a50d6a7a0163a66b4e42d99fc57da5cd58ca4631d43ff9556f2ee48534c3e6c5f5527955803a5e3cd75228d797c160838364321799ba49270b86030270a74d6decababf81159acd70f0d5a5ab9d1764c4de866e230fdadab72d1b3fefe85bb40cd11823110f5c1ac35aafc35f31a29f1d928dd03cb5139d7e5a905aed1e547e7bb39788d7d6771f2eb96c4f9e801bd897df4801fd376875f5cdd735d9a6f37810078d931453fbbb525b7de2a263b07c113ac8ce1b001f0bbcfdbe220658f131e2d9e9051a733f470d5bea5b175683f132e50292c90a7ebd37b429e5849515f7301f0acd3646e07af551f506ddca780b5"], 0xfca) r3 = gettid() ptrace$setopts(0x4206, 0x0, 0xa, 0x3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x1000, &(0x7f0000000480)=""/38) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='-{@\x00', 0x4, 0x1) mkdir(&(0x7f0000000340)='./file0\x00', 0x20) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f00000003c0)=@v1={0x1000000, [{0x56be, 0x3}]}, 0xc, 0x2) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000004c0)) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:24:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) 15:24:32 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r1, 0x0) tkill(r0, 0x1000000000016) [ 909.064239][T23095] IPVS: ftp: loaded support on port[0] = 21 15:24:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300)}, 0xb60, 0x3, 0xfffffffc, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) request_key(&(0x7f0000000540)='keyring\x00', 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400)=@isdn, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000000)=""/22, 0x16}], 0x100000000000009d}, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) r2 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xfca) r3 = gettid() ptrace$setopts(0x4206, 0x0, 0xa, 0x3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x1000, &(0x7f0000000480)=""/38) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='-{@\x00', 0x4, 0x1) mkdir(&(0x7f0000000340)='./file0\x00', 0x20) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f00000003c0)=@v1={0x1000000, [{0x56be, 0x3}]}, 0xc, 0x2) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000004c0)) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:24:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x88480000) 15:24:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x6558) 15:24:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) 15:24:34 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x40a40) readv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/9, 0x9}], 0x1) 15:24:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "b1d9d4de16ae8b48d29d4931839a7c2fedcf70ded5a05647fd44e2f8d6ff85e2", "a4d896bc7f8686de1ab4463d633464324c186180332250dabcc8bb52b3a76339", "8e91a5fba37d8f54c09d8e6dcfce9f303cfa8234f767856140ca1e95e6ca6210", "5c003f55a21c55513090cf590bfe38087e9950e2098ceaa3835a05cfa7f1d9d4", "1ad75f3c038b95a8edebd6dd778b0866677e4e7d19ae02bd64206771672fe5b4", "7dd03933773db43e274c04f6"}}) 15:24:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x8100) 15:24:35 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x40a40) readv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/9, 0x9}], 0x1) 15:24:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x88a8ffff) [ 910.767994][T23142] IPVS: ftp: loaded support on port[0] = 21 15:24:35 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00008e"], 0x0}, 0x0) 15:24:35 executing program 5: r0 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000740)=0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x40}}, 0x0) 15:24:35 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x40a40) readv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/9, 0x9}], 0x1) 15:24:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000040000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002d00)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {}, 0x0, 0xfff}}]}}]}, 0x58}}, 0x0) 15:24:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x8847) 15:24:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x9effffff) [ 911.691400][T23189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:24:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x8848) [ 911.752225][T23198] sch_tbf: burst 1 is lower than device veth15 mtu (1514) ! 15:24:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xa6b471c5) 15:24:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote={0xac, 0x14, 0x8}}, @timestamp}}}, 0x100c) [ 911.917370][T23198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:24:36 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x40a40) readv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/9, 0x9}], 0x1) 15:24:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f048}) 15:24:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xc571b4a6) 15:24:36 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000080), 0x10) 15:24:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x9400) 15:24:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff8, 0x0) 15:24:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='cgroup\x00') sendfile(r0, r1, 0x0, 0xffffa88f) 15:24:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newnexthop={0x2c, 0x68, 0x103, 0x0, 0x0, {}, [@NHA_ID={0x8}, @NHA_BLACKHOLE={0x4, 0xb}, @NHA_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x0) 15:24:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xeaffffff) 15:24:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x34000) 15:24:37 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0xffffffffffffff26, 0xffffffffffffffcc, &(0x7f0000000580)="2367d1d3dfa7aa590b4a3632f0534f23df2b2d19f88101c31f28f127a07482e6eac6d583edf9f1a7b35a01a5f3db9727d1252feaf05ea9165cfc970e64f9080096a48395793ba61ad24e7d6035952172cb241d55b2f3d2bff64fdd903a11206a91de7119af497d84dfc778e73f4b431d613e676212b8138f21d7af1556b196ec00a6d4e055399e01b14fc8b114362e6bd13649dc69c6ffb8e8899d07d1862e0d1840c960dbf4aff82f19def3c4c0931a7e232bcc0fcc3bb8e0ed", 0x0, 0x6, 0xf2ffffff, 0x79, 0x6a, &(0x7f00000006c0)="f2a134bd13c7bd41a2a738ad8e7605ed330eb94ba0cefcb46063bd287d832698132e59ef45f8f50845c0ac85604b444ae93e68238b7b9d561b349d19b5ff784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a700000000ee8d3d98c6e410d379a94ed44bf4532f684dd441eb5de81712b3e5f2694b22ae99d18b4043b86a9a308f67a72a86b221eb188004b217de357e68630ac1595e97ebd81abbfd5dee6c2ec4d3112841991eec28af53862b3ba687d03f220261cc1507486b6bfba3e29d3c0d25e8151481faa1664dbb4965087c98e40a7b1e8a5724385a283dcfde5a08c4a5a442a4aac9380fd60e4cf9ea1a6f931c6ba09ddc60e5f124b81b9621fe7752aae817eb759d6ab54ca8c4af5d02ceff33afbc24c79bdf20ef0a8a9f5418fa76d9865cd12cc7bd32849a054fd42a469c61edd8a8f48030d2aa3e6a64de02ab3bcf857ca39409e9b1afbd12e79654d65053c4717fae985394ed3f147ae3367dbfd6732f28b6", &(0x7f0000000880)="712ae01ebf877f139c8f1b0fcd056310bfa3bf533769de7157976d3ff4c82f2e0d1885774c5b7c7c853e000069ab0726e9f41208ffffffff93ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3b992bee6d028754100000000000000bdf45ba700"}, 0x34) 15:24:37 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="fe", 0x34000}], 0x1) 15:24:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='net/l2cap\x00') r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x75, &(0x7f0000000040)=@assoc_value={r2}, 0x8) 15:24:37 executing program 3: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:24:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xefffffff) 15:24:38 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f00000001c0)) 15:24:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x101, 0xffffff7f, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}}, 0x0) 15:24:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x400300) 15:24:38 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a010000030003deb0000000000000000000000008c100100881001000b000100706f6c696365"], 0x10a0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:24:38 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @time=@time}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1d6, @time={0x7a}}) [ 914.354411][T23270] netlink: 4216 bytes leftover after parsing attributes in process `syz-executor.0'. 15:24:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xf0ffffff) [ 914.489614][T23274] netlink: 4216 bytes leftover after parsing attributes in process `syz-executor.0'. 15:24:39 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000000440)='t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x1c, &(0x7f000059aff8)={0x0}, &(0x7f000034f000)=0x2059b000) r4 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r4, &(0x7f0000000000)='{', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) connect$inet(r4, &(0x7f0000001280)={0x2, 0x0, @rand_addr=0x10000}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x7b, &(0x7f0000000080)={r3}, 0x8) 15:24:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 15:24:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x1000000) 15:24:39 executing program 0: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:24:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xfeffffff) 15:24:39 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 15:24:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x2000000) 15:24:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_MTU={0x8, 0x4, 0xbea}]}, 0x4c}}, 0x0) 15:24:39 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x40082, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)='u', 0x1}], 0x1) 15:24:40 executing program 0: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:24:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffa888) [ 915.719421][T23305] batman_adv: Cannot find parent device [ 915.728317][T23305] batman_adv: batadv0: Adding interface: gretap1 [ 915.734725][T23305] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active 15:24:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf15, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 15:24:40 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xf, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, 'ey'}]}}}]}, 0x54}}, 0x0) 15:24:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x3000000) 15:24:40 executing program 0: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:24:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) [ 916.210992][T23318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:24:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffff7f) [ 