[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   70.108138] audit: type=1800 audit(1541952383.158:25): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   70.127563] audit: type=1800 audit(1541952383.178:26): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   70.147132] audit: type=1800 audit(1541952383.188:27): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts.
2018/11/11 16:06:40 fuzzer started
2018/11/11 16:06:45 dialing manager at 10.128.0.26:36043
2018/11/11 16:06:45 syscalls: 1
2018/11/11 16:06:45 code coverage: enabled
2018/11/11 16:06:45 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/11/11 16:06:45 setuid sandbox: enabled
2018/11/11 16:06:45 namespace sandbox: enabled
2018/11/11 16:06:45 Android sandbox: /sys/fs/selinux/policy does not exist
2018/11/11 16:06:45 fault injection: enabled
2018/11/11 16:06:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/11/11 16:06:45 net packed injection: enabled
2018/11/11 16:06:45 net device setup: enabled
16:09:49 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfa}}, 0x0)

syzkaller login: [  276.953945] IPVS: ftp: loaded support on port[0] = 21
[  279.435370] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.442037] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.450958] device bridge_slave_0 entered promiscuous mode
[  279.597229] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.603885] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.612779] device bridge_slave_1 entered promiscuous mode
[  279.757376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  279.899954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  280.350649] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  280.502138] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  280.790880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  280.798109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
16:09:53 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/228, 0xe4}], 0x2, &(0x7f0000003c80)=""/201, 0xc9}}], 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008bc0)=[{{&(0x7f0000001100)=@nfc, 0x80, &(0x7f0000001340)=[{&(0x7f0000001180)=""/89, 0x59}, {&(0x7f0000001200)=""/231, 0xe7}], 0x2, &(0x7f0000001380)=""/94, 0x5e}}, {{&(0x7f0000001580)=@ax25, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001600)=""/156, 0x9c}, {&(0x7f00000016c0)=""/89, 0x59}], 0x2, &(0x7f0000005e40)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f0000008e00)={0x77359400})
connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x0)

[  281.463124] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  281.471391] team0: Port device team_slave_0 added
[  281.666198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  281.674449] team0: Port device team_slave_1 added
[  281.760117] IPVS: ftp: loaded support on port[0] = 21
[  281.951500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  281.958684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  281.967885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  282.252495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  282.259659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  282.268940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  282.517794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  282.525580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  282.534945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  282.819728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  282.827616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  282.837051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  285.128806] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.135411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.142555] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.149041] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.158115] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  285.472617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.719493] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.726148] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.735054] device bridge_slave_0 entered promiscuous mode
[  285.967791] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.974635] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.983682] device bridge_slave_1 entered promiscuous mode
[  286.179831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  286.393287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  287.174215] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  287.382094] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  287.607594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  287.614899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  287.836949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  287.844122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
16:10:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f7570002075c59fc00b0ec9ba13194260e70506695ddfe5e21cd9eaa179da814c6bd16de5020a5ae44d03d40165379e00be00212154ac5a02fd4eab526c75751420a6c669ec2f46e2757c05a966d74c6f479d4662496ea9b19437fab5e3ec50f951c1ef3a045119211e47768acd12ae99647dbeebab9574f99eae40a501f0082850ae28b1665fe3c1ce230591fadff765e5c15c18a2528498d94fd983152c7a445683144c1465de7442a76541ecaf12f6903347aa7484dad77c0ea7153b64771fa45b2dabbe8c5120381950c5ff974ae9156241ca335142bc2c56", 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x50000000000005)

[  288.723437] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  288.731880] team0: Port device team_slave_0 added
[  288.958856] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  288.967396] team0: Port device team_slave_1 added
[  289.009668] IPVS: ftp: loaded support on port[0] = 21
[  289.157803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  289.165231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  289.174354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  289.421348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  289.428597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  289.437738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  289.642017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  289.649666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  289.658898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  289.971462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  289.979398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  289.988673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  293.216421] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.223001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.229958] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.236603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.245500] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  293.381933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  293.824659] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.831154] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.840089] device bridge_slave_0 entered promiscuous mode
[  294.176986] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.183692] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.192494] device bridge_slave_1 entered promiscuous mode
[  294.472406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  294.698690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  295.629330] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  295.897350] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  296.193655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  296.200728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  296.563341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  296.570462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  296.986244] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.310781] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  297.319328] team0: Port device team_slave_0 added
16:10:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

[  297.616569] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  297.625026] team0: Port device team_slave_1 added
[  297.963569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  297.970637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  297.979480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  298.338594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  298.345874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  298.354951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  298.404944] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  298.679726] IPVS: ftp: loaded support on port[0] = 21
[  298.766479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  298.774250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  298.783636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  299.199650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  299.207620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  299.217070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  299.825075] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  299.831483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  299.839748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  301.271333] 8021q: adding VLAN 0 to HW filter on device team0
[  303.676789] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.683396] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.690427] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.697089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.706762] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  303.901911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  304.686690] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.693375] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.702163] device bridge_slave_0 entered promiscuous mode
[  305.123931] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.130429] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.139089] device bridge_slave_1 entered promiscuous mode
[  305.522530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  305.889100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  306.964803] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  307.325428] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  307.638227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  307.645562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  308.037304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  308.044540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  308.361073] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.092073] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  309.100283] team0: Port device team_slave_0 added
[  309.516488] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  309.524913] team0: Port device team_slave_1 added
[  309.640406] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
16:10:22 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
preadv(r0, &(0x7f0000000100), 0x2a2, 0x0)

[  309.994226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  310.001358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  310.010431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  310.421696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  310.428882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  310.437996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
16:10:23 executing program 0:
io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={0xfaaf}, 0x8})
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640))
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0x3ff}}, 0x28)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000003c0)="303652fdf2d5fa677bb657c8a6393afafab462b873c4b059d57a74fd4c61572b476c387e")
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x0, 0x70, 0x0, 0x81, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x401, 0x0, 0xcb4, 0xc00000000, 0x6, 0x80, 0x0, 0x0, 0x0, 0x101, 0x9, 0x90a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7, 0x9572, 0x0, 0x2, 0x1ff, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000400)}, 0x4, 0x0, 0x9e, 0x6, 0x10001, 0x9})
lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000200)='/dev/dri/card#\x00', 0xf, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000180)={0xa, 0x4}, 0xc)
syz_open_dev$usbmon(&(0x7f00000012c0)='/dev/usbmon#\x00', 0x0, 0x0)

[  310.832090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  310.839799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  310.848782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
16:10:24 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8042, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140)=0x6, 0x4)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x40}}, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)={r1, 0x0, 0x4, 0xab6e, 0x9})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @ipv4}]}]}, 0x20}}, 0x0)

