c626478e7aed9c80517b39305069f08309bd5d3e77435f2ec890909e564566c6e3224ba24718599e9b9a0a6ffef8198043858b776356702018ec31914b50ba50101a823b8a0afdd0cbb0066f0a27d6a1410a5975ace7093b78186d1c765b6d691b383d9f0e43d911206171044fc1d45c98cdc6554e2cdb439ae5eecd1917b5f8bf8b4cd3adf39fd7be07e701695f00d2cc3f39a35319b21e440e92e9723b7b5a4c78038b30c736c773082510a483"}], 0x408}, 0x5}, {{&(0x7f00000049c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004a40)="6b0ca77788058038a8eb24dc0b698fa6a51f0eed6dd96b1a62b643cd9d6a59fc0677", 0x22}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="79d058175881f76a30613b462201a4477ccda46d1d8cfe7b87d56c4500c623868ad28818f2fd5433726e0cdeb63ff230648ba2bcfc6165a4a63ab64483aee4c65e98e41e04a319b68c1c969511bc956a2fff95c21e16ea34", 0x58}, {&(0x7f0000005b00)="48fd2917a3bed50c772868739dc22d492351ed2a756acc190514621f489260e5ef744dabf8311dcfb7c793cfb138", 0x2e}, {&(0x7f0000005b40)="c92b69c5f8292f515f29af1a6d2385fd02c12b7a5d9dc73774bd57428f9a672687e1160c272ad445d2b5e40f9610ad342639cbbc352eb12405503aa78ae0f047541e24039611aa1f1d7f4732b4bc547c0a14c09076bf916bb48ee7a7ee9aa80c37824b2f37c5d1981ef511b6094fac9b524b0bbed4108e06e07ec67ad05e37a49a4ee3915a81ee132530207c0e49bc160bf4244c85f071482b2d34bcc9d963a6dcd416a34221290b6c12f48e3a", 0xad}, {&(0x7f0000005c00)="4e3ad34f71b728ed5a7346e938460554c58828d99557e162818538c1f8124c211af67923fa1ee64bb90a996499b628694e0bfd8cbd977975b50b6aeaa88eb6c54b5f", 0x42}, {&(0x7f0000005c80)="2ddce75e7e61f7eb1578d8b3631f9912c5d6c06f282c8e7155dded05d4f59c3d7cf3b0b9610313d1bf3ff700755a039fc67a81c833f0aacafebfc50fc9f5ab5e9f873f23c5a7c8b9efef97b9e732c3ee8eb064015c58a69fbb7907f3980516b0aa23f1d20163e60b72837f36417c360db3fadacc452a0d444edab669ca1b03d1d2c5bdd213332a0e4345e7a9dbe39f", 0x8f}, {&(0x7f0000005d40)="5b6b03ffa033858dba31d4c23fb89022c1e4de534744635854573462a7d6cbbe8b926bec54196dc0b71772fd125a3bee661ed37fa09403744b5bf66e", 0x3c}], 0x8}, 0x6}, {{&(0x7f0000005e00)=@rc={0x1f, {0x3, 0xffff, 0x10000, 0x2, 0x8, 0x7}, 0x3}, 0x80, &(0x7f0000006080)=[{&(0x7f0000005e80)="2f7292875e45b06c73093fdd58b46c6d053e8fba3b32ead849c3220731a15afc8698297e31f6e3db64", 0x29}, {&(0x7f0000005ec0)="ab08eaeea99b3e259cd33e12c6a396245500083d20171918d9ab3da3e93bd1b3d8142211b3393f5f7877a49ca1430e3a289fde63e465df64e1bd4577f8d00e90cff06942335c5dfe3fdffb831a821bd009916f864062bcdad3d5ea6f972487baa7ab75629880d6432da6179772b722c93bbb786c21749718cd8ffd41aba5aa8a8024cce1d856d7585162b03f402b11070399e0626818c4d867683673197913dbefc179f83a63a135d82bd30c5c308989ef409ec69667b543", 0xb8}, {&(0x7f0000005f80)="7200dffb3783ad9050dd2655", 0xc}, {&(0x7f0000005fc0)="01946a04f4feb2df496563470bc4e662e8b7310b744ffa9dacd8fd4616d4a888511c7e67987a29ccf6bba8d88d0172641f444c8fac5b4e37f51f85af72bfd5135964609d4ad7cbf72905e523be3943821ef81c60082fda7e6a57491da3d6b05321f3ae54267a418eda6e7009e9ce8d545e021a033afa50a17792c704fef229b77eb4a0255f80e6addd6f1628f99b7b3290b4e51d95ed9049", 0x98}], 0x4}, 0xffffffffffffffff}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f00000060c0)="b86771842b8d2b35e2b5e63b5d1a80dcb82a533153543786a67df3fe9e044c4946f92bc07add6c880375538340a3111d79871816a3e44ed18b614303b844875729c977e3c2566673079de9a6208f5b97cc35", 0x52}], 0x1, 0xfffffffffffffffe}, 0x2}], 0x9, 0x8000)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='hsr0\x00')
r2 = socket$inet(0x2, 0x80006, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r3 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x1004000000016)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

07:00:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd, 0x0, 0x5, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}})
r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x800, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'erspan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in=@dev, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x4001, 0x4, 0x81, 0x1, 0x2, 0x4, 0x7, 0x7, 0x0, 0x2, 0x4}, {0x1, 0x4000, 0xd, 0x1ff, 0xff, 0x0, 0x4d, 0x3, 0x101, 0x9, 0x5, 0x5}, {0x6001, 0x4000, 0xf, 0x2, 0x0, 0x6, 0x8, 0xbb7, 0x8, 0x180000, 0x5, 0x7}, {0xd000, 0xd000, 0xf, 0x9, 0xb61, 0x7, 0x20, 0x5, 0x0, 0x10000, 0xa6b5, 0x9}, {0x3000, 0x6000, 0xd, 0x1, 0x3, 0xffff, 0xffff, 0x279, 0x80, 0x2, 0x1, 0x3d}, {0x11f000, 0x2000, 0xb, 0x4, 0x4, 0xffffffff80000001, 0x9, 0x0, 0x10000, 0xb2, 0x6, 0x400}, {0x110004, 0x102002, 0x4, 0x3, 0x9, 0x1ff, 0x2, 0x1, 0x5, 0xd98, 0x9, 0x80}, {0x2, 0x0, 0xf, 0x7, 0x8, 0x0, 0x3f, 0x7ff, 0x4102370f, 0xdc, 0xffffffffffff7fff, 0x10001}, {0xd001, 0x14000}, {0x4}, 0x80000000, 0x0, 0x100000, 0x220000, 0x9, 0x2800, 0x1000, [0x1, 0x0, 0x2, 0xfaf]})
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='btrfs\x00', 0x8, &(0x7f0000000440)='/dev/mISDNtimer\x00')
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x141000, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0)