916.315009][T23325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 916.324912][T23325] netem: invalid attributes len -13 [ 916.330490][T23325] netem: change failed [ 916.394632][T23324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 916.456788][T23332] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 916.466465][T23332] netem: invalid attributes len -13 [ 916.472375][T23332] netem: change failed 15:24:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x4000000) 15:24:41 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002500)='/dev/vcsa\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f00000002c0)=""/147, 0x93}], 0x2, 0x0, 0x0) 15:24:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002240)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 15:24:41 executing program 0: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:24:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETX(r0, 0x5433, 0x0) 15:24:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffff81) [ 917.367729][T23352] sp0: Synchronizing with TNC 15:24:42 executing program 3: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) 15:24:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x5000000) 15:24:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 15:24:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002240)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 15:24:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ad, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) 15:24:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffff9e) 15:24:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x6000000) 15:24:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) syz_usb_connect$uac1(0x0, 0x8e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0xc6, "f8ba"}, @selector_unit={0x8, 0x24, 0x5, 0x0, 0x80, "8cfb8b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15:24:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002240)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) 15:24:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 15:24:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffffea) 15:24:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x8000000) 15:24:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002240)='9', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) close(r0) [ 918.748564][ T8721] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 919.008481][ T8721] usb 4-1: Using ep0 maxpacket: 16 15:24:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000028c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@hoplimit={{0x10, 0x29, 0x3e}}], 0x10}, 0x8080) 15:24:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) [ 919.148958][ T8721] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 919.160222][ T8721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.171431][ T8721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.181445][ T8721] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 15:24:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffffef) [ 919.194598][ T8721] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 919.203885][ T8721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.502117][ T8721] usb 4-1: config 0 descriptor?? 15:24:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x9000000) 15:24:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0xb5315241, 0x280}) 15:24:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) [ 919.775389][T23385] udc-core: couldn't find an available UDC or it's busy [ 919.782724][T23385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 920.108871][ T8721] hid (null): unknown global tag 0xc [ 920.157084][ T8721] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0004/input/input16 [ 920.241112][ T8721] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0004/input/input17 [ 920.331309][ T8721] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID vc.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 920.358951][ T8721] usb 4-1: USB disconnect, device number 15 [ 921.087748][ T8724] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 921.328918][ T8724] usb 4-1: Using ep0 maxpacket: 16 15:24:46 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x90f00b, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = gettid() tkill(r2, 0xd) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) 15:24:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000028c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@hoplimit={{0x10, 0x29, 0x3e}}], 0x10}, 0x8080) 15:24:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xfffffff0) 15:24:46 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 15:24:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xa000000) 15:24:46 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}}, &(0x7f0000000040)=""/219, 0x4a, 0xdb, 0x8}, 0x20) [ 921.549829][ T8724] usb 4-1: unable to read config index 0 descriptor/all [ 921.557060][ T8724] usb 4-1: can't read configurations, error -71 [ 921.640246][T23461] BPF: (anon) type_id=2 bitfield_size=10 bits_offset=0 [ 921.647263][T23461] BPF: [ 921.650334][T23461] BPF:Invalid member bitfield_size [ 921.655507][T23461] BPF: [ 921.655507][T23461] [ 921.669598][T23462] BPF: (anon) type_id=2 bitfield_size=10 bits_offset=0 [ 921.676584][T23462] BPF: [ 921.679662][T23462] BPF:Invalid member bitfield_size [ 921.684883][T23462] BPF: [ 921.684883][T23462] 15:24:46 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800010000000000080015"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 15:24:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xfffffffe) 15:24:46 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:24:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xc000000) 15:24:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000028c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@hoplimit={{0x10, 0x29, 0x3e}}], 0x10}, 0x8080) 15:24:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000680)=0x2, 0x143) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r1}, 0x10) 15:24:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {0x16}, [@ETHTOOL_A_STRSET_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) 15:24:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xf000000) 15:24:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x3e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:24:47 executing program 4: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmmsg$inet(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b7", 0x1}], 0x1, 0x0, 0x0, 0x3}}], 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='S', 0x1}], 0x1}, 0x0) dup3(r0, r1, 0x0) 15:24:47 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:24:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000028c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@hoplimit={{0x10, 0x29, 0x3e}}], 0x10}, 0x8080) 15:24:47 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) 15:24:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) fchmod(0xffffffffffffffff, 0x86) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) write$ppp(r0, &(0x7f00000002c0)="21b724a7fbb90769f9ba83e89d4d340dca3631514c38a21fc11e17d74d2a1ecdcce88a40fb0dd46d378d64045d09aba9aa0729054439657c78a6a947abd0a08a1e61e157c74e9ce310913bd799f122aebce4064da9fba500b7677e8e15c768aa6b24b9a14c96739b19378596a86d69b3ef802b4f95b1", 0x76) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x400c850) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000200)=0x200, &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x80101) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000380)={r6}, &(0x7f00000003c0)=0x8) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000280)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x978, 0x4}, 0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:24:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x10000000) 15:24:47 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff6c2b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x10000004ffe6, 0x0) 15:24:48 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:24:48 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) [ 923.592887][T23516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23516 comm=syz-executor.1 15:24:48 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) [ 923.776779][T23527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:24:48 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 15:24:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x1a5c5087) [ 923.978086][ T3487] usb 6-1: new high-speed USB device number 16 using dummy_hcd 15:24:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000f100000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 924.338770][ T3487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.349044][ T3487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 924.359154][ T3487] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 924.368498][ T3487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:24:49 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) exit(0x0) dup3(r1, r0, 0x0) [ 924.415710][T23516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23516 comm=syz-executor.1 15:24:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x60000000) [ 924.595606][ T3487] usb 6-1: config 0 descriptor?? 