[  311.383621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  311.421491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  311.427991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  311.437107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  311.445772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  311.454348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  311.669235] IPVS: ftp: loaded support on port[0] = 21
16:10:24 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffc}, 0x8)
read(r0, &(0x7f0000e6d000)=""/384, 0x180)
close(r0)
r1 = inotify_init1(0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="3ec43e00000e0f01df36f20f5a410026660f38340dbaf80c66b8c6a0578566efbafc0cb0bfee36d9c5de8200000f0fe2bfb80c008ed8", 0x36}], 0x1, 0x6a, &(0x7f0000000180)=[@flags={0x3, 0x200510}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}], 0x2)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000240)=""/96, 0x0, 0x1800, 0x3}, 0x18)
fcntl$setstatus(r0, 0x4, 0x2c00)
r4 = gettid()
creat(&(0x7f0000000000)='./control\x00', 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300))
fcntl$setown(r0, 0x8, r4)
rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8)
fcntl$setsig(r1, 0xa, 0x21)
inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960)
open(&(0x7f0000000200)='./control\x00', 0x0, 0x0)
socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000001c0))

16:10:25 executing program 0:
r0 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070")
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000580)=""/65)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10400, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000600)=0xe8)
lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000a00)=0xe8)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x20, &(0x7f0000000a40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions='default_permissions'}], [{@euid_gt={'euid>', r9}}, {@seclabel='seclabel'}]}})
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x10, 0x4, 0x101, 0x3, 0x91, 0x2, 0x5, 0x1000, 0x80000001, 0xffffffff00000000, 0xc00000, 0x3})
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, &(0x7f0000000540))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f00000007c0)=""/97, &(0x7f0000000740)=""/127})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000700)={0x1, 0x1, &(0x7f0000000640)=""/83, &(0x7f0000000440)=""/181, &(0x7f0000000380)=""/141, 0x8000000000000000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c80)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000c00)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6, @ANYRESOCT=r5, @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=r0, @ANYRES32=r4], @ANYRESHEX=r8, @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYRESHEX, @ANYPTR64, @ANYRES32=r5, @ANYRESHEX=r8, @ANYRES16=r8]], @ANYRES32=r2, @ANYRESDEC=r8])
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x1)

16:10:26 executing program 0:
syz_emit_ethernet(0x7b, &(0x7f0000000200)={@local, @random="2eab79103805", [], {@mpls_uc={0x8847, {[], @generic="72b2d2617ea73f6cd579ebf4a359b6f5ce530d8cabd8d89047bef954fcfbff783ec5c447722364ce475acf4a8ed8e955935543684913cb0d5f2db32940a48d4911358942bb3c19a62619a0f929835af3531cf68724c57f205bd78eea04399393de78156999100fa841a57fce99"}}}}, &(0x7f0000000100)={0xffbffffffffffffc})

[  313.349617] 8021q: adding VLAN 0 to HW filter on device team0
16:10:26 executing program 0:
r0 = semget$private(0x0, 0x20000000104, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x7fff, 0x1800}, {0x0, 0x7fff}, {0x0, 0x3}], 0x3, &(0x7f00000000c0))

16:10:27 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a900f280ce3fccccae69642207bcbec9c92b7631a0b0dfa6dd4b80ca461d01739cf3f0209c87424c0fe3c8e64a4a97406592d43f4c4b7c04f4d5101d74b66209ebeb852c1e71a42ebcd09b1e91f2aadc811ad33d0fadc57888457b06bc68d4123eafabe2ca1b4702a025447ac77e1a4499e3accfaf91e39129274342c160ed0a6846990e0a489f5b9f281c2762790d02ce690fa822d490657dec7d468bae43a7a46f3184177347d5ffffffffffffff2e568f"], 0xb2)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x1013, r0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x71, r0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000640)={0x7ff, 0x2})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f00000002c0)=0xe8)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getegid()
stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000680)=0xc)
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x4, r1}, {0x2, 0x4, r2}, {0x2, 0x4, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}], {0x4, 0x1}, [{0x8, 0x3, r6}, {0x8, 0x2, r7}, {0x8, 0x6, r8}, {0x8, 0x0, r9}, {0x8, 0x1, r10}], {0x10, 0x7}, {0x20, 0x5}}, 0x74, 0x0)

16:10:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20c0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x4000)
ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000040)=""/93)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4)
socket$inet6(0xa, 0x6, 0xfffff7fffffffffd)
ioctl$TCFLSH(r0, 0x5437, 0x0)

[  316.349375] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.355958] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.363079] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.369602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.378367] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  316.385106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  318.772987] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.779478] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.788692] device bridge_slave_0 entered promiscuous mode
[  319.217985] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.224677] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.233495] device bridge_slave_1 entered promiscuous mode
[  319.578159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  319.889773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  320.092675] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.099240] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  321.446292] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  321.462435] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  321.781485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  321.788798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  322.147898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  322.155130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  322.319337] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
16:10:35 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140)={0xff}, 0x4)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000040)={0x3})
epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40002000})

[  323.058811] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  323.065283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  323.073249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  323.210789] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  323.219704] team0: Port device team_slave_0 added
[  323.548044] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  323.556401] team0: Port device team_slave_1 added
[  323.779667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  323.786874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  323.795821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  324.038222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  324.045444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  324.054472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  324.074072] 8021q: adding VLAN 0 to HW filter on device team0
[  324.259665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  324.267947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  324.277045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  324.488643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  324.496546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  324.505682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  325.490762] ip (7825) used greatest stack depth: 53216 bytes left
[  327.114057] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.120574] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.127694] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.134268] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.143002] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  327.149713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  328.603960] 8021q: adding VLAN 0 to HW filter on device bond0
16:10:42 executing program 2:

[  329.420220] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  330.038227] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  330.044690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  330.052855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  330.614663] 8021q: adding VLAN 0 to HW filter on device team0
[  334.112871] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.125907] netlink: 'syz-executor3': attribute type 6 has an invalid length.
16:10:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

[  334.297256] netlink: 'syz-executor3': attribute type 6 has an invalid length.
[  334.574225] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  334.875333] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  334.881917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  334.889785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  335.177278] 8021q: adding VLAN 0 to HW filter on device team0
16:10:50 executing program 4:

16:10:50 executing program 1:
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300), 0x10)
umount2(&(0x7f0000000100)='./file0\x00', 0x1)
chroot(&(0x7f0000000200)='./file0\x00')
mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x1, 0x0)
capget(&(0x7f00000000c0), &(0x7f0000000140))
prctl$setfpexc(0xc, 0x3007c)
umount2(&(0x7f0000000080)='./file0\x00', 0x35defd168145704)