07:00:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x6, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0xb})
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000000c0)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x2})

07:00:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:08 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1378.578129] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1378.597169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1378.618099] IPVS: ftp: loaded support on port[0] = 21
07:00:08 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x6002})
preadv(r0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/202, 0x4}], 0x1, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x400, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1})
r2 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="f7573c15969f71aa4ca29814ff8a662f03f4adffe0aeeea366a1c28c8ec0aedfd204a80e6a94fb190c01a2c9858f17853391c3ae9af7e60a4e54ff13c2ea28bfc30f111f", 0x44, 0xfffffffffffffffa)
ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000340))
r3 = add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'eql\x00'}, &(0x7f0000000300)='eql\x00i\x0e\xa9[\x00\xce\x00', 0xb, 0x3)
keyctl$negate(0xd, r2, 0x2, r3)

07:00:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1378.764044] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1378.787964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
07:00:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:09 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x3, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xfffffffffffff801}, 0x0)
r2 = semget$private(0x0, 0x4, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000007c0)=[0x9, 0x2, 0x1])
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x02k\x00'})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev, @in6=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x101)
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x2)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200000, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f00000000c0)={0x0, 0x6, 0x7})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd})
close(r1)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x8000, 0x0)
dup3(r1, r0, 0x0)

[ 1378.974199] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1378.981099] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1378.989332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1378.996302] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1379.010364] device bridge0 entered promiscuous mode
[ 1379.035784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1379.050342] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1379.072280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1379.108891] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1379.156216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
07:00:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1379.199011] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1379.205638] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1379.258176] device bridge0 left promiscuous mode
07:00:09 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[ 1379.503768] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1379.510239] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1379.516932] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1379.523370] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1379.538509] device bridge0 entered promiscuous mode
[ 1379.568520] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1379.586699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1379.662285] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1379.691459] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1379.710734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1379.738179] CPU: 0 PID: 27811 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1379.745075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1379.754440] Call Trace:
[ 1379.757063]  dump_stack+0x172/0x1f0
[ 1379.760715]  dump_header+0x10f/0xb6c
[ 1379.764446]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1379.769564]  ? ___ratelimit+0x60/0x595
[ 1379.773468]  oom_kill_process.cold+0x10/0x6f5
[ 1379.777979]  ? task_will_free_mem+0x139/0x6e0
[ 1379.782763]  out_of_memory+0x79a/0x1280
[ 1379.786754]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1379.791875]  ? oom_killer_disable+0x280/0x280
[ 1379.796384]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1379.801508]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1379.806190]  ? memcg_memory_event+0x40/0x40
[ 1379.810531]  ? _raw_spin_unlock+0x2d/0x50
[ 1379.814693]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1379.819809]  try_charge+0xfec/0x1570
[ 1379.823535]  ? find_held_lock+0x35/0x130
[ 1379.827613]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1379.832476]  ? kasan_check_read+0x11/0x20
[ 1379.836648]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1379.841510]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1379.846116]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1379.851064]  shmem_getpage_gfp+0x69b/0x3520
[ 1379.855418]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1379.860537]  ? lock_downgrade+0x810/0x810
[ 1379.864704]  shmem_fault+0x22d/0x760
[ 1379.868431]  ? __handle_mm_fault+0x349d/0x3f20
[ 1379.873048]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1379.878343]  ? lock_downgrade+0x810/0x810
[ 1379.882510]  __do_fault+0x116/0x4e0
[ 1379.886153]  __handle_mm_fault+0x2cbd/0x3f20
[ 1379.890576]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1379.895432]  ? find_held_lock+0x35/0x130
[ 1379.899502]  ? handle_mm_fault+0x322/0xb30
[ 1379.903762]  ? kasan_check_read+0x11/0x20
[ 1379.907928]  handle_mm_fault+0x43f/0xb30
[ 1379.912023]  __get_user_pages+0x7b6/0x1a40
[ 1379.916293]  ? follow_page_mask+0x19a0/0x19a0
[ 1379.920798]  ? memset+0x32/0x40
[ 1379.924080]  populate_vma_page_range+0x20d/0x2a0
[ 1379.928827]  __mm_populate+0x204/0x380
[ 1379.932717]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1379.937670]  vm_mmap_pgoff+0x213/0x230
[ 1379.941602]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1379.946461]  ? kasan_check_read+0x11/0x20
[ 1379.950612]  ? _copy_to_user+0xc9/0x120
[ 1379.954585]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1379.960135]  ksys_mmap_pgoff+0xf7/0x630
[ 1379.964103]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1379.969030]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1379.973780]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1379.978536]  ? do_syscall_64+0x26/0x610
[ 1379.982511]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1379.987878]  __x64_sys_mmap+0xe9/0x1b0
[ 1379.991757]  do_syscall_64+0x103/0x610
[ 1379.995634]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1380.000819] RIP: 0033:0x457f29
[ 1380.004017] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1380.022909] RSP: 002b:00007f3ab024fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1380.030604] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1380.037878] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1380.045135] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
[ 1380.052395] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab02506d4
[ 1380.059654] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1380.076375] memory: usage 307200kB, limit 307200kB, failcnt 5252
[ 1380.087172] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1380.096888] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1380.105678] Memory cgroup stats for /syz4: cache:16068KB rss:215908KB rss_huge:180224KB shmem:16068KB mapped_file:4620KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4696KB active_anon:227348KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1380.132151] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27802,uid=0
[ 1380.147837] Memory cgroup out of memory: Kill process 27802 (syz-executor.4) score 1121 or sacrifice child
[ 1380.164153] Killed process 27802 (syz-executor.4) total-vm:72708kB, anon-rss:172kB, file-rss:35712kB, shmem-rss:4484kB
[ 1380.190862] oom_reaper: reaped process 27802 (syz-executor.4), now anon-rss:0kB, file-rss:34900kB, shmem-rss:4484kB
07:00:10 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x130, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