15:24:49 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x0, 0x0, 0x0) 15:24:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000140)=0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 924.798282][T23550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 924.858664][ T3487] rtl8192cu: Chip version 0x10 [ 925.102114][T23556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:24:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x65580000) 15:24:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000001b000000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0014"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r7}}, 0x20}}, 0x0) [ 925.519179][ T3487] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 925.526435][ T3487] usb 6-1: This Realtek USB WiFi dongle (0x0bda:0x317f) is untested! [ 925.535082][ T3487] usb 6-1: Please report results to Jes.Sorensen@gmail.com [ 925.746055][T23572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 925.787976][ T3487] usb 6-1: Unsupported USB TX end-points [ 925.793921][ T3487] usb 6-1: Fatal - failed to identify chip [ 925.800509][ T3487] rtl8xxxu: probe of 6-1:0.0 failed with error -524 [ 925.816469][T23578] batman_adv: batadv0: Adding interface: veth25 [ 925.823401][T23578] batman_adv: batadv0: The MTU of interface veth25 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.848833][T23578] batman_adv: batadv0: Not using interface veth25 (retrying later): interface not active [ 925.902841][ T3487] usb 6-1: USB disconnect, device number 16 [ 925.990760][T23585] batman_adv: batadv0: Removing interface: veth25 [ 926.124697][T23578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 926.180570][T23572] batman_adv: batadv0: Adding interface: veth25 [ 926.186951][T23572] batman_adv: batadv0: The MTU of interface veth25 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.212491][T23572] batman_adv: batadv0: Not using interface veth25 (retrying later): interface not active [ 926.238958][T23585] batman_adv: batadv0: Removing interface: veth25 [ 926.498735][ T3487] usb 6-1: new high-speed USB device number 17 using dummy_hcd 15:24:51 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp={0x44, 0x1c, 0x18, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 15:24:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r2, &(0x7f0000000200)={0x20, 0x37, 0x1, {0x2, 0x4, 0x100000001, 0xffffffffffffffff, 0x2, '\xb5@'}}, 0x20) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x100, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x20000020) 15:24:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x142}, 0x40) 15:24:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x81000000) 15:24:51 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [{0x20, 'broute\x00'}, {0x20, '^-\''}, {0x20, '-:}'}], 0xa, "389e8b2297914234f4f41684257a7c54e93e7a8aa7941584b6608a86f91b66cbed1c046165c6d6662615844eae6d493913fb6f1d753c9db1a4e4350f917c53d2b67470633bda22291b9d2be84eab32ab1b259a50fbcf0d68489a29bfbc5861c388a62c80f432abcd7335732a5e7ba9c68cd9bf"}, 0x8e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x47) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, 0x0}, 0x240) 15:24:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000001b000000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0014"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r7}}, 0x20}}, 0x0) [ 926.838024][ T3487] usb 6-1: device descriptor read/all, error -71 [ 926.965856][T23617] netlink: 'syz-executor.1': attribute type 28 has an invalid length. [ 927.021376][T23621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 927.051682][T23622] netlink: 'syz-executor.1': attribute type 28 has an invalid length. [ 927.086131][T23627] batman_adv: batadv0: Adding interface: veth25 [ 927.092782][T23627] batman_adv: batadv0: The MTU of interface veth25 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.118444][T23627] batman_adv: batadv0: Not using interface veth25 (retrying later): interface not active 15:24:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x81ffffff) 15:24:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3, 0x1c) 15:24:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0824fc60040003400a0002000200000037153e370a00018002000000d1bd", 0x2e}], 0x1}, 0x0) [ 927.332691][T23633] batman_adv: batadv0: Removing interface: veth25 15:24:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001081200"/20, @ANYRES32=r2, @ANYBLOB="000000004000000000000400ef0000000000000000007fa7d282f803917a1add"], 0x28}}, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x200000, 0x0) 15:24:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x4}]}, 0x24}}, 0x0) 15:24:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000001b000000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0014"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r7}}, 0x20}}, 0x0) [ 927.792762][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:24:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x87505c1a) [ 927.849982][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 927.943294][T23650] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:24:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x30}}, 0x0) [ 928.054389][T23652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:24:52 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x54}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:24:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f00000002c0)=""/173) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000280)={'veth1_macvtap', 0x32, 0x31}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x2}, &(0x7f0000000240)=0x28) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000140)={0x8, 0x0, 0x8000, 0x7, 0xfff7, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) [ 928.142599][T23655] batman_adv: batadv0: Adding interface: veth25 [ 928.149289][T23655] batman_adv: batadv0: The MTU of interface veth25 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.174955][T23655] batman_adv: batadv0: Not using interface veth25 (retrying later): interface not active [ 928.322577][T23652] batman_adv: batadv0: Removing interface: veth25 [ 928.615244][T23673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:24:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x30}}, 0x0) 15:24:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x88470000) 15:24:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000001b000000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0014"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r7}}, 0x20}}, 0x0) [ 928.801484][T23673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 929.032023][T23688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:24:53 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss, @window={0x3, 0x0, 0x25b}], 0x3) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000050002000000000006000a000000000014"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000100), 0x0) [ 929.092315][T23695] batman_adv: batadv0: Adding interface: veth25 [ 929.098858][T23695] batman_adv: batadv0: The MTU of interface veth25 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.124864][T23695] batman_adv: batadv0: Not using interface veth25 (retrying later): interface not active [ 929.256347][T23696] batman_adv: batadv0: Removing interface: veth25 [ 929.512275][T23707] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 929.521416][T23707] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 15:24:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x2c, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002, r3}, [@IFLA_ADDRESS={0xa, 0x1, @empty=[0x3]}]}, 0x2c}, 0x1, 0x5e}, 0x0) 15:24:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x88480000) 15:24:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x30}}, 0x0) 15:24:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:24:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x90, 0x118, 0x3e020000, 0x90, 0x118, 0x124, 0x1d0, 0x1d0, 0x124, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @dev, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x272) 15:24:54 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) r1 = epoll_create(0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 929.912685][T23714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23714 comm=syz-executor.1 [ 930.077294][T23721] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 930.087187][T23721] xt_TCPMSS: Only works on TCP SYN packets 15:24:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x30}}, 0x0) 15:24:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$fb0(0xffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x108c0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00'/20, @ANYRES32=r3, @ANYBLOB="000080000000000008001c00ef010000"], 0x28}}, 0x0) 15:24:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x88a8ffff) [ 930.278525][T23724] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 930.340652][T23724] 8021q: adding VLAN 0 to HW filter on device bond6 [ 930.435351][T23724] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 15:24:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x90, 0x118, 0x3e020000, 0x90, 0x118, 0x124, 0x1d0, 0x1d0, 0x124, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @dev, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x272) 15:24:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}]}, 0x40}}, 0x0) [ 930.734191][T23765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23765 comm=syz-executor.1 [ 930.874387][T23771] xt_TCPMSS: Only works on TCP SYN packets 15:24:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x94000000) 15:24:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:24:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$PIO_FONTRESET(r0, 0x89f1, 0x20000000) 15:24:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x90, 0x118, 0x3e020000, 0x90, 0x118, 0x124, 0x1d0, 0x1d0, 0x124, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @dev, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x272) 15:24:55 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="a5c7526d64e89d3163a986e0a21567225519bb4d1e895df46bf2f20b7e86d405155496de36563e74b5dbea3fa902522b0bc5cbc207c75ab04200760479cf6a2a444ec5477185817b8c3843430aa2069a1e2a5a33006795b9d4d123c5536255ab65146b3466366ac551ed2e0eb6407bbc9329b83f52fa7f31", 0x78, 0x94d}, {0x0, 0x0, 0x7ff}]) 15:24:55 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="1601000042b1f00896050100e29f0001000109021b000100000004090400000109ae3600070581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="004010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) [ 931.580338][T23790] xt_TCPMSS: Only works on TCP SYN packets 15:24:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x9effffff) 15:24:56 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) 15:24:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000200)=0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:24:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x90, 0x118, 0x3e020000, 0x90, 0x118, 0x124, 0x1d0, 0x1d0, 0x124, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @dev, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x272) 15:24:56 