16:10:50 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x102, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000040)={@multicast1, @broadcast, @rand_addr}, &(0x7f0000000080)=0xc)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0))
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000100)="0555fb5fdb377fe4cad57322671aa64eda0fa9b271be70c7b1efa58d3e6f671d086321dbf927788e5ebc1086fa5d899d2829e69ac9920ccb9ecb496ea7321150a5a13046e96349f27c4b621aa405dac72e4f77fb4fd7e9b7f796fb91b2f69867d367ca974e5f403d490cf371cf37791342788856c4b84f8296a2c466ed80901ae305c953ae9debe84b")
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x6ea7, {{0x2, 0x4e20, @rand_addr=0x4}}}, 0x88)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, [], [{0x7, 0xffffffffffffff1c, 0x3, 0x3, 0x80000001, 0x7}, {0x10, 0x2, 0x1, 0x0, 0x2, 0x81}], [[]]})
ioctl$KIOCSOUND(r0, 0x4b2f, 0x4)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000380), 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x38, 0x4, 0x70bd2d, 0x25dfdbfb, {0xc}, [@typed={0x14, 0x86, @ipv6=@mcast1}, @typed={0xc, 0x37, @u64=0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
fsetxattr(r0, &(0x7f00000004c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000500)='\x00', 0x1, 0x0)
r2 = memfd_create(&(0x7f0000000540)='com.apple.FinderInfo\x00', 0x2)
getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000580)=""/149, &(0x7f0000000640)=0x95)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000680)={0x0, @aes256})
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5)
write$P9_RMKDIR(r2, &(0x7f00000006c0)={0x14, 0x49, 0x2, {0x10, 0x1, 0x8}}, 0x14)
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
inotify_init1(0x800)
ioctl$RTC_PIE_ON(r2, 0x7005)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
readlinkat(r0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=""/237, 0xed)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000880)={0x3, 0x400})
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000008c0)={'veth0_to_bridge\x00', 0xffffffffffffffff})
getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000900)={'filter\x00'}, &(0x7f0000000980)=0x78)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000009c0)=0xdc)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000a00))
syz_open_dev$mice(&(0x7f0000000a40)='/dev/input/mice\x00', 0x0, 0x0)
write(r2, &(0x7f0000000a80)="364e71b2d9454e19e0d336a3c8ab61aa551fd429aa4575b44487083a94c3b06a0230d509852c1a3978dceefc8d1a2e68e02fc8be6df29d1403a1b2", 0x3b)
r4 = getuid()
getgroups(0x1, &(0x7f0000000ac0)=[<r5=>0xffffffffffffffff])
write$P9_RGETATTR(r2, &(0x7f0000000b00)={0xa0, 0x19, 0x2, {0x1420, {0x3, 0x0, 0x7}, 0x184, r4, r5, 0x8, 0xfff, 0x6, 0x28, 0x8, 0x7fff, 0x2, 0x52d3, 0x1, 0x6, 0x3, 0x21, 0x9, 0x9, 0x10001}}, 0xa0)

16:10:50 executing program 2:

16:10:50 executing program 0:

16:10:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

[  337.375109] netlink: 'syz-executor3': attribute type 6 has an invalid length.
16:10:50 executing program 2:

16:10:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:10:50 executing program 4:

16:10:50 executing program 1:

[  337.753750] netlink: 'syz-executor3': attribute type 6 has an invalid length.
16:10:50 executing program 0:

16:10:51 executing program 2:

16:10:51 executing program 3:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:10:51 executing program 4:

[  338.720953] IPVS: ftp: loaded support on port[0] = 21
[  340.028335] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.034869] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.043295] device bridge_slave_0 entered promiscuous mode
[  340.123801] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.130198] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.139584] device bridge_slave_1 entered promiscuous mode
[  340.219229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  340.298707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  340.540190] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  340.623886] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  340.707981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  340.715014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  340.796869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  340.803956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  341.050779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  341.058563] team0: Port device team_slave_0 added
[  341.140533] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  341.148287] team0: Port device team_slave_1 added
[  341.229038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  341.310691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  341.394679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  341.402366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  341.411255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  341.493465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  341.500753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  341.510267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  342.413214] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.419669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.426696] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.433212] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.441053] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  342.672025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  345.705867] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.006937] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  346.308121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  346.314574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  346.322550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  346.625594] 8021q: adding VLAN 0 to HW filter on device team0
16:11:01 executing program 5:
r0 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x9, 0x4)
getresuid(&(0x7f00000006c0), 0xfffffffffffffffd, &(0x7f0000000980))
getpeername(r0, &(0x7f00000001c0)=@xdp, &(0x7f0000000100)=0x80)
link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00')

16:11:01 executing program 1:

16:11:01 executing program 0:

16:11:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000bc0)={0x3, 0x0, 0x2080, {0x11004, 0x1, 0x2}, [], "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", "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"})
r2 = dup(r0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000240)={0x79})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000007c0)={"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"})
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x2)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={<r6=>0x0, @broadcast, @multicast1}, &(0x7f00000002c0)=0xc)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x74, 0x0, [0x9, 0x200000, 0x3f0000000000000, 0x7fffffff]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', r6})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000400), 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

16:11:01 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x48, 0x23}, 0x1c}}, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x40000, 0x0)
r2 = getpgrp(0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @dev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000002c0)={0x2, 0xf9, r2, 0x800, r3, 0x101, 0x3f, 0x100000001})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x14000, 0x0)

[  348.966462] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
16:11:02 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000001, 0x4800)
accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1e, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2)

16:11:02 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000a00)={'team0\x00', <r3=>0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000a40)={@empty, r3}, 0x14)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xd034, 0x4000)
ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000180)=""/230)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000004fbc)=ANY=[], 0x0, 0x10000000, &(0x7f0000000040)})
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4)
fcntl$addseals(r1, 0x409, 0x0)
ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0))

16:11:02 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x1)
r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2)
openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.memory_spread_page\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x81, 0x9}, 'port0\x00', 0x1000000, 0x3, 0x0, 0x5, 0x400000, 0x2, 0x2d, 0x0, 0x1, 0x8000})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{0x0, 0x10001}, {0x10001}})
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2007b, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000200))

16:11:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:02 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f000000f000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000, 0x1})

16:11:02 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400000, 0x0)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000debff0)={0x0, 0x242, &(0x7f000082f000)})
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x7, 0x3, 0x101, [], &(0x7f00000000c0)=0x1})
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000180)={0x55, "1349f2d0199dd1293f0539d76043f15cda5a64100c5503d39aeaeb673fe0daf63ca9ae96d0865e112e3ff1f0bbc965b79134766e328562d6836771a6ada482350a0320612ac05f27af028a0df88aa70f69ca6b5c41"})
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000080)={0x0, {0x3ff, 0x7}})

16:11:02 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
r1 = socket$inet6(0xa, 0x100000002, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000002c0)=0x1e)
sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)

16:11:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:03 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x20000000020000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[{0x3, 0x1}, {0xb, 0x7fff}, {0x7, 0xb8}, {0xe}, {0x7, 0x7ff}, {0x4, 0xfff}, {0xf, 0x3}], 0x7)
r2 = socket$inet6(0xa, 0x3, 0x80)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000100)=""/19, &(0x7f0000000180)=0x13)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200040, 0x0)
ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000003c0)=""/205)
ioctl(r2, 0x8912, &(0x7f0000000280)="153f62344838d7d25d8d60")
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r4, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @dev}, r4}}, 0x48)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000340)={<r5=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000004c0)={<r6=>0x0})
ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000006c0))
r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x7c, 0x0, &(0x7f0000000580)=[@increfs={0x40046304, 0x3}, @free_buffer={0x40086303, r5}, @clear_death={0x400c630f, 0x4, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x38, 0x38, &(0x7f0000000500)=[@fda={0x66646185, 0x0, 0x0, 0x6}, @flat={0x73622a85, 0x1, r6, 0x4}], &(0x7f0000000540)=[0x40, 0x0, 0x38, 0x78, 0x20, 0x78, 0x38]}}, @increfs_done={0x40106308, r7, 0x2}], 0x6b, 0x0, &(0x7f0000000600)="0cf355f0f0722d334630d1b9c5e21bb916f0d8f0768ddfa108ecd3dac700cffde6f83a0d1cd61c7ead8cfb723133c5ab36faa08128e273a959fafb4972c6957c8159b7c76298da7ed842770cb4f4e77286e59d4d60b59988adb5431c95ae2aa25c5e589950eef41eed3a3d"})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x80, 0x81, 0x100000001})