07:00:10 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=<r1=>0x0)
syz_open_procfs(r1, &(0x7f0000000080)='net/wireless\x00')
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)

07:00:10 executing program 5:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480)={0x0, <r2=>0x0})
pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

07:00:10 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x2}], 0x10}, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x0, 0x2)
read(r0, &(0x7f00000004c0)=""/17, 0x11)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000003c0)='.cgroup)nodevGPLmime_typevboxnet0GPL\x00')
r2 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
r3 = request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffffa)
r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00')
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000480))
keyctl$instantiate_iov(0x14, r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="2bb6e214715ae03536a4bf4a4904660bdefe6ac5865a12f22bd6e7c04d65c688a4593cb8c5aaf0cb1f12cfb5d6502a8f9e2cdd724ed00134430bbf47c2b0cceb530c71e2eefc6ff48afec85a728e39b6b26d64ad3b2b4cc19732394053e00b34236d8116db2e657beac9f5199a7b887a687e4912108bb0e092532ea90a9ab3b70aa826da0c0000e6378ca3b63daed3ef6edfa1b4695a695bccefd9a61c23474ccba6415a07dbf90180770b46491c7020378dcd2f37a3a7e5567687f0f3263c0b149a2083d2b2cfe42fd7357cd6f6eef23e21", 0xd2}, {&(0x7f00000000c0)="1a18bfc37407a43ce119f6484899b849d4defd5101dd07f3622d2024c39f0b0662fb2efaa4ff83383087e1caaf75d65d0a1422d068bd0f5f6a7d2ce936e675ba90192a9d61758708b51cd2a7cf3134029418a95d", 0x54}], 0x2, r3)

07:00:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:10 executing program 2:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0x805c6103, &(0x7f00000000c0)={0x9})

[ 1380.290074] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1380.311973] IPVS: ftp: loaded support on port[0] = 21
[ 1380.320866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
07:00:10 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

07:00:10 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/48, 0x3})
r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7ff, 0x80000)
ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x2, 0x6861, [], &(0x7f00000000c0)=0x8b08})