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x54}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000003000b50d6d0900000000000000000000400001003c00010008000100696665002c0002801c0001000000000000000000000000000000000000000000000000000c0006"], 0x54}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 932.037748][ T8693] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 932.073756][T23802] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 932.089000][T23803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=281 sclass=netlink_route_socket pid=23803 comm=syz-executor.0 [ 932.127293][T23804] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 15:24:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xeaffffff) [ 932.248538][T23810] xt_TCPMSS: Only works on TCP SYN packets [ 932.278310][ T8693] usb 4-1: Using ep0 maxpacket: 8 15:24:56 executing program 1: r0 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa00c0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4111, &(0x7f0000000280)={0x50596ee7, [[0x7, 0x9, 0x2, 0x5, 0x401, 0x0, 0x3, 0x9], [0x8c1, 0xfffff800, 0x3, 0x101, 0x2, 0x2, 0x5c8, 0x5f18], [0x4, 0x1, 0x4, 0x44, 0x7ff, 0x1ff, 0x7]], [], [{0xc1, 0xff, 0x0, 0x1, 0x1}, {0x9, 0x67f, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xd506, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x200, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x800, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0xffffff01, 0x1, 0x1}, {0x184, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x81}], [], 0x9}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$RTC_WIE_ON(r2, 0x700f) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="700604000000000008000d008000009f4673a507f33dd666237afae3f55b0e2546cdf3a511542b4c75c026244f38bb4bebfaa2457412b784bb802a7764719faf3c4829152d93f8c6dd48a7415e3a978aa7516e58c89c"], 0x28}}, 0x1) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$nl_route(r4, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@delnexthop={0x50, 0x69, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000600)={'ip6erspan0\x00', 0x20, 0x3}) [ 932.374447][T23812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 932.384311][T23812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 932.398008][ T8693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.408489][ T8693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:24:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8, 0x1, r1}, {0x8}}}}}]}, 0x40}}, 0x0) [ 932.520042][ T8693] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=9f.e2 [ 932.529376][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 932.537709][ T8693] usb 4-1: Product: syz [ 932.561092][T23814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 932.570903][T23814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 932.616330][ T8693] usb 4-1: config 0 descriptor?? 15:24:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache']) [ 932.667186][ T8693] hub 4-1:0.0: bad descriptor, ignoring hub [ 932.673518][ T8693] hub: probe of 4-1:0.0 failed with error -5 15:24:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xefffffff) 15:24:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="dc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000000c0)) [ 933.310884][ T8693] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 933.651168][ T8693] usb 4-1: USB disconnect, device number 18 [ 934.397858][ T8693] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 934.637841][ T8693] usb 4-1: Using ep0 maxpacket: 8 15:24:59 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="1601000042b1f00896050100e29f0001000109021b000100000004090400000109ae3600070581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="004010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) 15:24:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x28082, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000012, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 15:24:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f0000000000)) 15:24:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="dc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000000c0)) 15:24:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xf0ffffff) 15:24:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x4) [ 934.818578][ T8693] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 934.826435][ T8693] usb 4-1: can't read configurations, error -71 15:24:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="dc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000000c0)) 15:24:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xfeffffff) 15:24:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f0000000000)) 15:24:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000140)={0x8, 'wg2\x00', {'rose0\x00'}, 0x3ff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = inotify_init1(0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000240)={0x1, 0x18, [], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0]}) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x202, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r2, 0x0, 0x9, 0x3, 0xd06, 0x40, @ipv4={[], [], @broadcast}, @ipv4={[], [], @loopback}, 0x8000, 0x8000, 0x5, 0x80}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x300, 0x0, 0x40004, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x5, 0x1c}]}, 0x28}}, 0x0) [ 935.557794][ T8693] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 935.797753][ T8693] usb 4-1: Using ep0 maxpacket: 8 15:25:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) r1 = socket(0x10, 0xa, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0xffffffcf, 0x1c, 0x3}]}, 0x28}}, 0x0) 15:25:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="dc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000000c0)) [ 935.919658][ T8693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.930077][ T8693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.079950][ T8693] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=9f.e2 [ 936.089266][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 936.097401][ T8693] usb 4-1: Product: syz [ 936.184064][T23911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23911 comm=syz-executor.1 [ 936.211221][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 936.234438][T23911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23911 comm=syz-executor.1 [ 936.256295][ T8693] usb 4-1: config 0 descriptor?? [ 936.302214][ T8693] hub 4-1:0.0: bad descriptor, ignoring hub [ 936.308450][ T8693] hub: probe of 4-1:0.0 failed with error -5 [ 936.969729][ T8693] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 937.318680][ T3487] usb 4-1: USB disconnect, device number 20 15:25:02 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="1601000042b1f00896050100e29f0001000109021b000100000004090400000109ae3600070581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="004010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) 15:25:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffa888) 15:25:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f0000000000)) 15:25:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000240)=""/63, &(0x7f0000000280)=0x3f) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @random="04a997dccd8c"}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="dc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000000c0)) 15:25:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x28082, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000012, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 15:25:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="dc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000000c0)) 15:25:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffff7f) 15:25:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f0000000000)) 15:25:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x10400) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000240)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x801, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, 0x1008}, [@IFLA_MAP={0x20, 0xe, {0x0, 0x10004, 0x6, 0xc05, 0x40, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) [ 938.620980][ T3487] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 938.868093][ T3487] usb 4-1: Using ep0 maxpacket: 8 15:25:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x43) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_getaddr={0x28, 0x16, 0x800, 0x70bd2d, 0x25dfdbfe, {0x2, 0x40, 0xa0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_BROADCAST={0x8, 0x4, @loopback}]}, 0x28}}, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000100)=0xc19, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x4, 0x2010, r3, 0x82000000) 15:25:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x6, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) [ 938.989197][ T3487] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.999718][ T3487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.162638][ T3487] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=9f.e2 [ 939.171984][ T3487] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 939.180494][ T3487] usb 4-1: Product: syz [ 939.306132][ T3487] usb 4-1: config 0 descriptor?? [ 939.349146][ T3487] hub 4-1:0.0: bad descriptor, ignoring hub [ 939.355404][ T3487] hub: probe of 4-1:0.0 failed with error -5 [ 939.389745][ T28] audit: type=1400 audit(1600183503.968:70): avc: denied { execute } for pid=23980 comm="syz-executor.1" path="pipe:[76460]" dev="pipefs" ino=76460 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 940.010139][ T3487] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 940.361425][ T8721] usb 4-1: USB disconnect, device number 21 15:25:05 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="1601000042b1f00896050100e29f0001000109021b000100000004090400000109ae3600070581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="004010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) 15:25:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="dc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000000c0)) 15:25:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffff81) 15:25:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)) 15:25:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 941.498563][ T3487] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 