16:11:03 executing program 4:
process_vm_writev(0x0, &(0x7f0000001fc0), 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000780)={0x2c, 0x0, 0x0, 0x27}, 0x10, &(0x7f00000008c0)}, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000a00)=""/129, 0x81}, 0x0)
clock_gettime(0x0, &(0x7f0000000880)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f0000000700)=[{r0, 0x60}, {r1, 0x100}, {r1, 0x1000}, {r1, 0x8000}, {r1, 0x4}, {r0, 0x100}, {r1}, {r1, 0x28}, {r0, 0x201}, {r0, 0x20c2}], 0xa, &(0x7f00000008c0)={r2, r3+10000000}, &(0x7f0000000980), 0x8)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x50000, 0x0)
write$P9_RREADLINK(r4, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f00000002c0)=""/69, 0x408}], 0x4, &(0x7f0000002180), 0x1000018d, 0x0)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

16:11:03 executing program 2:
personality(0x440000)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000240))
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0, 0x0)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x9e3, 0x0, 0x5, 0x3, <r2=>0x0}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e23, 0x4, @empty, 0x3}}, 0x9, 0x2}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0)
getresgid(&(0x7f0000000040)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
ioctl$TUNSETGROUP(r3, 0x400454ce, r4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
ioctl$TUNSETGROUP(r0, 0x400454ce, r5)
r6 = request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='!proc\x00', 0xfffffffffffffff8)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r6)

16:11:03 executing program 1:
timerfd_create(0x0, 0x80000)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="80fd000000006c89674647311f9684f690692219e730629130908f602f158e16f9c727a37071a56e299d9035d7a7aa42c24205a1cdd3164085830a83c389664264fcfcd7a30231fe31e96513dd35146bb630c5dbfa76bceadb", 0x6}], 0x100000000000016a, 0x0)
ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000240))
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000002c0)={0x3, 0x8})

16:11:03 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x14b, 0x4)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0)
write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000300ec84d29e7ee5f3799dc61e6f89130000000000"], 0x10)
sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x3, 0x4)

16:11:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:03 executing program 5:
mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001})
epoll_wait(r3, &(0x7f0000000040)=[{}], 0x0, 0x7fff)
close(r2)
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x80)
dup2(r1, r3)
ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000})

16:11:03 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0xa72, 0x55c2c299, 0x96c})
recvmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000001740)=""/104, 0x68}], 0x4, &(0x7f00000017c0), 0x0, 0x5}, 0xfffffffffffffff9}, {{&(0x7f0000001800)=@l2, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001880)=""/65, 0x41}, {&(0x7f0000001900)=""/212, 0xd4}, {&(0x7f0000001a00)=""/111, 0x6f}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/214, 0xd6}, {&(0x7f0000001cc0)=""/94, 0x5e}, {&(0x7f0000001dc0)=""/69, 0x45}], 0x8, &(0x7f0000001c40)=""/45, 0x2d, 0x7}, 0x5}, {{&(0x7f0000001ec0)=@rc, 0x80, &(0x7f0000001d40), 0x0, &(0x7f0000001f40)=""/174, 0xae, 0x9}, 0x1}, {{&(0x7f0000002000)=@xdp={0x2c, 0x0, <r2=>0x0}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002080)=""/5, 0x5}, {&(0x7f00000020c0)=""/88, 0x58}, {&(0x7f0000002140)=""/208, 0xd0}, {&(0x7f0000002240)=""/164, 0xa4}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x5, &(0x7f0000003380)=""/1, 0x1, 0x7}}, {{&(0x7f00000033c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000003440)=""/78, 0x4e}, {&(0x7f00000034c0)=""/34, 0x22}, {&(0x7f0000003500)=""/52, 0x34}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/151, 0x97}, {&(0x7f0000004600)=""/13, 0xd}, {&(0x7f0000004640)=""/27, 0x1b}, {&(0x7f0000004680)=""/180, 0xb4}], 0x8, &(0x7f00000047c0)=""/44, 0x2c, 0x401}}], 0x5, 0x2000, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000049c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004980)={&(0x7f0000004940)=@getqdisc={0x3c, 0x26, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, r2, {0xf, 0x4}, {0x7, 0xfff3}, {0xf, 0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r3 = accept$alg(r0, 0x0, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x10000000000000a3}, 0xa9)
sendmmsg$alg(r3, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200), 0x1e4, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000001c80)=[{{&(0x7f0000000280)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000200)=""/32, 0x20}], 0x2, &(0x7f0000000740)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000001d80)={0x0, 0x989680})

16:11:03 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="225c2d0240316285717070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0)

[  350.846620] QAT: Invalid ioctl
16:11:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x0, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:04 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200a, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0), &(0x7f0000000040)=0x4)

[  351.090462] QAT: Invalid ioctl
16:11:04 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x8000, 0x4000)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000005000)={0x1, 0x0, 0xfffffffffffffffd, 0x0, [], [], [], 0x0, 0x8, 0x0, 0x8, "35087d58ac0076f8042e0b88db000343"})
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x18d201)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20a081, 0x0)
syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x210800)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000004c0)=""/168)

16:11:04 executing program 4:
unshare(0x8000400)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = fcntl$getown(r0, 0x9)
getpgrp(r1)
connect(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80)

16:11:04 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r2}}, {@subj_role={'subj_role'}}, {@smackfsdef={'smackfsdef', 0x3d, 'fd'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_gt={'uid>', r2}}, {@fowner_lt={'fowner<', r2}}]}})
llistxattr(&(0x7f0000001740)='./file0\x00', &(0x7f0000001640)=""/222, 0xde)
dup2(r0, r1)
write$UHID_CREATE2(r1, &(0x7f0000000580)={0xb, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x9b, 0x20, 0x2, 0x4, 0x5, 0x5, "ccf0343bc2957d4af5b9c64881ce30adfbc4b660a9a52c9c48a3a312b78e257761be55e72a2dbc7222c9e5a1937ba9f878b2b032d85d0e65af3253f8f8b432a58dd29c5d956ac286895d103eaf4f6c011554bbf32c04b60b00502f4c901de3982b0aaadf4f4600c1dbfadd144dc7f27af725754b9528f8a9eb395fb63622b1b9c895be86c8e50ca2d11b269d0fcfd28742036a9d84f6d3e2eb9d00"}, 0x1b3)

16:11:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x0, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:04 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/fuse\x00', 0x2, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030018000000000000030303030303034303030302c757365725f69643dc769fa7e703bdaddafc820eb9b39d77dcbe858bb9bc968d9830fcbde436b0a7185eddfce98ec4cb946bf06515e7e04853dac8ebf3819d37d14ab3ebd5f2366e833c1736edaa30ad795e2ae743052c175d864a7e805d8692efda3375b0896a2", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:udev_rules_t:s0\x00', 0x22, 0x1)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000400)={0x28}, 0x28)