07:00:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1380.419397] net_ratelimit: 26 callbacks suppressed
[ 1380.419404] protocol 88fb is buggy, dev hsr_slave_0
[ 1380.429552] protocol 88fb is buggy, dev hsr_slave_1
[ 1380.435488] protocol 88fb is buggy, dev hsr_slave_0
[ 1380.440599] protocol 88fb is buggy, dev hsr_slave_1
[ 1380.445739] protocol 88fb is buggy, dev hsr_slave_0
[ 1380.450842] protocol 88fb is buggy, dev hsr_slave_1
[ 1380.455964] protocol 88fb is buggy, dev hsr_slave_0
[ 1380.461078] protocol 88fb is buggy, dev hsr_slave_1
07:00:10 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
read(r0, &(0x7f0000000680)=""/4096, 0x1000)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
utimensat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}, 0x100)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000001c0))
pwrite64(r0, &(0x7f0000001680)="6711a9bcfdc68782170000e37c488fc4ea37dff214db5487e13d3baf2ad6654f5192056460c5427034d910c9df205366f492fa1de6b55f95a3ee41107a928e0598813bfdb841fa49caf9a243892b3c7d5a09665e003e96f9f99558e229caf973e8fbc771d294a83ca4c4a583b64244aa7767ea0f16797cd6c8522e88aae82097d179900cb7be88b1098d5c4c6d532cbc621cdac18100418ac37184d0183842be81dac389d4ae60f5a7533f4ec6eabf2c855bb3e117fd9a17e18914678ad9951672affaca839151eefc99cce77a2eeab73a2c3b0c3540cc68bf72a64c72cc3dd5ab0ad014c1f4e1a1932f356a2177ef1cca2df6ca05d12de7474f999a5d67ebb085611aaed0f6e321f265a7f6b3e5f3e0666463ab9a04b9eaaf3825c483884ff2bf193284f19713840ec308eb240034706374626e227024adee60c247af55dae3801f2f5b926dbd15b276961142ae95231e42deea2f78ed27822379da70a8989955d79be5146c534944de11a93c24b92d4bb5cd0da4039aae21b7c1b165c257a16df08e5524a6b75e39da62fc90556eafa7f84a11b99cc2f9aff3d9d0c340bc6903ae4d62802acf484479bedc7abb1f0942e7ee116f618639471e979fa475f2328c96a9d3ea608c3693fbcf4f4cf65e4d0f4c2d77ff548faa27da850938082c8ba732b822b4447bc4841141cc7da59d3806e2b0d46b1be97dd53acf451e4dfc649820a13c276ee0c78cd038bec5196f3fdd600a06e39baa3023339e7bd98f261e9afb8e5e2ee6530c596dddc2cab58c736c5e5237726bef37a4dec4fc088ffb7c375644b8c413c88208675075de45c27c3bbae78103d3462c745f90c3bb4e36fc34c7fedcb0b7fa05288306f522006c83d135c9b0c068f33587808d3b7fa2730bc0501a2ed2e774ce883281a0d2b8284c34680d740a843c5b4d7aebdc8e1e5b0731e2f50252b4e58cf3523663fc00be17736a0c4da01723c8de9d5ce7a7742f07050959c1a6179e2afdeca24de2e81f699977a6bf4c67375488c2847a386d8e30c79f58e435870598378326f25c64c58ea781f33922f5ce3f3609e15904c0641e13c96b8582cb1091d01589962fde7a81c04c01b93ac186c150a037c3975b2fe2efd82b8d98348aa6caef1b18aac446614ad508c39ffb4f127f00b9508f088a387e3c73132b530c8267d949e573f7abc6a92e214a8af1fa10d2a102addcc9f548dd5668b877e7f439911c5543a8af2f9c60987299e06aa2aa3d4e478a7d71f32c9c04baba48d4ed01f88f6bb23cb312d77f23bf3c9ef794632f4b7931f5ad9ca96b63c3a0e2c899eed1e38c2e8b2342794910cd257a40dc68af6c2ca70b949a14ee0f4f21b9f46168a7ef46990b60a17bbdd216fec540c6c0e2be9e071039898d5a27cccb6604c6702feabe14cfa71c352911b11280f881b58b1154ea3319cec83cf4e47464f23d13b8f4e65c1523c9a60602dadbe7090458af68b42d0c21100718691fec19c6f719bd20f084b9f5a83f2e1d502ae128dfb2814ff95320d64fed9302f8bc081bbfd323c0cc37f62c40911a2e11de2f14d0e2bd371e67326f5c44e64b6b48b96ab886e00a5fc7c64c09d3a8e85c4c542218186d2f982fd2cfcdca97eef6a1803376fb171b10113f09e55f8bef3b2d25370c91e0bc8b734237304a2ec4db834f67799dcb80c05776b82ad76353e5c77329f40e4e61a6477dc120774148ec7ddd754505ebb6614fa878176c4ab7bf108aac29e8e8342ac63c7f6b62cbd701e9e53a0f4ef2635f70c03885bdf6679bd74fa35f13eb1bc74c332aae4d181e1404c766847407c27450eaf23142324942848c87bb1bb014db8dd0452bcfb05fc480f28633024452b697152b8ba97ebf296c53501b80db419a28f148266fdf860186b2e7c01736a74256b8e664f66f873c1ab2d75af5dd051ad1f75a4a545a86b494a940a5a1f746cd4e45adf01c90e804a50a3f2b092718cef623f62ef8abd376f581dfc8e207884842f3183018a0a0b2959ccf46f5fcd16ca019ca42639bfe02668032b9736b29a2fe6bedfeda784f0f657549774b3ecd2d9c216c00072dcb0b5cae6862862ba4a54ff6ac5e800fb3e1cde87f1f83533340dfc19ba4b470047207e577ae227753e7667a4f56eb858a139fe07a9d3e9a6b94551e5ce2f121b9087e9fe99130f67749537075a4f85de6448f44a3cf33e1346980e484071f51826afb78edf0620bf7aee7ee72c0e8a2c65e89c0b84616c1e25ac6d09fb9e5d04b8a907019c04b6b99556acf0e7e4f819099827e339d4c298a91767087aea1eb53fca10cf0ea12e9c3612ff4c101515634619b9dae985509ac74da7056b50986b0d51d6c0258e929189c88eccb355c15fbfe581d60914a3201db68184206c41b985cbbb05ca26ab6c80962cc5a5b5c92addd327b511577aa8a91d46dc732e525e397c8d02dd058569e95f4e82a40a8f08a18607fc680d0b5c3d3771ec476f66f065561005f7b379f64447fe9a7fa2fa3ab31983ef1098edf02c7299eaa9984af610e63075a1769bf5ac30b0d4833454406817ca794f8e0929dbfc61590ece5414a6321048aa9baea438411f8fcf151d71093f4a8a2d5d99735beea6659d48cbfa3b043c3d007397a20531aff565daf4d6c23da33cf2dac6633e689957e5c966e969560e902a8a40f9eda7c68a1c9e1ea2dd88828c80c9b27c55031751f91b1b11ab55321d1b0dda8bf448905fbff34c8af1c296d8782342ac4418ed0133b15e31782b13fde78c7f27457944f7d39764b58b20e920a51806fd09901bc17aeb5e24641877321f30dbd78d8d7825ee4c3cd2989a208fb36f8702495b8ea1723ec7c667f993f48a88858fe05c6904fdc1696229cf131475577090b045e4a2b0a962ea612b2caf86574b8810132179d8412d3bfc783ac7fa65636ecf7e4780e50601150632fe40a1a238437ecb6737311fc9922174ca0240dfced2a2245ad9db061564918796b56c44c2d7e9c3839bc455a17d24391be610ea1a50f757276e1477e6955eac2c3c5002324b08656fe3977ba7cb225da03b83689d9791ebe0170c01b6454295175192a1792d5ac3ea3350733780fa4760c68e872c002861429bfe1cf7f533f8c432ed3eecd802e109c4e62bda67c9a00e5dc2ba15184ebc71bfd1f24c947f9bfff7c1d3b43d0008ec2be6905ea43e2df350b77fcb93152482d37686a73a347f5a461e560110cac8284207439e87bbe9dfad192db8a33671e099713f8aff3dd4c4dd4b10b40126dd1b9a5889d430bd88e04df6f0ffe49566ffa4982aaf56b8897b17dd7fcf4cce0e00eb8b740eb29b1e2f665dad0e657af0b7aea6a8102ee8418ab1b5bac6032aa0ceda7cd530d88e1566b74e5a44ff4a83be3d241f5bc25354aebd6cbcdfc681b83baa9268c85ead19257bba593c1e3779be7eb1eb804e0d42a64ac7220cc5e8b17bbf2c1982bf849d1f34af2c14d50c0129878c1c7d72853684613a16292141c856b866f2e3ca22d725c70db3a21b30ac38ff8e5d0533bdd83028d813a3f2b005369e5df0a52a2cf22870b184500940275ae546f1a1fa09704b1e6e81fbcfebb58442c6b311a8fccb47d27951025529a7c95bf3557506a2dfe7b7298844fe2c8b69c420d5f50620170579f5420dcda132ae9685a6be485924baff7ed2d88d621d8cddf0c4fd37f0e9093e77647218985cbf732a434a66ac3f02a9eee32ceeb1e3f5a570100a49ee0b55f009364b76591f438f83dfbf91f3bac4fd0e99d255127c0d868e515b483a9e2ca922c01baf34c93910b0a37dde91ab69d71de29cbad99eb0ff8e8b7db1b2d754e71a9604befa438b46b5318e14472b428b897203fea89f9cfded2d8991aba12c955b5467108869266b304d8842665f0375d94ffeaa70a08fd06b262837915e13b39165bb35eea02c42900445e7bf3453bb222ab1bacd3a5abb587e729c316a36c9958a9214312e41825fceb84591c0fe350156391546337cbf77cdbd4eb6a12daa714ea083aaae3b4bb67d7a6492101ed75da97f1dc68d6e8526d45afc664c85726f4a75edb1f4e10364a80f21a74b3f278488754ce0c09eb6b6b8caf6508bdc1bd797866350a27d66d4fb0f382eb2e89110cd37625364b99c0958107d2ae3f8cbee0e7e77bc022095a12db803c1b5a60a18e21ce9bd45b4c494bf5618ecc101c7742c5817ab914d5797aeaa55f34d890a91e0a93f6fb91df82bf61a1c29add290d5ce714e8256ccc11d38ffecf65a5e89523b1ae8d8c413c8d408ac356b9bcacddf055e26243f1f41bbeb64257a3798eae59e3b93f75a5f486c12c3da84de78f2e7370fcdbbf6b1e6d7c5f107d2c5cb70dfbebbd3dc87e6a8754388eb1cc7980be8a36179b18f22fb0c8d017b16e6c9f5ce25316088e13c993c5b979766ba90c05badb2bf352162a586c8de546ca15ae4045b1a51933637b7c67640fbfcff1da87896ed9ef4aa1c921c3bcf6dc6384305a41c95b2feca669e4cc9f12f5f243cdde31e8ad8a4f1fb3f42b79069a1e5d3779eb69be08548e0116aae55a8fcdaf42d6e9b0ab5366cb8df07df260247ff7af0baa11b19fba136cd6791e89861593d9240ed66f25ea33891d7eb881dd6feaae12aa81383ca8fdd5b1268713a7b22f371597dda5fb201e4c46c51d74dd0c562e8b07bc037c4d52eadcd29ad270cdf1eb370fa5d25d772a11489ea370af5c759f274eb35a85d58f4af0461679ca8ff6b26c536df443cf2f316f60d85ff4a204d614be75de21a315f9e1124c492c92aaa6b5b796b2000b523ccad824356dbba65b2fb0d688fe99feccb23f9650fcea36ae07e967f4b8fe4c887868ebbe2cceb342f0eb1ac23c27169946fd97a760ee3e2b444549040512a062d1bc73e934f6dfb9a87522c516603871203adb406b6275842b204a44dd5764c44b969d00cf42bf278a5d3e7eb75d5237f97d2c5869e141b429831147bbc79180bb876da075b49fa4e5f784fba57084f41e9e858b2f1cfba88efa91fdf95eb258e78da7c32e0112d1c636657879576c67983c26ac40ee29ce71508836bc9023cb65c778f906485d9b0a41a29bceee57acd0aa40660b8c8682fc0f639b7ff2a2a01d8044e6df70778bd51d02fa80850cbc72fa232e18b14fe1c76aa0d721139830b89855a4eca62059ff9971d527a6ffd8fef615cc82544bd5ce9facb1486ab76b491150137d59a144aaf2a7a4bd3669d3ddb1f69d8ba54e72cc2702b5db2f56c66216144916cd8e9a0d985b529318dc34288b36ea54de03e47383a116182d8a90dead20210b8011b6cadcc5647841d2e12bb0a65ccfc01c46b0f9372ec9592673fab57409bbed129cf5f2de40336230754d5b996392b8817dd6cda50f4bc523792098a41fa98d537494f8b99a518760c902cce73690dd43e9bb77e2b9df45e45de48b9d4a2c379d3479820228f1d0fcfa458350fe0f9a2282a9e1b0c7860178742a892b1dd5f53a982d7e489f447dc754c7a493ec990fa88d22b2c3fd1b9fd25281906e013b6fe0dbe9846e1d2573fe7503526bc571de925868a56bce4c52b84877a167c429f7f4732482f93287d7b4a8b1608b1ba2730b0d9718e7eb74ec68d933b510eb3f8f7c633041052459f02838d8ae5f41dcc0734452a34b5c5de554a60c4dc0a3a5fb3932954a0b9faf16fa3ccf74fe1c0c422f189f31d17d62c4ca4b49166ed32b83030d31cbbb7455dff26c71925cd5f8f91857e13ff7e353d3c40232c044ce59727129f3f992bb6f833644b4fbd90f821f127f94de3c96f1b64bab60a0cd", 0x1000, 0x0)
r3 = dup(r0)
ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000240))
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0x88)
write$FUSE_ATTR(r3, &(0x7f0000000040)={0x78}, 0xfddf)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'gre0\x00', 0x40000002000})