941.737779][ T3487] usb 4-1: Using ep0 maxpacket: 8 [ 941.861043][ T3487] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.871491][ T3487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.958097][ T3487] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=9f.e2 [ 941.967355][ T3487] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 941.975682][ T3487] usb 4-1: Product: syz [ 942.029727][ T3487] usb 4-1: config 0 descriptor?? [ 942.070182][ T3487] hub 4-1:0.0: bad descriptor, ignoring hub [ 942.076364][ T3487] hub: probe of 4-1:0.0 failed with error -5 [ 942.721439][ T3487] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 943.068589][ T8721] usb 4-1: USB disconnect, device number 22 15:25:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x28082, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000012, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 15:25:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) lseek(r0, 0xd61, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'ip6erspan0\x00'}) 15:25:10 executing program 4: syz_init_net_socket$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 15:25:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffff9e) 15:25:10 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local, r2}, 0xc) 15:25:10 executing program 3: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="15", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="87", 0x200002c1}], 0x1}}], 0x2, 0x4008012) 15:25:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x145863, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000100)='&@}}}!!:\x00', 0x9, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 15:25:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) 15:25:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffffea) [ 947.819532][ T28] audit: type=1800 audit(1600183512.398:71): pid=24105 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16177 res=0 [ 947.963355][ T28] audit: type=1800 audit(1600183512.418:72): pid=24105 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16177 res=0 15:25:12 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="fb02011e4aac5adf304d46f20a8bb96a8fe79ffc3df67dba9e16be4c2fbfffffff0a000000ff07ac0000ffffff", 0x2d, 0x1c0}]) 15:25:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x145863, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000100)='&@}}}!!:\x00', 0x9, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 15:25:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xffffffef) [ 948.658878][T24126] Dev loop3: unable to read RDB block 1 [ 948.664683][T24126] loop3: unable to read partition table [ 948.670858][T24126] loop3: partition table beyond EOD, truncated [ 948.677101][T24126] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 948.869515][ T28] audit: type=1800 audit(1600183513.448:73): pid=24133 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16305 res=0 15:25:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x28082, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000012, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 15:25:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x8008551c, &(0x7f0000000000)) 15:25:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xfffffff0) 15:25:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x145863, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000100)='&@}}}!!:\x00', 0x9, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 15:25:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_RTT={0x8}]}}]}, 0x44}}, 0x0) [ 955.874850][ T28] audit: type=1800 audit(1600183520.448:74): pid=24163 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16373 res=0 15:25:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x145863, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000100)='&@}}}!!:\x00', 0x9, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 15:25:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0xfffffffe) 15:25:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x8008551c, &(0x7f0000000000)) 15:25:20 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname(r0, 0x0, &(0x7f0000000000)) 15:25:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x845) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="ae88bff8240200005a90f57f0770189c414da3b172a24ddd44ab4e7aa73aeff0f64ebbee07962c22772e", 0x2a}, {&(0x7f0000000240)=')', 0x1}], 0x2) [ 956.927983][ T28] audit: type=1800 audit(1600183521.498:75): pid=24184 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16371 res=0 15:25:21 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r2, 0x13b}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004840}, 0x20048081) r3 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48801) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x19404, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000100001080000000056670000c5310000d1e2d06f31af03a39781578a7f73d1082f91abc0b3c28058bd", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004085}, 0x40) r6 = accept4$alg(r3, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000005c0)="ddf20713328d18b225063e782f46ffd557dc9d06f98192a0860cb2dd6ad086c1c3accf87c8959d1a9f44ddb8db2bc6f8391907238ee0795bcf710bd7f0d131e52e4b8e7181f143f0632139db7462964affb03e9fa0415d5ebbfd1a9cf0f5cdd0784163e8600a33119dbd60da06cdbba28f95ac57672e2a1df91cc9a4b26325b75ce914168cf6cc06bc9c8c62c0c27143b3a8d886e961e2df", 0x98}, {&(0x7f0000000680)="8b391a2239e8ea91fa32a4db2a6c012df80031526810a8e518bec0637d1e1e04854ed69a7804f5faa8949ba964ab8e832e3ff7e315494c22b3fd27d49236a96d9fe20ef4dfb2cd5658f881e4d2bd21ecd976920f17a8747c4aebefc88ffac72bb690b8104e417ab847d7ac08", 0x6c}], 0x2) 15:25:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x8008551c, &(0x7f0000000000)) 15:25:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x937d, &(0x7f00000002c0)="0100000000000000180100000500000302000000000000002f") 15:25:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xf, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0105502, &(0x7f00000006c0)={{{0xa}}, 0xe4, 0x1, &(0x7f00000005c0)="e49f9c6bddd3183c565d4f14f931515eebff15728e75ba80b7c3afb4a039aa623de29a34e96587f024d23fe45bec81a79c0588032ba92026bc26f45b578f706410f0f7f46eb436c36936c950f587af65d21bbb41d444a4964978c675187ba4ca7cf7c4b5dd8b6732ca49e108107336639a3b6a6d6b1913f640a6e8e19738daa243201fefd4fc3bbee25ee04fa9647d9fc643cf7704bbac56cfb72a433a7997286349d4c33eecd2811d9d7b946dd43c7deaa7c8fece28980ed2550bb5ceb240bf3fb4e8343d73d9ac505433074169bd842297bdb90282aa4a0ab0fef75c4e5661d46e1317"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000000000622794e84313a686b991b4817ddf8a30317c999dcf5155e67d6f752fc3c83655df9b3ec2346196234f890bc35959564b49a044a87845e397e622736cac2d29efaa42c57106ddd6d136b72ef39ba7af13000000000000", @ANYRESHEX=r0], 0x28}}, 0x10) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0)='l2tp\x00') ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000700)=0x200) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x24}}, 0x80) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000427dd3ff55b603b2892b7e35c1031fd22926e4d400842527dd7331e24b508efa22de9795be21d54aa176560af54ec938e1848492e4898a980300000000f7ff00c61c857e1ebd2926559a60d7e1c240b17e5e5ceaab5f51f0863512c04d5fbf4ee860d5cdab4f2c91", @ANYRES16=r4, @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setrlimit(0x8, &(0x7f0000000000)) r5 = memfd_create(&(0x7f0000000000), 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') pipe(&(0x7f00000001c0)) 15:25:22 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) 15:25:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15:25:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000183fa51c437e8fd550000000000", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) [ 958.110087][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:25:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x8008551c, &(0x7f0000000000)) 15:25:23 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x937d, &(0x7f00000002c0)="0100000000000000180100000500000302000000000000002f") 15:25:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x21, 0x2, 0xa) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_SET_SOCK(r2, 0xab03, 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab08, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind(r0, &(0x7f0000000200)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}, @IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x48}}, 0x0) 15:25:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000700000007000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100005"], 0x30}}, 0x0) 15:25:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = socket(0x2c, 0x803, 0x3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xfffffffffffffffc) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60d600303a00fe8000000000000000000000000000aaff020000000000000000000000000001020090780000000060252841000000000000000000000000000000000000000100000000000000000000000000000001"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) recvmmsg(r4, &(0x7f00000076c0)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/89, 0x59}, {&(0x7f0000001300)=""/117, 0x75}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f00000013c0)=""/85, 0x55}, {&(0x7f0000001440)=""/116, 0x74}], 0x6}, 0xffff}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001500)=""/36, 0x24}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/227, 0xe3}, {&(0x7f0000001740)=""/199, 0xc7}], 0x4, &(0x7f0000001880)=""/145, 0x91}, 0xfd}, {{&(0x7f0000001940)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000019c0)=""/79, 0x4f}, {&(0x7f0000001a40)=""/3, 0x3}, {&(0x7f0000001a80)=""/142, 0x8e}], 0x3, &(0x7f0000001b80)=""/102, 0x66}, 0xfffffffe}, {{&(0x7f0000001c00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004080)=[{&(0x7f0000001c80)=""/253, 0xfd}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/193, 0xc1}, {&(0x7f0000002e80)=""/207, 0xcf}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/255, 0xff}], 0x6, &(0x7f00000040c0)=""/24, 0x18}, 0x6}, {{&(0x7f0000004100)=@generic, 0x80, &(0x7f0000007540)=[{&(0x7f0000004180)=""/47, 0x2f}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/152, 0x98}, {&(0x7f0000005280)=""/220, 0xdc}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/149, 0x95}, {&(0x7f0000006440)=""/148, 