16:11:04 executing program 2:
r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)="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")
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x40010, r0, 0x0)
syncfs(r0)

16:11:04 executing program 4:
unshare(0x8000000008000000)
r0 = socket$unix(0x1, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000000, 0x101000)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/3)
r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbc80884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x8})
mq_timedsend(r2, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180))

16:11:06 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f5c746d6f64653d3030301d303030ecd98975f8ecc3bc30303034303030302c757365726669643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f0000000680), 0x1000)
read$FUSE(r0, &(0x7f0000005000), 0xe83)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x70, 0x5, 0xffffffffffffffff, 0x80000000, 0x3, 0x0, 0x2, 0x200, 0xa, 0x7ff, 0x101, 0x4, 0x4, 0x1, 0x8, 0x2, 0x0, 0x6, 0x8000, 0x80000001, 0x6, 0x6, 0x7, 0x9, 0x100, 0x10001, 0x1, 0x400, 0x9, 0x7, 0x40, 0x0, 0x6, 0x1, 0x6, 0x1, 0x80000000, 0x0, 0x9, 0x0, @perf_config_ext={0x9, 0x1ff}, 0x100, 0xe21, 0x6bb, 0x8, 0x7, 0x896}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x4)
r2 = perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0xfffffffffffffffb, 0xffffffffffffff00, 0x7, 0x2, 0x0, 0x2, 0x0, 0x1, 0x9, 0x401, 0x800, 0x1ff, 0x3f5, 0x101, 0x4, 0x4, 0xccc, 0x3ff, 0x400, 0x4, 0xfffffffffffffff7, 0x0, 0x49, 0x80000001, 0x1, 0x8, 0x7fffffff, 0x7f, 0x8, 0x4, 0x6, 0x581efc2c, 0x27d1, 0x4750, 0x4, 0x8, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x30101, 0x4197, 0xc1, 0x9, 0x3, 0x62, 0xab}, 0x0, 0x10, r1, 0xa)
read$FUSE(r0, &(0x7f0000004000), 0xcd7)
fsetxattr$trusted_overlay_upper(r2, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="00fb3a06015d9c05597fb552eaac570a76c20d9c888762f4dd6a839566b8667f71fde8ba4717dcbfd8560e363a46f7dfbc195f64ff715d1673b669bae7"], 0x3a, 0x2)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340))
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002000), 0x10165)
write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0xffffffffffffffff}, 0x20)
r4 = dup2(r3, r0)
ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000440)={0x1b93, 0xfffffffffffff6d1, 0x303f, 0x1000, 0x4, {0x1, 0x4484800000000}, 0x1})

16:11:06 executing program 0:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x40, 0xc352, 0x0, 0x5, 0x0, 0x3, 0x25, 0x0, <r1=>0x0}, &(0x7f00000000c0)=0x20)
getpeername(r0, &(0x7f0000000800)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000880)=0x80)
recvfrom$packet(r0, &(0x7f00000001c0)=""/218, 0xda, 0x10040, &(0x7f00000008c0)={0x11, 0xf5, r2, 0x1, 0x91, 0x6, @random="04523f9c003f"}, 0x14)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={<r3=>r1, 0x8}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="01000689fe"], &(0x7f0000000300)=0x14)
r4 = socket(0x848000000015, 0x805, 0x0)
getsockopt(r4, 0x114, 0x271b, &(0x7f0000000140)=""/13, &(0x7f0000000000)=0xd)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

16:11:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x0, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:06 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3)
read(r0, &(0x7f0000000240)=""/11, 0x7)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x9)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140))

16:11:06 executing program 1:
io_setup(0x7, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0)
close(r1)
r2 = memfd_create(&(0x7f0000000040)="76626f786e6574316574683073656c662765746830656d305e7ba400", 0x2)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000080)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

16:11:06 executing program 2:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0))
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1)
r1 = gettid()
ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f00000001c0))
tkill(r1, 0x15)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x2801, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x200000000, 0x0)
r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={<r5=>0x0, 0x0, 0x4e, 0x1000}, &(0x7f0000000300)=0x10)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000340)={r5, 0x499}, &(0x7f0000000380)=0x8)
fchdir(r4)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf64(r6, &(0x7f00000006c0)=ANY=[], 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12)
ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000180)={0x0, 0x0, 0x100000000000000a})
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r2)
sendfile(r2, r2, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8)
ioctl$LOOP_SET_FD(r2, 0x4c00, r3)

16:11:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:07 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4002, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x3, 0x400080)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x8cc0, 0x0)
r5 = dup3(r0, r0, 0x80000)
r6 = fcntl$dupfd(r0, 0x0, r0)
r7 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x7fffffff, 0x20000)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x480c0)
io_setup(0x9, &(0x7f0000000040)=<r8=>0x0)
io_submit(r8, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0x200}])

16:11:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xfffffffffdfffffc})
fchmod(r0, 0x20)
r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x9, 0x4440)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x29c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

16:11:07 executing program 5:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x5e6, 0x1}, 'port1\x00', 0x8, 0x800, 0xffffffff8fff40e0, 0xab, 0x1, 0x4, 0x0, 0x0, 0x4, 0x9ec})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34003}, 0xc, &(0x7f0000000100)={&(0x7f0000001e00)={0x1c, 0x28, 0x829, 0x0, 0x0, {0xf}, [@typed={0x8, 0x7, @pid}]}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x410048}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xe0, r2, 0x604, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x100000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x867e}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000001}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

16:11:07 executing program 4:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xb8, &(0x7f0000000580), &(0x7f0000000080)=0x4)
r1 = dup2(r0, r0)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x2)

[  354.500384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'.
16:11:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

[  354.577983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'.
[  354.815426] hrtimer: interrupt took 277932 ns
16:11:08 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0xffffffffffffffff)
clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x800455d1, &(0x7f0000001000))

16:11:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:08 executing program 0:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/38, &(0x7f00000001c0)=0x26)

16:11:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fremovexattr(r0, &(0x7f0000000400)=@known='system.posix_acl_access\x00')
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x54, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0xff, 0x7, &(0x7f0000000480)=0x7})
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00')
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x304, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r4 = openat$cgroup_int(r1, &(0x7f0000000340)='io.weight\x00', 0x2, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x3, 0x401, 0x7, 0x1f})
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x400000, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000380)={'nat\x00'}, &(0x7f00000002c0)=0x78)
write$eventfd(r5, &(0x7f0000000100), 0x8)
r6 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0)=0x7, 0x4)
sendfile(r4, r6, 0x0, 0x4)

16:11:08 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$inet6(0xa, 0x2, 0x7c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x30, &(0x7f0000000080)={@loopback}, 0x20)