[ 1380.518087] syz-executor.5 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[ 1380.522282] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1380.579015] CPU: 0 PID: 27864 Comm: syz-executor.5 Not tainted 5.0.0+ #7
[ 1380.585895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1380.585901] Call Trace:
[ 1380.585924]  dump_stack+0x172/0x1f0
[ 1380.585974]  dump_header+0x10f/0xb6c
[ 1380.605197]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1380.610390]  ? ___ratelimit+0x60/0x595
[ 1380.610405]  ? do_raw_spin_unlock+0x57/0x270
[ 1380.610424]  oom_kill_process.cold+0x10/0x6f5
[ 1380.618704]  ? task_will_free_mem+0x139/0x6e0
[ 1380.618730]  out_of_memory+0x79a/0x1280
[ 1380.618755]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1380.631791]  ? oom_killer_disable+0x280/0x280
[ 1380.641355]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1380.641380]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1380.641395]  ? memcg_memory_event+0x40/0x40
[ 1380.641420]  ? _raw_spin_unlock+0x2d/0x50
[ 1380.646779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1380.651158]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1380.651174]  try_charge+0xfec/0x1570
[ 1380.651187]  ? find_held_lock+0x35/0x130
[ 1380.651208]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1380.651226]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 1380.659675]  ? find_held_lock+0x35/0x130
[ 1380.659695]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 1380.659722]  memcg_kmem_charge_memcg+0x7c/0x130
[ 1380.659736]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 1380.659754]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1380.659770]  memcg_kmem_charge+0x13b/0x340
[ 1380.677063]  __alloc_pages_nodemask+0x437/0x710
[ 1380.685959]  ? __alloc_pages_slowpath+0x2900/0x2900
07:00:10 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote}})
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
sendto(r0, &(0x7f0000000080)="a775d1db283ffe2e029e2c1063999a941a1f355c5e4359965344a149bc3a92d52219", 0x22, 0x40000, &(0x7f00000000c0)=@l2={0x1f, 0x1000, {0x5, 0x9, 0xffffffff7fffffff, 0x31, 0xb1b, 0x1}, 0x9, 0x9a3}, 0x80)