0x94}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/59, 0x3b}], 0x9, &(0x7f00000075c0)=""/251, 0xfb}, 0x1d25}], 0x5, 0x0, &(0x7f0000007780)={0x0, 0x3938700}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000007880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007840)={&(0x7f00000077c0)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) [ 959.502028][ T8501] block nbd2: Receive control failed (result -61) [ 959.531803][T24223] block nbd2: NBD_DISCONNECT [ 959.536663][T24223] block nbd2: Send disconnect failed -22 [ 959.705380][T24216] block nbd2: shutting down sockets 15:25:24 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x937d, &(0x7f00000002c0)="0100000000000000180100000500000302000000000000002f") [ 959.824428][ T8501] block nbd2: Receive control failed (result -61) [ 959.934615][T24216] block nbd2: shutting down sockets 15:25:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) [ 960.725070][T24230] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.742426][T24230] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.825188][T24244] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 15:25:25 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@l, @raw={0x0, 0x0, "622d7d7a49e1"}], 0x7) 15:25:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x92, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002020000002505a1a4400001020301090280000101b8389f090400ef03020600810824060000c3098205240002000d240f010200000008003f002007240affd202050e2407e30c00051bffff7f00020008241c0400198000102407050900780e0700ff0004f506000c2c1bffff2000203f6a000909058103000230050209058202ff03060708090503020002ff0a81"], &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x0, 0x7, 0x0, 0xff, 0xf8}, 0x48, &(0x7f0000000300)={0x5, 0xf, 0x48, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x46, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x2, 0x8, 0x1, 0x99}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "6a17e677b284a2a15d03fbcb008677cc"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "3c5fd8efb2d6542c95931193e71d7f1d"}, @ptm_cap={0x3}]}, 0x5, [{0xda, &(0x7f0000000380)=@string={0xda, 0x3, "e70eee840664b78f9d874b206ca8dd32dcafe7e922878f862f5d3853e73af175001b2fac1f0a210c1967b55ef738ab0d55e61c01f64c8e48abc21f94d57a95f6d617061b1d0c4601e3daa6bd9286eb327dc1540745d3076e200ebb960f78b52f9c3e3d2789bcb2e0f13a69ee9bebba0006a39080426948d78e8a0690931b27d971e181c6eb5c374f7938e001ca748334a990f12183bc549e105f8ddd6aed75d5922230f379fa3542453796cd0ae8cb28b8af685f781f5715d3c557132ce72c6284070ceccb38f67c0858ed71a6d64644e269dc557c48a286"}}, {0x68, &(0x7f0000000480)=@string={0x68, 0x3, "58b414f3c2184fcb72771e759a7e209f7c2ea0b429fead0da1a0083b38b6a4e1795c6b12ff7ac331716400a29de6a76f2819d0913c66ddff280b03cee44d06a6f3d3c338741e4e2e1044d58a1b6abbcb1270b8417ee0c45741f25dbdf39cd9dc64879cf99acf"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1404}}, {0xa2, &(0x7f0000000540)=@string={0xa2, 0x3, "1d9f0c18c1315a514dd42811e9258cc9278632f9ee55ef698208812a2a6b0a3d09770e242f459718c32030f9a22d1be14cf16d2779c464518d46448992517b6704375e07e1219d9cb1d0ea953f142696111eb1fe9d87132f7b366e744d8a6e10d87f2f4d3c7de55b90d9507819799575a5f473c4692539c9eaa0216220607ded729df719b3cee74edc046b64e9d749187cd2a4889482f505b2d8b4c9fb493e6b"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf8ff}}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$bt_bnep(0x1f, 0x3, 0x4) socket(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@bridge_dellink={0x28, 0x11, 0x800, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x42020, 0x10880}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7012}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x40010) 15:25:25 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x937d, &(0x7f00000002c0)="0100000000000000180100000500000302000000000000002f") 15:25:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000004a000700ab092500090007000aab80ff00000000000036932100010000000000000000000000ffff00000000008656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000000080008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e2082038f4f8b29d3ef3d900000000863032301748b6e4170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b170083df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429dd3000175e63fb8d38a873cf1b3278d3c96d2", 0xfc) 15:25:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000e40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000fc0)='/dev/nvme-fabrics\x00', 0x84, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000001000), &(0x7f0000001040)=0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x64, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbec3}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x9}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40001) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000e00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000200)={0xbb8, 0x1, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x2}, 0xff, 0x20, 0xbf2, 0x0, 0x27, 'syz1\x00', "960c9154ae3d539806f2c23e9b0169ff3101a5d8b721ed2f592934f631463886", "4187269c073cc2bec99a37b2da57c90ea2bc5faf0d2a4fd242d9e6ff12e0498b", [{0x6f2, 0xfffb, {0x2, 0xfffffffb}}, {0x5, 0x8001, {0x1, 0x6d8}}, {0x1, 0x9, {0x1, 0x7f}}, {0x4, 0x800, {0x1, 0xfffffff8}}, {0x401, 0x7, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x2}}, {0xff59, 0x5, {0x3, 0x200}}, {0x9a, 0x7, {0x2, 0x10000}}, {0xfff, 0x3, {0x0, 0x8000}}, {0x7fff, 0x8, {0x2, 0x1000}}, {0xfe01, 0x1525, {0x1, 0x80}}, {0x7fff, 0xff, {0x0, 0x38480}}, {0x0, 0x6, {0x1, 0x8e05}}, {0x6, 0x8001, {0x3, 0x100}}, {0xcd, 0x3, {0x3, 0x8000}}, {0x5, 0x2, {0x3, 0x10000}}, {0x5, 0x3ff, {0x6, 0x5}}, {0x9, 0x8, {0x3, 0x9}}, {0x3, 0x2, {0x0, 0x7}}, {0x9230, 0x9, {0x1, 0x80000001}}, {0x3d4, 0x2, {0x1}}, {0x5, 0xed37, {0x2, 0x13f}}, {0xfff7, 0x0, {0x0, 0x170}}, {0x5bd3, 0x4, {0x3, 0x3dfd}}, {0x7ff, 0x1000, {0x0, 0x5}}, {0x9, 0x0, {0x1, 0x7c00000}}, {0x4, 0xffff, {0x2, 0x1f}}, {0xfff, 0x401, {0x3, 0x9}}, {0x6, 0x101, {0x0, 0x40}}, {0x0, 0x9, {0x2, 0x7}}, {0xfff, 0x5, {0x1, 0x4}}, {0x7ff, 0x0, {0x1, 0x3}}, {0x1ff, 0x4, {0x0, 0x6}}, {0xf83e, 0x9, {0x3, 0x3}}, {0xa747, 0x7ff, {0x0, 0x10000}}, {0x6, 0x2, {0x0, 0x9}}, {0x2, 0x7fff, {0x3, 0x70f}}, {0xff81, 0x7f, {0x0, 0x2}}, {0x6, 0x5, {0x1, 0x5}}, {0x1, 0x5, {0x2, 0x1ff}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x8, 0x0, 0x7, 0x5, 0x5, 'syz1\x00', "3e2e9bd1833c302156473a3d0e37c75b49554e0dd8ce2c54be50998b598979ae", "e50019c2072ca0895bba3d89ad96359a533089c12e0467b2bb062bca9a40ea33", [{0x3, 0x4, {0x2, 0x5}}, {0xf5d, 0x7, {0x0, 0x7ff}}, {0x8, 0xfff, {0x0, 0x9}}, {0x5, 0x3, {0x3, 0xd4c}}, {0x400, 0x8001, {0x1, 0x1}}, {0x8, 0x9e, {0x1, 0x1}}, {0x6000, 0x8, {0x2, 0x1}}, {0x6, 0x1f, {0x2, 0x1}}, {0x1, 0x1f, {0x1}}, {0x9, 0x8, {0x2, 0x6}}, {0x81, 0x3, {0x0, 0x7}}, {0x2, 0x2, {0x0, 0x3}}, {0x100, 0x8, {0x1, 0x1}}, {0x1000, 0x7, {0x0, 0x5}}, {0x0, 0xf32, {0x2, 0x4}}, {0x8001, 0x7bf9, {0x1}}, {0x4, 0x7, {0x3}}, {0x40, 0x7, {0x2, 0xff47}}, {0x9, 0xe3a, {0x1, 0x800}}, {0x2, 0x0, {0x0, 0x1ff}}, {0x9, 0x200, {0x1, 0x40}}, {0x98, 0x200, {0x3, 0x7}}, {0x9, 0x4, {0x1, 0xfffffffb}}, {0x7f, 0x8000, {0x2, 0xff}}, {0x9, 0x200, {0x3, 0x77b6}}, {0x7ff, 0x9, {0x2, 0x401}}, {0x1, 0x2, {0x2, 0x8}}, {0x4, 0x4, {0x2, 0x9}}, {0xfff9, 0x0, {0x2, 0x1}}, {0x3, 0xff}, {0x6, 0x8000, {0x3, 0xff}}, {0x98, 0x808b, {0x1, 0x2}}, {0x3, 0x7ff, {0x2, 0x10001}}, {0xae6, 0x3ff, {0x0, 0x20}}, {0x9, 0x7, {0x3, 0x101}}, {0x6, 0x40, {0x3, 0x3}}, {0x74e4, 0xfa4, {0x1, 0x7}}, {0xfff, 0x5, {0x3, 0x347}}, {0x3ff, 0x5, {0x5, 0xaa}}, {0x3cd2, 0x81bf, {0x1, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x6, 0x9, 0x114, 0x3, 0x3, 'syz1\x00', "4b01ddf52292cb8defc6a9cb57865ca1292436475aed83a604808a82055c5b2d", "168dd64f70aad5beb580ffd67183be4b4350f5ec122e69ea632286cd7b8b53b6", [{0xff, 0x6, {0x2, 0x7}}, {0x7, 0x4, {0x3, 0x8000}}, {0xfff, 0x9, {0x0, 0x9}}, {0x3f, 0x4, {0x1, 0xffffffff}}, {0x6, 0x7, {0x3, 0x6}}, {0x4, 0x7fff, {0x2, 0x3f}}, {0x2, 0x7ff, {0x2, 0x3f}}, {0x0, 0x3, {0x1, 0x7f}}, {0x7, 0x5, {0x3}}, {0x1, 0x0, {0x1, 0xffffffff}}, {0x8, 0x2, {0x0, 0xea0}}, {0x4, 0x8, {0x1, 0xc4}}, {0x3, 0xff1f, {0x2, 0x9}}, {0xbcbf, 0x6, {0x1, 0xf8000000}}, {0x1, 0xfc00, {0x2, 0x9}}, {0x79, 0x200, {0x0, 0x4}}, {0x7f, 0x2, {0x0, 0xff06}}, {0x9, 0x7, {0x1, 0x5}}, {0x2dfd, 0xfff, {0x3, 0x10001}}, {0x4, 0x64eb, {0x0, 0x3}}, {0x6298, 0x0, {0x0, 0xe1}}, {0xd323, 0x1d7, {0x2, 0x2}}, {0x1, 0x7, {0x2, 0xffffffff}}, {0x0, 0x4, {0x1, 0x9c3}}, {0x40, 0x0, {0x3, 0x10000}}, {0x4, 0x9, {0x2, 0x1000}}, {0x2, 0xfd2, {0x0, 0x342}}, {0x5, 0x6, {0x1, 0xefe5}}, {0x7, 0x8, {0x3, 0x401}}, {0xfffe, 0x35a, {0x0, 0x200}}, {0x1, 0x782, {0x2, 0x23}}, {0x20, 0x1, {0x0, 0x4}}, {0x7, 0x6, {0x1, 0x8}}, {0x1, 0x4, {0x3, 0xfffffffa}}, {0x727, 0x7, {0x3, 0xa07d}}, {0x1, 0xfff9, {0x0, 0x8000}}, {0x4, 0xf5d}, {0x1, 0x1, {0x0, 0x8e96}}, {0xff, 0x4, {0x0, 0x20}}, {0x5, 0x0, {0x3, 0x8000}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x3, 0x0, 0x5800, 0x87db, 0x3, 'syz1\x00', "62b73c31e3d9685d040b5084d2ad11562c355317d045a4fb81b231e4c10925c1", "c34a595f4b3d760b4cc7915731a53e0105b2ae4c5009f0b2956088b62f4d7002", [{0x0, 0x1, {0x0, 0x1}}, {0x3, 0x3f, {0x1, 0x3ff}}, {0x6, 0x7fff, {0x0, 0x1}}, {0x4, 0x8001, {0x2, 0x6}}, {0x0, 0x1, {0x1, 0x5c46fc7f}}, {0x0, 0xfff, {0x3, 0x5}}, {0x1ff, 0x7ff, {0x1, 0x5}}, {0x7f, 0x6, {0x1, 0xffff}}, {0x9, 0x7, {0x2, 0x36}}, {0x2, 0x3f, {0x1, 0x22}}, {0x38, 0x1, {0x0, 0x9}}, {0x65ef, 0x9, {0x0, 0xffff}}, {0x8001, 0x7, {0x0, 0xfe14}}, {0x8, 0xd61c, {0x3, 0x3}}, {0x20, 0x200, {0x0, 0x8000}}, {0x3ff, 0x2, {0x3, 0x1f}}, {0x6, 0xffff, {0x2, 0x1}}, {0x315, 0xa8, {0x2, 0x7a2}}, {0xfc00, 0x4, {0x2, 0x1d}}, {0x2, 0x6, {0x3, 0x2}}, {0x8, 0x0, {0x2, 0x80000001}}, {0x100, 0xfff}, {0x1000, 0xfff9, {0x0, 0x4}}, {0x2, 0xfff9, {0x0, 0xfff}}, {0x9, 0x1, {0x3, 0x800}}, {0x9, 0x7, {0x2}}, {0x2, 0xfff, {0x0, 0x6}}, {0xf599, 0x120, {0x1, 0x7}}, {0x2, 0x9, {0x1, 0x1}}, {0xf8fc, 0x2, {0x3, 0x5}}, {0x4ed9, 0x1, {0x2, 0xa5d}}, {0x1, 0x800, {0x1, 0x4}}, {0x20, 0x401, {0x1, 0x8001}}, {0xd6, 0x7f, {0x2, 0x4}}, {0x5, 0x1, {0x1, 0x8000}}, {0x8, 0x0, {0x3, 0x40}}, {0x6, 0x7, {0x2, 0x8c}}, {0x4, 0x80, {0x3}}, {0x6, 0x100, {0x1, 0xffffffff}}, {0x1, 0xfff, {0x0, 0x200}}]}}}, {{0x254, 0x1, {{0x0, 0xffffffff}, 0x46, 0x44, 0x2477, 0x0, 0xb, 'syz1\x00', "c7eb3595532982d11097c2862a8fa57c68dd12cd79f710e919f5637f02122300", "20316450af8138804daf8b6270a030e3eb26a451c3a28e6ba7235231e1603034", [{0xcb1e, 