16:11:08 executing program 1:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000300)={0xb, 0x77, 0x2, 0x7}, 0xb)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/15, &(0x7f0000000080)=0xf)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xc9, "92b1280f27a2fc1e0d7f60565ae44661c365b3b39172e3148f9aa1f66b44416afb8a52e283b0416235de534c37b6fcbb30460a5aa4e69793de8d8c3d4edf66fe4d9a92174d23046a4c5bae919bb52f020b8cf84de2989c584747080032922e62db8e30d0b2d49b0797614a226f8e2f06fbce39f3c886eaae10594b8750915898a421dfba86662aa0a0a5d46f5a724220b52620227e95e9a931b3110d8fd67753b2b74cddbdf089f519185b3c025a4763dc1c776fbd1d39a6a4a19df6f6fa79edb710b5c8da813c0de7"}, &(0x7f0000000200)=0xd1)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00008ce000/0x1000)=nil, 0x1000}, &(0x7f00000002c0)=0x10)

16:11:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

16:11:08 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x44, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffff, 0xe4b})
shmget$private(0x0, 0x2000, 0x849, &(0x7f0000ffb000/0x2000)=nil)

16:11:08 executing program 1:
socketpair$unix(0x1, 0x8000000000000005, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8))
getpeername(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f00000002c0)=0xe8)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={@mcast1, @remote, @dev={0xfe, 0x80, [], 0x1a}, 0x3ff, 0x1, 0x3, 0x400, 0x80000001, 0x400002, r4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1c, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x90)
close(r5)
r6 = msgget$private(0x0, 0x1)
msgctl$IPC_STAT(r6, 0x2, &(0x7f00000003c0)=""/172)
close(r2)

16:11:08 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil)
accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80000)
remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x4, 0x5, 0x124023)

16:11:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x1e2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xdfc}})
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000000)=""/56)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0x8}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:11:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

[  356.160867] mmap: syz-executor4 (8674) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
16:11:09 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x800000000002)
ioctl(r0, 0x48912, &(0x7f0000000040)="153f62344885d25d766070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000180)=0x4, 0x4)
close(r1)

16:11:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

16:11:09 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0)
unshare(0x600)
ioctl$int_in(r0, 0xc0000800005000, &(0x7f0000000000))
r1 = gettid()
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x800, 0x4, 0xb0, 0x401, 0x0, 0x1, 0x4, 0x4, 0x81, 0x7, 0x67c, 0x1591, 0x1, 0xfff, 0x1, 0x800, 0x6, 0x4, 0xffff, 0x4, 0x173, 0x7, 0x6, 0xffffffffffff19e6, 0x6, 0x3, 0x7f, 0x200, 0x3, 0x7, 0x354, 0x20, 0x3, 0x0, 0x1000, 0x3bb355bc, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0x3}, 0x82, 0x3f, 0x20000, 0x0, 0xf9a4, 0xffffffffffffff36, 0x9}, r1, 0xe, r0, 0xa)

16:11:09 executing program 4:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x928, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000080)})
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xc270, 0x4b0241)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmsg(r3, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x5, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3})
setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0xffff, 0x4)

16:11:09 executing program 1:
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240))
r0 = socket(0x0, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})

16:11:09 executing program 2:
clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000))
r0 = getpid()
socketpair$unix(0x1, 0x4004000000001, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ip_vti0\x00')
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0))
wait4(r0, 0x0, 0x60000002, &(0x7f0000000200))

16:11:09 executing program 5:
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e20, @broadcast}}]}, 0x110)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x0, &(0x7f0000000000), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_0\x00', 'veth0_to_bond\x00', 'eql\x00', 'team_slave_1\x00', @local, [], @remote, [], 0xa0, 0xa0, 0xd0, [@cpu={'cpu\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1d8)

16:11:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x0, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

[  356.865375] capability: warning: `syz-executor1' uses deprecated v2 capabilities in a way that may be insecure
16:11:10 executing program 0:
r0 = socket(0x840000000002, 0x3, 0xff)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040))
sendfile(r0, r1, &(0x7f0000000180)=0x10b28, 0x100000001)

16:11:10 executing program 4:
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x1a000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={<r1=>0x0, 0xffffffffffffffca}, &(0x7f00000000c0)=0x8)
socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r1, &(0x7f0000000180)=0x4)
r2 = socket(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000140), &(0x7f0000000040)=0x4)

16:11:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x0, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:10 executing program 5:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040))
getpgrp(0xffffffffffffffff)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100))
r1 = gettid()
r2 = getpgid(r1)
fcntl$lock(r0, 0x1a365636df8de661, &(0x7f0000000000)={0x3, 0x3, 0xf3, 0x1200000000000000, r2})
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'bond_slave_0\x00', 0x4})
r3 = getpgrp(r2)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioprio_set$pid(0x2, r3, 0x0)

16:11:10 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x0, 0x0, 0x0, "6877a62419ba703f07923a93c6b994a4cb6cfb84f80e155da4641ff13b744ac1"})
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

16:11:10 executing program 0:
socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000080))
syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
memfd_create(&(0x7f0000000040)='\x00', 0x7)
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000080)=ANY=[], 0x0, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f00000014c0))
msgsnd(r1, &(0x7f0000000180)={0x3}, 0x8, 0x0)
msgrcv(r1, &(0x7f0000745000)={0x0, ""/4096}, 0x1008, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000100)={0x1, "e3bdfed5232ffc51851db2237a0a99f3538255455ee01d13d35a4eac97266ca8d4fd2dc466aec5a4a35445ac2a6d7705837529eadf141bef63c1328f"}, 0x44, 0x800)

16:11:10 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$packet(0x11, 0x2, 0x300)
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000300)={<r2=>0xffffffffffffffff})
recvfrom$inet6(r2, &(0x7f0000000040)=""/141, 0x8d, 0x140, &(0x7f0000000100)={0xa, 0x4e24, 0x1800000, @remote, 0x1}, 0x1c)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0)

16:11:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x0, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:11 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x20)
pipe2$9p(&(0x7f0000000040), 0x4800)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/anycast6\x00')
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={<r2=>0x0, 0x6}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x0, 0xace, 0x8204, 0x8, 0x0, 0x8a2, 0x9, 0x10001, r2}, &(0x7f00000002c0)=0x20)
pipe2(&(0x7f0000000300), 0x4000)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
dup(r3)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080))
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

16:11:11 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070")
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTART(r1, 0x127e, 0x70e000)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000000))