[ 1380.685976]  ? ___might_sleep+0x163/0x280
[ 1380.685993]  ? copyin+0xb5/0x100
[ 1380.694875]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 1380.694895]  alloc_pages_current+0x107/0x210
[ 1380.694914]  pipe_write+0xa65/0xfb0
[ 1380.704414]  __vfs_write+0x613/0x8e0
[ 1380.704432]  ? kernel_read+0x120/0x120
[ 1380.713756]  ? common_file_perm+0x1d6/0x6f0
[ 1380.713777]  ? apparmor_file_permission+0x25/0x30
[ 1380.713801]  ? rw_verify_area+0x118/0x360
[ 1380.713819]  vfs_write+0x20c/0x580
[ 1380.713837]  ksys_write+0xea/0x1f0
[ 1380.722712]  ? __ia32_sys_read+0xb0/0xb0
[ 1380.722731]  ? do_syscall_64+0x26/0x610
[ 1380.722749]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1380.722761]  ? do_syscall_64+0x26/0x610
[ 1380.722780]  __x64_sys_write+0x73/0xb0
[ 1380.731917]  do_syscall_64+0x103/0x610
[ 1380.731954]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1380.731966] RIP: 0033:0x457f29
[ 1380.731981] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1380.731989] RSP: 002b:00007ff8443f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1380.740871] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29
[ 1380.740880] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000006
[ 1380.740889] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1380.740898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8443f76d4
[ 1380.740908] R13: 00000000004c3cdf R14: 00000000004dc5e8 R15: 00000000ffffffff
[ 1380.831682] protocol 88fb is buggy, dev hsr_slave_0
[ 1380.831736] protocol 88fb is buggy, dev hsr_slave_1
07:00:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[ 1380.957016] memory: usage 307028kB, limit 307200kB, failcnt 3683
[ 1380.974857] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1381.028887] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1381.040031] Memory cgroup stats for /syz5: cache:44KB rss:245376KB rss_huge:212992KB shmem:16KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:245448KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 1381.092384] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=27863,uid=0
[ 1381.154170] Memory cgroup out of memory: Kill process 27863 (syz-executor.5) score 1117 or sacrifice child
[ 1381.197060] Killed process 27863 (syz-executor.5) total-vm:72708kB, anon-rss:4276kB, file-rss:34816kB, shmem-rss:0kB
[ 1381.227006] oom_reaper: reaped process 27863 (syz-executor.5), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB
[ 1381.401136] IPVS: ftp: loaded support on port[0] = 21
[ 1382.227989] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1382.239392] CPU: 1 PID: 27910 Comm: syz-executor.4 Not tainted 5.0.0+ #7
[ 1382.246242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1382.255599] Call Trace:
[ 1382.258197]  dump_stack+0x172/0x1f0
[ 1382.261844]  dump_header+0x10f/0xb6c
[ 1382.265563]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1382.270677]  ? ___ratelimit+0x60/0x595
[ 1382.274570]  ? do_raw_spin_unlock+0x57/0x270
[ 1382.279247]  oom_kill_process.cold+0x10/0x6f5
[ 1382.283753]  ? task_will_free_mem+0x139/0x6e0
[ 1382.288266]  out_of_memory+0x79a/0x1280
[ 1382.292259]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1382.297373]  ? oom_killer_disable+0x280/0x280
[ 1382.301876]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1382.307005]  mem_cgroup_out_of_memory+0x99/0xe0
[ 1382.311687]  ? memcg_memory_event+0x40/0x40
[ 1382.316025]  ? _raw_spin_unlock+0x2d/0x50
[ 1382.320182]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 1382.325292]  try_charge+0xfec/0x1570
[ 1382.329030]  ? find_held_lock+0x35/0x130
[ 1382.333109]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 1382.337971]  ? kasan_check_read+0x11/0x20
[ 1382.342133]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 1382.346985]  mem_cgroup_try_charge+0x24d/0x5e0
[ 1382.351583]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 1382.356525]  shmem_getpage_gfp+0x69b/0x3520
[ 1382.360876]  ? shmem_add_to_page_cache+0x1200/0x1200
[ 1382.365990]  ? lock_downgrade+0x810/0x810
[ 1382.370149]  shmem_fault+0x22d/0x760
[ 1382.373873]  ? __handle_mm_fault+0x349d/0x3f20
[ 1382.378471]  ? shmem_read_mapping_page_gfp+0x1a0/0x1a0
[ 1382.383766]  ? lock_downgrade+0x810/0x810
[ 1382.387932]  __do_fault+0x116/0x4e0
[ 1382.391568]  __handle_mm_fault+0x2cbd/0x3f20
[ 1382.395995]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1382.400847]  ? find_held_lock+0x35/0x130
[ 1382.404912]  ? handle_mm_fault+0x322/0xb30
[ 1382.409170]  ? kasan_check_read+0x11/0x20
[ 1382.413456]  handle_mm_fault+0x43f/0xb30
[ 1382.417531]  __get_user_pages+0x7b6/0x1a40
[ 1382.421795]  ? follow_page_mask+0x19a0/0x19a0
[ 1382.426315]  ? memset+0x32/0x40
[ 1382.429604]  populate_vma_page_range+0x20d/0x2a0
[ 1382.434375]  __mm_populate+0x204/0x380
[ 1382.438272]  ? populate_vma_page_range+0x2a0/0x2a0
[ 1382.443354]  vm_mmap_pgoff+0x213/0x230
[ 1382.447254]  ? vma_is_stack_for_current+0xd0/0xd0
[ 1382.452106]  ? kasan_check_read+0x11/0x20
[ 1382.456267]  ? _copy_to_user+0xc9/0x120
[ 1382.460260]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1382.465823]  ksys_mmap_pgoff+0xf7/0x630
[ 1382.469816]  ? find_mergeable_anon_vma+0x2e0/0x2e0
[ 1382.474752]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1382.479534]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1382.484298]  ? do_syscall_64+0x26/0x610
[ 1382.488283]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1382.493676]  __x64_sys_mmap+0xe9/0x1b0
[ 1382.497573]  do_syscall_64+0x103/0x610
[ 1382.501474]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1382.506665] RIP: 0033:0x457f29
[ 1382.509861] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1382.528776] RSP: 002b:00007f3ab022ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1382.536495] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29
[ 1382.543775] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000
[ 1382.551052] RBP: 000000000073c040 R08: ffffffffffffffff R09: 0000000000000000
[ 1382.558325] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f3ab022f6d4
[ 1382.565598] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 00000000ffffffff
[ 1382.578249] memory: usage 307200kB, limit 307200kB, failcnt 5316
[ 1382.589491] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1382.596317] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1382.609530] Memory cgroup stats for /syz4: cache:15944KB rss:215776KB rss_huge:180224KB shmem:15944KB mapped_file:4620KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4628KB active_anon:227356KB inactive_file:0KB active_file:0KB unevictable:12KB
[ 1382.639104] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=27870,uid=0
[ 1382.662091] Memory cgroup out of memory: Kill process 27870 (syz-executor.4) score 1121 or sacrifice child
[ 1382.675940] Killed process 27870 (syz-executor.4) total-vm:72840kB, anon-rss:180kB, file-rss:35712kB, shmem-rss:4356kB
[ 1382.716208] oom_reaper: reaped process 27870 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:4488kB
07:00:13 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000700), 0x13b, 0x36)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x132, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0)