0x902, {0x3, 0x800}}, {0x7, 0xffff, {0x0, 0x7}}, {0xfffe, 0x1ff, {0x2}}, {0x1, 0x80, {0x0, 0x20}}, {0x9, 0x1ff, {0x2, 0x3}}, {0x9, 0x79a, {0x3, 0x7fff}}, {0x7, 0x81, {0x0, 0x4}}, {0x3f, 0x6, {0x0, 0x401}}, {0x4, 0x9, {0x0, 0x9}}, {0x6, 0x2, {0x0, 0x1000}}, {0x6, 0x2, {0x3, 0x7}}, {0x200, 0x3ca9, {0x0, 0xa3a9}}, {0x80, 0x6e8, {0x2, 0x8}}, {0x45bd, 0x6, {0x2, 0xffff}}, {0xc225, 0x3, {0x2, 0x1ff}}, {0x4, 0x1000, {0x0, 0x3ff}}, {0x97b1, 0x74b2, {0x3, 0x10000}}, {0x3ff, 0xcae, {0x1, 0x6}}, {0x1ff, 0xfff, {0x0, 0xffff}}, {0xf53c, 0x6b, {0x1, 0x9}}, {0xfff7, 0x8000, {0x2, 0xa7bf}}, {0x4, 0x7f, {0x0, 0x7fffffff}}, {0x6, 0x3f, {0x2, 0x8}}, {0x3, 0x2, {0x0, 0x40}}, {0xfff, 0x3, {0x1, 0x87e20000}}, {0x4, 0x0, {0x0, 0x7}}, {0x0, 0xd3b, {0x2, 0x1}}, {0x3ff, 0x8001, {0x2, 0x69b}}, {0xc5, 0x5, {0x1, 0x7}}, {0x5564, 0x8, {0x2, 0x7}}, {0x1198, 0x5, {0x3, 0xff}}, {0x8001, 0x7, {0x3, 0x2}}, {0x8, 0x4, {0x3, 0x4}}, {0x0, 0x4, {0x3, 0x8}}, {0x2, 0x2, {0x0, 0x4}}, {0x4, 0x200, {0x1, 0xff}}, {0x8000, 0x8, {0x0, 0xffffffff}}, {0xffff, 0x3ff, {0x3}}, {0x2e1, 0x0, {0x3, 0x7}}, {0x7, 0x1ff, {0x1, 0x8000}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x800}, 0x400c090) [ 962.068945][T24259] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. [ 962.107688][ T8724] usb 3-1: new full-speed USB device number 2 using dummy_hcd 15:25:26 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) [ 962.255879][T24260] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 962.335969][T24262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=24262 comm=syz-executor.1 15:25:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4090ae82, 0x0) [ 962.387863][ T8724] usb 3-1: device descriptor read/64, error 18 [ 962.468044][T24260] IPVS: persistence engine module ip_vs_pe_ [ 962.468044][T24260] ip not found 15:25:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) [ 962.778633][ T8724] usb 3-1: device descriptor read/64, error 18 [ 962.969021][T24274] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. [ 963.048106][ T8724] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 963.318695][ T8724] usb 3-1: device descriptor read/64, error 18 15:25:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1000000000016) prlimit64(r2, 0x0, 0x0, 0x0) 15:25:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) 15:25:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) 15:25:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) [ 963.584033][T24281] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. [ 963.707663][ T8724] usb 3-1: device descriptor read/64, error 18 [ 963.829980][ T8724] usb usb3-port1: attempt power cycle [ 964.537794][ T8724] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 964.638863][ T8724] usb 3-1: Invalid ep0 maxpacket: 0 [ 964.787721][ T8724] usb 3-1: new full-speed USB device number 5 using dummy_hcd 15:25:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000200)="837fb443991dcc8b8cb3b9b3328dac63cd1ee0d4528af575efa2a105adfb9cc79512e1eb5b733155ce6afc033619e210dd7fefb266b97d11a6fbb309923dd04e50b924dc87e6589965c6eea1d789297010f29a3909631e68cb105ddb4f6523fe2de49d94ab9052d19a12c98ee00506e35b1a9e9c45290b5c02243f74be6d75c53a973c8114ba66b5654f76ab970344ac8f81a1782a28f2b37ca5c7e47f78df9e2b1e9e553d4c65b34bcc4d256295a9183f49a4c33741a76637b341f7676f8bc32d4c1392f179b87250485c3d") getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:29 executing program 4: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:25:29 executing program 3: socket$bt_cmtp(0x1f, 0x3, 0x5) 15:25:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat$vcs(0xffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x3d5100, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000240)=0x1ff, &(0x7f0000000340)=0x4) close(r6) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x19404, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64, @ANYBLOB="000228bd7000fddbdf25060000001400020000001100000000ffff64010102", @ANYRESHEX=r6], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008001ccd74000000"], 0x28}}, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x8, 0xd00a]}, 0x8, 0x80000) 15:25:29 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) [ 964.978060][ T8724] usb 3-1: device descriptor read/8, error -71 [ 965.188825][ T8724] usb 3-1: device descriptor read/8, error -71 [ 965.258448][T24303] SELinux: duplicate or incompatible mount options [ 965.276668][T24303] SELinux: duplicate or incompatible mount options [ 965.308542][ T8724] usb usb3-port1: unable to enumerate USB device 15:25:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) [ 965.596538][T24308] netlink: 'syz-executor.2': attribute type 28 has an invalid length. 15:25:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 965.696303][T24309] netlink: 'syz-executor.2': attribute type 28 has an invalid length. 15:25:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 15:25:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x69, 0x11, 0x70}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:25:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) 15:25:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r3, 0x13b}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000001c40)={0x124c, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8a5f2f42b297a5e137f3492fce19948a93f99ae5e4cc80442f29537115e10f3585"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x104c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "b86c6bbbb937e6eae904e1a59a43116e35a6156693"}}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x194f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x20000}, 0x20008840) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "8127a05eea3f85a84485afff9cb04de7"}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000200)={r5, 0x800004b, 0x8, 0x1}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="11156afa3975d300000008"], 0x28}}, 0x0) 15:25:31 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0xfd, @time, {}, {}, @control={0x5}}], 0x38) 15:25:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_mount_image$ocfs2(&(0x7f0000000140)='ocfs2\x00', &(0x7f0000000200)='./file0\x00', 0xfffffffa, 0x3, &(0x7f0000000400)=[{&(0x7f0000000240)="2db6d78fd492c2076d3a226d241899a826420b20112b8223e2c55dd4111644a5e268d27ea4bd8fa5b6a6d00f20991a0de4167ec29954f4af16b62eb522f49740716ab4ad7c6400b43d52901b028599d4ac0c06d74d475193f66f87bb42738c92751f4e56b2025f972619c28d9f17674b76ba160b399193a173339adc6ac67c952dfce9ea263fa6ee15c9797d63b25c2294", 0x91, 0x7}, {&(0x7f0000000300)="a981c34f21f566831c6778f73839f24e2b4187fab25077d8bb8b19987e1404da05a73b4f5fe00ebf89de181013c3bc8f055b348514b7d13128b2f2283d11129de167ed086c14b87f048d1307e4a44247ba892ab57d72747160b5cde4be3a2e1f0fc858808cca7d1e31a9f6c969d3fbf59ce1e3f01349d4b3511a3d9395791a3c686e117eb8191b0cb9b735caaa028952aed6689aa5ff7c78b90c71cd3b399859e8044478dfca1c0e10264b3237aa8802d92224f7", 0xb4, 0x401}, {&(0x7f00000003c0), 0x0, 0x474a}], 0x10000, &(0x7f0000000440)='&|\xc3\'\xba\x00') getdents(r1, &(0x7f0000000480)=""/203, 0xcb) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = dup(r1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x8) sendmsg$inet_sctp(r3, &(0x7f00000006c0)={&(0x7f00000003c0)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000580)="99443d9cc29dd464adb70af2e1364fdcd2fd9cb197ed624b08dd38c81a70903cde98b393fccc027a781293a272b3b840e2c85103d670ee45ab2e36c8bb14294ed5214c30498e0ea136776e01951e35ea3a443c3acb930efa6242ec37cce586df1c06ca26d4212a3e785f59df8df4d4ec74b8f9869e6e08", 0x77}], 0x1, &(0x7f0000000640)=[@sndrcv={0x2c, 0x84, 0x1, {0x3f, 0x4, 0x20b, 0xcd0b, 0x5, 0x2, 0x7198, 0x1}}, @init={0x14, 0x84, 0x0, {0x1, 0x401, 0x7, 0x800}}, @sndrcv={0x2c, 0x84, 0x1, {0x4, 0x9, 0x8203, 0x8, 0x6, 0xfffffffd, 0x1ff, 0x5, r6}}], 0x6c, 0x4008000}, 0xd0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 967.184923][T24325] (syz-executor.1,24325,0):ocfs2_parse_options:1469 ERROR: Unrecognized mount option "&|Ã'º" or missing value [ 967.196874][T24325] (syz-executor.1,24325,0):ocfs2_fill_super:1190 ERROR: status = -22 15:25:31 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x33) [ 967.299283][T24328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:25:32 executing program 3: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 15:25:32 executing program 5: r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$packet(r0, 0x0, 0x0, 0x0) 15:25:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) 15:25:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', r3}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x723, &(0x7f0000000040)={&(0x7f0000000280)=@setneightbl={0x0, 0x43, 0x4, 0x70bd29, 0x25dfdbfc, {0x7}, [@NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_PROXY_QLEN={0x0, 0xe, 0xcb}, @NDTPA_QUEUE_LEN={0x0, 0x8, 0x3}, @NDTPA_RETRANS_TIME={0x0, 0x5, 0x6}, @NDTPA_PROXY_DELAY={0x0, 0xd, 0x2}]}, @NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x0, 0x9, 0x4}, @NDTPA_MCAST_PROBES={0x0, 0xb, 0x9}, @NDTPA_MCAST_PROBES={0x0, 0xb, 0x1}, @NDTPA_PROXY_DELAY={0x0, 0xd, 0x9}]}, @NDTA_THRESH1={0x0, 0x2, 0x2}, @NDTA_THRESH1={0x0, 0x2, 0x100}, @NDTA_GC_INTERVAL, @NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x0, 0x9, 0x3}]}]}, 0xfffffffffffffe1d}}, 0x54) 15:25:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x1b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) 15:25:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000000000000e50000000000", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000340)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x1e) writev(r5, &(0x7f0000003500)=[{&(0x7f00000003c0)="5dfcdb1d6b4e27a28b1687a34de7a193425dfa0049da6a5a1d5a3b02669b03f1b830dc735fb8c20347f8337f787756cbe5b7750f03f575b0e1591d4007cc12f08812ea5eb9b4e793f03966a659343c777f15a5ab1c5bdca1e530ac61bb3f341998ac0bc4749915f4d4b976a875f18b400b4036a4d6ce5a1ace8d522b2ebaa307fb5dcc92c5cc9d8968144507cb5cf1e2bba7f56badafaa274d239b66ad0b0932ad338a2603d9c7b8db090be1f8ad8282316b1d667b1c1aaf72b4a7816852626890ba4b1e81206fae6a5d35c0d9d01f88c84a13021dea97a14c2142eda1e6bba43b51aba06140d4813f04532d808cebbf6eb30893c19f74", 0xf7}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="559bb40a4b40748a6789d4cf669dea6e995448b0d3fab16aad0b85f03e62dad525c9a6674d7ee4dcc709a3e09033d08378981650a609a965d5c4cb65c8b87a", 