16:11:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x4f8b, 0x200100)
ioctl$BLKTRACESTOP(r0, 0x127f, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x101, 0x115000)
pipe2(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000380)={<r4=>0x0, 0x4, 0x9, 0x6, 0x8000, 0x1}, &(0x7f00000003c0)=0x14)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r4, 0x5}, &(0x7f0000000440)=0x8)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYBLOB="04eaa198d6d3442399e3ff92fed3b3b6c411236f8d05fe5d34484f72b3a6ffd86dab8818b4ef11656ae367257e67f4d324a0d86c863510d71f61b940606f33ad4a342f33024fd5ab", @ANYRES64=r3, @ANYRESOCT=r1, @ANYRES16=r5]]], 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x98, 0x1, {"c0a71b5c9b0e4ced58cd762bc88881abe8134a3c8f777a48b43dce65f058206e25cd1ae85523dbff5e62460415fec89f20d389608f5ca46f1b4f20cf983e396816dcc049272822ba906407c9ff4b133b71d10cc3ccec6f393988c585a50b0bde4abc9946c5c989b93ee264251d6bfaad733757a9ae2703924544462ff040ed"}}, {0x0, "20085ecfcee82947b95e304eb57756a26b6a6c0c2aadf1a2cc6d646e3252099e9f033bb4e623f2c38c12ba852af0af07cbc32825eb944a3031492314f6d56618c3de07429e97a4dd622272c5f9d7394750edaf438e6644143ec59ab55621446fdf1a944bae9bda32c84065909c17a48e8df013c9b93ff7c2226ead688d83ff204a789579186b916ad050d3b63b3a5ab76e18262728423ec8"}}, &(0x7f0000000140)=""/93, 0x132, 0x5d}, 0x20)
r6 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$get_keyring_id(0x0, r6, 0x4c07)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3)
uselib(&(0x7f0000000200)='./file0\x00')
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x2, 0xc0, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffe03})

16:11:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0)

16:11:11 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x10000000000024, &(0x7f0000000040)={0x0, 0x3})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000080)=""/176, &(0x7f00000001c0)=0xb0)

16:11:11 executing program 2:
process_vm_writev(0x0, &(0x7f0000001fc0), 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000003400)=[{&(0x7f00000008c0)=""/21, 0x15}, {&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000ac0)=""/55, 0x37}], 0x3}, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000f80), 0x0, &(0x7f00000034c0)=""/129, 0xfffffffffffffe95}, 0x0)
process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x4, &(0x7f0000002180), 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fff, 0x200001)
ioctl$RTC_PIE_ON(r1, 0x7005)

[  358.468615] netlink: 'syz-executor3': attribute type 6 has an invalid length.
16:11:11 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)={0x2b, 0x3, 0x0, {0x2, 0xa, 0x0, '/dev/dsp#\x00'}}, 0x2b)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, <r2=>0x0})
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00')
r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x2)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4)
getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@loopback, @rand_addr, @local}, &(0x7f0000000140)=0xc)
remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x390d, 0x20)
sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x7f51010000000000, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)

16:11:11 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4)
r2 = fcntl$dupfd(r0, 0x406, r1)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000240)={0x3f, 0x8000, 0x0, 0x7, <r3=>0x0}, &(0x7f0000000280)=0x10)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="bbbc10c4df19af54d02c5893dcd17c6744294b209e094a755431de063dccbe67e19646c226032bc38618112c92153af3ba9927b98386a9360cc6773ac61a8aef4cd5d30bbfefd64e71ab6c8871e6763355f7")
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x7ff}}}, 0xfffffffffffffe03)
r4 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000489004bddd9de91be10eebf000ee91e1800c76fbb232a07424ae1e901d2da75af1f0200f538c91af571fb35331ce39c5a0000")
getsockopt$packet_int(r4, 0x107, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)='.\x00'}, 0x30)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x21, 0x801, 0x20000000000001}, 0x2c)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000003c0)={r3, 0x16, "088ddd8545e482dc9a17b5cdef318518ff215acd2f5e"}, &(0x7f0000000400)=0x1e)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f00000000c0), &(0x7f0000000040)=""/2}, 0x18)
ioctl$FS_IOC_FSGETXATTR(r4, 0xc0c0583b, &(0x7f0000000040))

16:11:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0)

16:11:12 executing program 0:
socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000080))
syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
memfd_create(&(0x7f0000000040)='\x00', 0x7)
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000080)=ANY=[], 0x0, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f00000014c0))
msgsnd(r1, &(0x7f0000000180)={0x3}, 0x8, 0x0)
msgrcv(r1, &(0x7f0000745000)={0x0, ""/4096}, 0x1008, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000100)={0x1, "e3bdfed5232ffc51851db2237a0a99f3538255455ee01d13d35a4eac97266ca8d4fd2dc466aec5a4a35445ac2a6d7705837529eadf141bef63c1328f"}, 0x44, 0x800)

[  358.905126] netlink: 'syz-executor3': attribute type 6 has an invalid length.
16:11:12 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000000912, &(0x7f0000000080)="0a2d02403170")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x2802, 0x4000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x400000007000f00}}]}]}, 0x2c}}, 0x0)

16:11:12 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = fcntl$getown(r1, 0x9)
wait4(r2, &(0x7f0000000040), 0x20000000, &(0x7f00000000c0))
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f00000001c0)})
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x10000, 0x0)
r5 = getgid()
ioctl$TUNSETGROUP(r4, 0x400454ce, r5)
ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000380)=""/4096)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x2, 0x4)

16:11:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0)

16:11:12 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x800000000002)
ioctl(r0, 0xffffffff, &(0x7f0000000240)="bedb300000000000000000dad00dec0f107cf888a0f2141eca393fe6e3c3ae8a6746cb3d101bc460f3d743a57895b59783e765fcfd78ca9ce8e0f7")
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}}, 0x78)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x80000001, 0xfff, 0x0, 0x6, 0x8}, 0x14)
rmdir(&(0x7f0000000100)='./file0\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000480)={{0x3, 0x2, 0xe33d, 0x5a6, 'syz0\x00', 0xe8d}, 0x1, [0x2, 0x3, 0x566, 0x10001, 0x0, 0x80000001, 0x2, 0x4, 0x31, 0x9, 0x7fffffff, 0x6, 0xfffffffffffffe00, 0x0, 0x8, 0x3, 0x9, 0x4, 0xff, 0x7fffffff, 0xc8c, 0x5, 0x8, 0x4, 0x4, 0xf9d, 0x3, 0x124e, 0x80000000, 0xda, 0x6, 0x7, 0xff, 0x8, 0x3, 0x10001, 0xfff, 0xe084, 0x7, 0x3, 0x2, 0x10000, 0x5, 0x9, 0x6, 0x8, 0x5, 0x7ff, 0x4, 0xfffffffffffff1f4, 0xec7d, 0x100000000, 0x4, 0x3ff, 0x80000001, 0x539, 0x7ff, 0x7, 0xb88, 0x7f, 0x7ff, 0x3f, 0x1ff, 0x7f, 0x40, 0x3ff, 0x20, 0x0, 0x3, 0x8, 0x6, 0x0, 0x40, 0x0, 0x7, 0x101, 0x5, 0x4, 0xfffffffffffffff9, 0x7, 0x7f, 0xa2f, 0x5, 0x80000001, 0xfff, 0x0, 0x7, 0x8, 0x1, 0x30bb, 0x7fffffff, 0x6, 0x6, 0xaa, 0x400, 0x6, 0x4, 0x7, 0x6, 0x0, 0x29, 0x80000000, 0x0, 0x6, 0x5, 0x5efa1f58, 0x8, 0x2, 0xff, 0x77, 0x5, 0x8, 0x800, 0x4, 0x5, 0x5, 0x800, 0x8, 0x7ff, 0x40, 0x10001, 0x1, 0x5, 0x8, 0x8, 0x7a, 0x9, 0x649], {r1, r2+10000000}})
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e23, 0x6, @remote, 0x5}, {0xa, 0x4e24, 0x7, @mcast1, 0x8000}, 0x5, [0x1c000000000000, 0x1000, 0x9, 0x8, 0x9, 0xfff, 0x10000, 0x4]}, 0x5c)
getsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