07:00:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x501300, 0x0)
ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000180))
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000001740)=""/4096, 0x100a}, {&(0x7f0000001580)=""/220, 0xdc}], 0x4}}], 0x2, 0x0, 0x0)

07:00:13 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
getpeername(r0, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={<r1=>0x0, 0xa4, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0x8f0, @local, 0x8000}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x7ff, @local, 0x5}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x7f, 0x20, 0x6}, &(0x7f0000000240)=0x10)

07:00:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000380)="1adc1f123c12a41d88b070")
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0xc}, 'bridge0\x00'}}, 0x1e)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r2, 0x180000000)
sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000162, 0x0)
r3 = dup(r2)
ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040))

07:00:13 executing program 3:
inotify_init1(0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079)
clock_gettime(0x0, &(0x7f0000000480))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

07:00:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
socket$inet_udp(0x2, 0x2, 0x0)
gettid()
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x3, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10002, 0x0)
recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0)

[ 1383.366011] validate_nla: 2 callbacks suppressed
[ 1383.366020] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1383.384827] __nla_parse: 2 callbacks suppressed
[ 1383.384836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1383.389113] IPVS: ftp: loaded support on port[0] = 21
07:00:13 executing program 0:
r0 = userfaultfd(0x800)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xc86327657b25d0b, 0x0)
setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0)
ioctl(r0, 0x6, &(0x7f0000000000)="579d8fcf7d49005a9376df1f12c1a676f59df4c038531617e6f96a6ad0fa7e4a6c1e84")
r2 = socket(0x10, 0x20000000802, 0x0)
userfaultfd(0x800)
write(r2, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x3)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000180)={0x0, 0xfffffffffffffffa, 0x1, 'queue1\x00', 0x33f062ee})

07:00:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000200)="0adc1f123c40a41d88b070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007081dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0x0, 0x0}, 0x0)

07:00:13 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xffaf)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x80, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000500)={0x28, 0x2, 0x0, {0x6, 0x7e, 0xea}}, 0x28)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48)
r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x200000)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f0000000440)=0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @remote, 0xfffffffffffffffc}, {}, r4}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x18b, 0xfa00, {r1, 0xf7b}}, 0x10)

[ 1383.585204] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[ 1383.613224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
07:00:13 executing program 0:
r0 = socket(0x10, 0x20000000802, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400040, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, [0x8, 0x3ff, 0x1, 0x6, 0x9, 0xd60a, 0x8, 0x80000000]})
write(r0, &(0x7f0000000d00)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24)

[ 1383.691877] ==================================================================
[ 1383.700061] BUG: KASAN: use-after-free in __list_del_entry_valid+0xe6/0xf5
[ 1383.707091] Read of size 8 at addr ffff88808e29c4a0 by task syz-executor.2/27956
[ 1383.714626] 
[ 1383.716259] CPU: 1 PID: 27956 Comm: syz-executor.2 Not tainted 5.0.0+ #7
[ 1383.723097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1383.732457] Call Trace:
[ 1383.735062]  dump_stack+0x172/0x1f0
[ 1383.738713]  ? __list_del_entry_valid+0xe6/0xf5
[ 1383.743403]  print_address_description.cold+0x7c/0x20d
[ 1383.748701]  ? __list_del_entry_valid+0xe6/0xf5
[ 1383.753382]  ? __list_del_entry_valid+0xe6/0xf5
[ 1383.758059]  kasan_report.cold+0x1b/0x40
[ 1383.762132]  ? __list_del_entry_valid+0xe6/0xf5
[ 1383.766813]  __asan_report_load8_noabort+0x14/0x20
[ 1383.771749]  __list_del_entry_valid+0xe6/0xf5
[ 1383.776357]  cma_cancel_operation+0x2d7/0xa10
[ 1383.781398]  rdma_destroy_id+0x8d/0xab0
[ 1383.785383]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1383.790496]  ? complete+0x61/0x80
[ 1383.794015]  ucma_close+0x115/0x320
[ 1383.797668]  ? ucma_free_ctx+0xb90/0xb90
[ 1383.801823]  __fput+0x2df/0x8d0
[ 1383.805120]  ____fput+0x16/0x20
[ 1383.808409]  task_work_run+0x14a/0x1c0
[ 1383.812317]  exit_to_usermode_loop+0x273/0x2c0
[ 1383.816910]  do_syscall_64+0x52d/0x610
[ 1383.816933]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1383.816945] RIP: 0033:0x411e31
[ 1383.816958] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 1383.816968] RSP: 002b:0000000000a4fd70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1383.848106] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411e31
[ 1383.848115] RDX: 0000000000000000 RSI: 0000000000741ba8 RDI: 0000000000000006
[ 1383.848124] RBP: 0000000000000000 R08: 0000000000741ba0 R09: 0000000000151cc1
[ 1383.848132] R10: 0000000000a4fc90 R11: 0000000000000293 R12: 0000000000000001
[ 1383.848141] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0
[ 1383.848169] 
[ 1383.848176] Allocated by task 27957:
[ 1383.848194]  save_stack+0x45/0xd0
[ 1383.848207]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 1383.848218]  kasan_kmalloc+0x9/0x10
[ 1383.848229]  kmem_cache_alloc_trace+0x151/0x760
[ 1383.848243]  __rdma_create_id+0x5f/0x4e0
[ 1383.848256]  ucma_create_id+0x1de/0x640
[ 1383.848267]  ucma_write+0x2da/0x3c0
[ 1383.848279]  __vfs_write+0x116/0x8e0
[ 1383.848290]  vfs_write+0x20c/0x580
[ 1383.848303]  ksys_write+0xea/0x1f0
[ 1383.901096]  __x64_sys_write+0x73/0xb0
[ 1383.901112]  do_syscall_64+0x103/0x610
[ 1383.901127]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1383.901131] 
[ 1383.901138] Freed by task 27956:
[ 1383.901151]  save_stack+0x45/0xd0
[ 1383.901170]  __kasan_slab_free+0x102/0x150
[ 1383.901182]  kasan_slab_free+0xe/0x10
[ 1383.901193]  kfree+0xcf/0x230
[ 1383.901205]  rdma_destroy_id+0x723/0xab0
[ 1383.901218]  ucma_close+0x115/0x320
[ 1383.901231]  __fput+0x2df/0x8d0
[ 1383.901240]  ____fput+0x16/0x20
[ 1383.901255]  task_work_run+0x14a/0x1c0
[ 1383.918498]  exit_to_usermode_loop+0x273/0x2c0
[ 1383.918512]  do_syscall_64+0x52d/0x610
[ 1383.918528]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1383.918532] 
[ 1383.918543] The buggy address belongs to the object at ffff88808e29c2c0
[ 1383.918543]  which belongs to the cache kmalloc-2k of size 2048
[ 1383.918555] The buggy address is located 480 bytes inside of
[ 1383.918555]  2048-byte region [ffff88808e29c2c0, ffff88808e29cac0)
[ 1383.918561] The buggy address belongs to the page:
[ 1383.937265] kobject: 'rx-0' (00000000ef0ff2d0): kobject_uevent_env
[ 1383.940860] page:ffffea000238a700 count:1 mapcount:0 mapping:ffff88812c3f0c40 index:0x0 compound_mapcount: 0
[ 1383.940875] flags: 0x1fffc0000010200(slab|head)
[ 1383.940893] raw: 01fffc0000010200 ffffea00013a8988 ffffea00026b1608 ffff88812c3f0c40
[ 1383.940909] raw: 0000000000000000 ffff88808e29c2c0 0000000100000003 0000000000000000
[ 1383.940915] page dumped because: kasan: bad access detected
[ 1383.940918] 
[ 1383.940922] Memory state around the buggy address:
[ 1383.940932]  ffff88808e29c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1383.940941]  ffff88808e29c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1383.940951] >ffff88808e29c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1383.940956]                                ^
[ 1383.940965]  ffff88808e29c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1383.940975]  ffff88808e29c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1383.940980] ==================================================================
[ 1383.940985] Disabling lock debugging due to kernel taint
[ 1384.028745] Kernel panic - not syncing: panic_on_warn set ...
[ 1384.048499] kobject: 'rx-0' (00000000ef0ff2d0): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0'
[ 1384.049136] CPU: 1 PID: 27956 Comm: syz-executor.2 Tainted: G    B             5.0.0+ #7
[ 1384.049149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1384.049154] Call Trace:
[ 1384.049172]  dump_stack+0x172/0x1f0
[ 1384.049190]  panic+0x2cb/0x65c
[ 1384.057338] kobject: 'tx-0' (00000000e95d8eb3): kobject_add_internal: parent: 'queues', set: 'queues'
[ 1384.061714]  ? __warn_printk+0xf3/0xf3
[ 1384.061730]  ? __list_del_entry_valid+0xe6/0xf5
[ 1384.061744]  ? preempt_schedule+0x4b/0x60
[ 1384.061757]  ? ___preempt_schedule+0x16/0x18
[ 1384.061770]  ? trace_hardirqs_on+0x5e/0x230
[ 1384.061784]  ? __list_del_entry_valid+0xe6/0xf5
[ 1384.073207] kobject: 'tx-0' (00000000e95d8eb3): kobject_uevent_env
[ 1384.075361]  end_report+0x47/0x4f
[ 1384.075375]  ? __list_del_entry_valid+0xe6/0xf5
[ 1384.075388]  kasan_report.cold+0xe/0x40
[ 1384.075403]  ? __list_del_entry_valid+0xe6/0xf5
[ 1384.077229] kobject: 'tx-0' (00000000e95d8eb3): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0'
[ 1384.081935]  __asan_report_load8_noabort+0x14/0x20
[ 1384.081948]  __list_del_entry_valid+0xe6/0xf5
[ 1384.081965]  cma_cancel_operation+0x2d7/0xa10
[ 1384.081982]  rdma_destroy_id+0x8d/0xab0
[ 1384.081995]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1384.082009]  ? complete+0x61/0x80
[ 1384.093494] kobject: 'batman_adv' (00000000c5bf90a6): kobject_add_internal: parent: 'gretap0', set: '<NULL>'
[ 1384.096731]  ucma_close+0x115/0x320
[ 1384.096747]  ? ucma_free_ctx+0xb90/0xb90
[ 1384.096762]  __fput+0x2df/0x8d0
[ 1384.096776]  ____fput+0x16/0x20
[ 1384.096793]  task_work_run+0x14a/0x1c0
[ 1384.116392] kobject: 'erspan0' (0000000025f08e4d): kobject_add_internal: parent: 'net', set: 'devices'
[ 1384.123255]  exit_to_usermode_loop+0x273/0x2c0
[ 1384.123271]  do_syscall_64+0x52d/0x610
[ 1384.123288]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1384.123298] RIP: 0033:0x411e31
[ 1384.123310] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 1384.123320] RSP: 002b:0000000000a4fd70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1384.145966] kobject: 'loop1' (00000000b690b98f): kobject_uevent_env
[ 1384.152489] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411e31
[ 1384.152496] RDX: 0000000000000000 RSI: 0000000000741ba8 RDI: 0000000000000006
[ 1384.152503] RBP: 0000000000000000 R08: 0000000000741ba0 R09: 0000000000151cc1
[ 1384.152510] R10: 0000000000a4fc90 R11: 0000000000000293 R12: 0000000000000001
[ 1384.152516] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0
[ 1384.153537] Kernel Offset: disabled
[ 1384.402294] Rebooting in 86400 seconds..