[  359.216810] openvswitch: netlink: Key 15 has unexpected len 3 expected 4
16:11:12 executing program 5:
r0 = timerfd_create(0x2, 0x3)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8)
set_thread_area(&(0x7f0000000180)={0xfc, 0x20001000, 0xffffffffffffffff, 0x1, 0x100000001, 0x9, 0x0, 0x5, 0x1b8d, 0x4})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000040)=""/75)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x8, 0x0, 0x0, 0x0, @ib={0x1b, 0x10000, 0x4, {"f7497055a689fd2e60db4c6b95e882e3"}, 0x8, 0x5e71, 0x401}, @in={0x2, 0x4e21, @rand_addr=0x6}}}, 0x118)

[  359.322637] netlink: 'syz-executor3': attribute type 6 has an invalid length.
16:11:12 executing program 4:
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x10000, 0x20000)
ioctl$RTC_UIE_ON(r1, 0x7003)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000001700)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000001440), 0x0, &(0x7f00000014c0)}, 0x0)

16:11:12 executing program 2:
sysfs$2(0x2, 0x5fd, &(0x7f0000000200)=""/4096)
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
r1 = epoll_create(0x100004)
ioctl$TIOCSBRK(r0, 0x40044591)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0))

16:11:12 executing program 3 (fault-call:1 fault-nth:0):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x18, 0x1, 0x0, 0x0, {0x1}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0)

16:11:12 executing program 1:
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000080)=0x40)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0xfffffffffffffffd})
openat$ipvs(0xffffffffffffff9c, &(0x7f00000031c0)="2f70726f632f73151d12954c263cae7076342f70617400000000", 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8983, 0x0)

16:11:12 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x301}, 0x14}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x800, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)=""/60)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  359.908516] FAULT_INJECTION: forcing a failure.
[  359.908516] name failslab, interval 1, probability 0, space 0, times 1
[  359.920168] CPU: 1 PID: 8815 Comm: syz-executor3 Not tainted 4.19.0+ #82
[  359.927077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  359.936512] Call Trace:
[  359.939128] ==================================================================
[  359.946525] BUG: KMSAN: uninit-value in show_trace_log_lvl+0x53f/0x11e0
[  359.953305] CPU: 1 PID: 8815 Comm: syz-executor3 Not tainted 4.19.0+ #82
[  359.960221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  359.969596] Call Trace:
[  359.972230]  dump_stack+0x419/0x480
[  359.975890]  ? show_trace_log_lvl+0x53f/0x11e0
[  359.980554]  kmsan_report+0x19f/0x300
[  359.984402]  __msan_warning+0x76/0xd0
[  359.988271]  ? stack_type_name+0x14/0xe0
[  359.992370]  show_trace_log_lvl+0x53f/0x11e0
[  359.996845]  ? dump_stack+0x32d/0x480
[  360.000691]  show_stack+0x12e/0x170
[  360.004349]  dump_stack+0x32d/0x480
[  360.008026]  should_fail+0x11e5/0x13c0
[  360.011972]  __should_failslab+0x278/0x2a0
[  360.016263]  should_failslab+0x29/0x70
[  360.020179]  kmem_cache_alloc_node+0x164/0xec0
[  360.024810]  ? __alloc_skb+0x32e/0xeb0
[  360.028751]  __alloc_skb+0x32e/0xeb0
[  360.032529]  netlink_sendmsg+0xc9e/0x1440
[  360.036754]  ___sys_sendmsg+0xe68/0x1250
[  360.040868]  ? netlink_getsockopt+0x16b0/0x16b0
[  360.045618]  ? __fdget+0x329/0x440
[  360.049204]  __se_sys_sendmsg+0x305/0x460
[  360.053410]  __x64_sys_sendmsg+0x4a/0x70
[  360.057515]  do_syscall_64+0xcf/0x110
[  360.061347]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  360.066562] RIP: 0033:0x457569
[  360.069783] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  360.088708] RSP: 002b:00007ff038404c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  360.096471] RAX: ffffffffffffffda RBX: 00007ff038404c90 RCX: 0000000000457569
[  360.103761] RDX: 0000000000000000 RSI: 0000000020018000 RDI: 0000000000000003
[  360.111056] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[  360.118346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0384056d4
[  360.125640] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000004
[  360.132968] 
[  360.134611] Local variable description: ----state@show_trace_log_lvl
[  360.141114] Variable was created at:
[  360.144856]  show_trace_log_lvl+0xb3/0x11e0
[  360.149199]  show_stack+0x12e/0x170
[  360.152844] ==================================================================
[  360.160212] Disabling lock debugging due to kernel taint
[  360.165703] Kernel panic - not syncing: panic_on_warn set ...
[  360.165703] 
[  360.173119] CPU: 1 PID: 8815 Comm: syz-executor3 Tainted: G    B             4.19.0+ #82
[  360.181364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  360.190733] Call Trace:
[  360.193354]  dump_stack+0x419/0x480
[  360.197034]  panic+0x57e/0xb28
[  360.200297]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[  360.205784]  kmsan_report+0x300/0x300
[  360.209628]  __msan_warning+0x76/0xd0
[  360.213503]  ? stack_type_name+0x14/0xe0
[  360.217596]  show_trace_log_lvl+0x53f/0x11e0
[  360.222079]  ? dump_stack+0x32d/0x480
[  360.225921]  show_stack+0x12e/0x170
[  360.229607]  dump_stack+0x32d/0x480
[  360.233283]  should_fail+0x11e5/0x13c0
[  360.237223]  __should_failslab+0x278/0x2a0
[  360.241507]  should_failslab+0x29/0x70
[  360.245448]  kmem_cache_alloc_node+0x164/0xec0
[  360.250074]  ? __alloc_skb+0x32e/0xeb0
[  360.254031]  __alloc_skb+0x32e/0xeb0
[  360.257815]  netlink_sendmsg+0xc9e/0x1440
[  360.262032]  ___sys_sendmsg+0xe68/0x1250
[  360.266124]  ? netlink_getsockopt+0x16b0/0x16b0
[  360.270871]  ? __fdget+0x329/0x440
[  360.274469]  __se_sys_sendmsg+0x305/0x460
[  360.278679]  __x64_sys_sendmsg+0x4a/0x70
[  360.282776]  do_syscall_64+0xcf/0x110
[  360.286606]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  360.291820] RIP: 0033:0x457569
[  360.295042] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  360.313971] RSP: 002b:00007ff038404c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  360.321711] RAX: ffffffffffffffda RBX: 00007ff038404c90 RCX: 0000000000457569
[  360.329010] RDX: 0000000000000000 RSI: 0000000020018000 RDI: 0000000000000003
[  360.336313] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[  360.343603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0384056d4
[  360.350897] R13: 00000000004c3b79 R14: 00000000004d5d90 R15: 0000000000000004
[  360.359249] Kernel Offset: disabled
[  360.362892] Rebooting in 86400 seconds..