0x3f}, {&(0x7f0000002500)="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", 0x1000}], 0x5) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f0000000240)={0x1, 0x9, 0x4, 0x0, 0x4, {r3, r4/1000+60000}, {0xbbc5cf06b9c69dee, 0x2, 0x5, 0xd5, 0x5, 0x6, "32e33137"}, 0xadf2, 0x3, @planes=&(0x7f0000000200)={0x1, 0x1f, @userptr=0x4, 0xff}, 0xfffffffa, 0x0, 0xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x0) 15:25:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8}]}]}, 0x44}}, 0x0) 15:25:33 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000340)="fc0000004800070003008000090007000a0180fe000000000000e293210001c000000000000000000000000000000001fa2c1ec28656aaa79bb94b46fe000000bc00020000036c6c256f1a272fdf0d11512fd606000000000000008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a322038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf8c407e5c8d81702cf255b5d9896a06190215b2ccd243f24fed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fe8df696b4b90194ab8d38a873c", 0xfc) 15:25:33 executing program 3: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 15:25:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550d, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="153522ee07988aef63001baed3be"], 0x28}}, 0x0) 15:25:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 969.907836][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:25:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x4, 0x8, [0x0, 0x0]}) 15:25:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:25:34 executing program 0: mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2fd6"], &(0x7f0000000140)='.', 0x0, 0x2003006480, 0x0) 15:25:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB='\x00'/15], 0x28}}, 0x0) 15:25:34 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffffa600e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 15:25:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffdfc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000c00010800"/20, @ANYRESOCT, @ANYBLOB="000000000000000008001c00ef0000006f0322ef992fa507641020dfb647f908ae14e1c0ea5f8394a2a47ac6ec36665c3f696cb36eada8d3918856afbc4cda65421d32525d7f463aa1a28c6db170e23f19315166230eefd63d26a3fe6b1bbffd862db07b6fdc38a3e132665bd6f22e5c851f895ed654e2d6a4a5af3675a696b9000000020000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = signalfd(r1, &(0x7f0000000000)={[0x6, 0x800]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x40a800, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4008008) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000300)=@bpq0='bpq0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19401, 0xb) r7 = openat$autofs(0xffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x27ac80, 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000002c0)=ANY=[@ANYBLOB="f8ffffff0200007a", @ANYRES32=r3, @ANYBLOB="0000000000100000000000000000000001000000", @ANYRES32=r7, @ANYBLOB="0000000000f0ffffffffffff0000000001000000"]) [ 970.237296][T24388] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 970.362317][T24393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=24393 comm=syz-executor.1 [ 970.366159][T24389] loop3: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p 15:25:35 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) [ 970.366195][T24389] loop3: partition table partially beyond EOD, truncated [ 970.470779][T24389] loop3: p1 start 10 is beyond EOD, truncated [ 970.476929][T24389] loop3: p2 start 25 is beyond EOD, truncated [ 970.483269][T24389] loop3: p3 start 4276224225 is beyond EOD, truncated [ 970.490265][T24389] loop3: p4 size 2 extends beyond EOD, truncated 15:25:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 15:25:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40c0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:35 executing program 4: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2a, &(0x7f0000e530e9)=""/16, &(0x7f0000000100)=0x10) 15:25:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 15:25:35 executing program 2: r0 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="a9", 0x1, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, 0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000000000000000000000200", @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000200)=""/122) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) dup2(r5, r2) [ 971.101932][T24389] loop3: p5 start 10 is beyond EOD, truncated [ 971.108341][T24389] loop3: p6 start 25 is beyond EOD, truncated [ 971.114492][T24389] loop3: p7 start 10 is beyond EOD, truncated [ 971.120866][T24389] loop3: p8 start 25 is beyond EOD, truncated [ 971.127013][T24389] loop3: p9 start 10 is beyond EOD, truncated [ 971.133268][T24389] loop3: p10 start 25 is beyond EOD, truncated [ 971.139629][T24389] loop3: p11 start 10 is beyond EOD, truncated [ 971.145844][T24389] loop3: p12 start 25 is beyond EOD, truncated [ 971.152192][T24389] loop3: p13 start 10 is beyond EOD, truncated [ 971.158478][T24389] loop3: p14 start 25 is beyond EOD, truncated [ 971.164686][T24389] loop3: p15 start 10 is beyond EOD, truncated [ 971.171044][T24389] loop3: p16 start 25 is beyond EOD, truncated [ 971.177278][T24389] loop3: p17 start 10 is beyond EOD, truncated [ 971.183620][T24389] loop3: p18 start 25 is beyond EOD, truncated [ 971.189928][T24389] loop3: p19 start 10 is beyond EOD, truncated [ 971.196140][T24389] loop3: p20 start 25 is beyond EOD, truncated [ 971.202844][T24389] loop3: p21 start 10 is beyond EOD, truncated [ 971.209156][T24389] loop3: p22 start 25 is beyond EOD, truncated [ 971.215372][T24389] loop3: p23 start 10 is beyond EOD, truncated [ 971.221695][T24389] loop3: p24 start 25 is beyond EOD, truncated [ 971.228005][T24389] loop3: p25 start 10 is beyond EOD, truncated [ 971.234221][T24389] loop3: p26 start 25 is beyond EOD, truncated [ 971.240534][T24389] loop3: p27 start 10 is beyond EOD, truncated [ 971.246780][T24389] loop3: p28 start 25 is beyond EOD, truncated [ 971.253108][T24389] loop3: p29 start 10 is beyond EOD, truncated [ 971.259426][T24389] loop3: p30 start 25 is beyond EOD, truncated [ 971.265652][T24389] loop3: p31 start 10 is beyond EOD, truncated [ 971.272158][T24389] loop3: p32 start 25 is beyond EOD, truncated [ 971.278451][T24389] loop3: p33 start 10 is beyond EOD, truncated [ 971.284670][T24389] loop3: p34 start 25 is beyond EOD, truncated [ 971.291045][T24389] loop3: p35 start 10 is beyond EOD, truncated [ 971.297265][T24389] loop3: p36 start 25 is beyond EOD, truncated 15:25:35 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x2000000000000107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) setsockopt(r0, 0x2000000000000107, 0x1, &(0x7f00000000c0)="070000000000060000072780002d354f", 0x10) [ 971.303881][T24389] loop3: p37 start 10 is beyond EOD, truncated [ 971.310228][T24389] loop3: p38 start 25 is beyond EOD, truncated [ 971.316465][T24389] loop3: p39 start 10 is beyond EOD, truncated [ 971.322850][T24389] loop3: p40 start 25 is beyond EOD, truncated [ 971.329208][T24389] loop3: p41 start 10 is beyond EOD, truncated [ 971.335453][T24389] loop3: p42 start 25 is beyond EOD, truncated [ 971.341963][T24389] loop3: p43 start 10 is beyond EOD, truncated [ 971.348258][T24389] loop3: p44 start 25 is beyond EOD, truncated [ 971.354496][T24389] loop3: p45 start 10 is beyond EOD, truncated [ 971.360799][T24389] loop3: p46 start 25 is beyond EOD, truncated [ 971.367028][T24389] loop3: p47 start 10 is beyond EOD, truncated [ 971.373318][T24389] loop3: p48 start 25 is beyond EOD, truncated [ 971.379613][T24389] loop3: p49 start 10 is beyond EOD, truncated [ 971.385825][T24389] loop3: p50 start 25 is beyond EOD, truncated [ 971.392114][T24389] loop3: p51 start 10 is beyond EOD, truncated [ 971.398434][T24389] loop3: p52 start 25 is beyond EOD, truncated [ 971.404659][T24389] loop3: p53 start 10 is beyond EOD, truncated [ 971.410963][T24389] loop3: p54 start 25 is beyond EOD, truncated [ 971.417207][T24389] loop3: p55 start 10 is beyond EOD, truncated [ 971.423526][T24389] loop3: p56 start 25 is beyond EOD, truncated [ 971.429860][T24389] loop3: p57 start 10 is beyond EOD, truncated [ 971.436072][T24389] loop3: p58 start 25 is beyond EOD, truncated [ 971.442351][T24389] loop3: p59 start 10 is beyond EOD, truncated [ 971.448626][T24389] loop3: p60 start 25 is beyond EOD, truncated 15:25:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800000000000000000040000008a5a31193cd8e0b8fe26a2f1ef3e1358d4567353527880ba55c895a727e8b86c8f7c0f1e6c9", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) [ 971.454845][T24389] loop3: p61 start 10 is beyond EOD, truncated [ 971.461147][T24389] loop3: p62 start 25 is beyond EOD, truncated [ 971.467443][T24389] loop3: p63 start 10 is beyond EOD, truncated [ 971.473649][T24389] loop3: p64 start 25 is beyond EOD, truncated [ 971.479931][T24389] loop3: p65 start 10 is beyond EOD, truncated [ 971.486285][T24389] loop3: p66 start 25 is beyond EOD, truncated [ 971.492572][T24389] loop3: p67 start 10 is beyond EOD, truncated [ 971.498861][T24389] loop3: p68 start 25 is beyond EOD, truncated [ 971.505071][T24389] loop3: p69 start 10 is beyond EOD, truncated [ 971.511358][T24389] loop3: p70 start 25 is beyond EOD, truncated [ 971.517640][T24389] loop3: p71 start 10 is beyond EOD, truncated [ 971.523885][T24389] loop3: p72 start 25 is beyond EOD, truncated [ 971.530158][T24389] loop3: p73 start 10 is beyond EOD, truncated [ 971.536392][T24389] loop3: p74 start 25 is beyond EOD, truncated [ 971.542742][T24389] loop3: p75 start 10 is beyond EOD, truncated [ 971.549043][T24389] loop3: p76 start 25 is beyond EOD, truncated [ 971.555257][T24389] loop3: p77 start 10 is beyond EOD, truncated [ 971.561545][T24389] loop3: p78 start 25 is beyond EOD, truncated [ 971.567838][T24389] loop3: p79 start 10 is beyond EOD, truncated [ 971.574065][T24389] loop3: p80 start 25 is beyond EOD, truncated [ 971.580350][T24389] loop3: p81 start 10 is beyond EOD, truncated [ 971.586580][T24389] loop3: p82 start 25 is beyond EOD, truncated [ 971.592879][T24389] loop3: p83 start 10 is beyond EOD, truncated [ 971.599181][T24389] loop3: p84 start 25 is beyond EOD, truncated [ 971.605415][T24389] loop3: p85 start 10 is beyond EOD, truncated [ 971.611689][T24389] loop3: p86 start 25 is beyond EOD, truncated [ 971.617973][T24389] loop3: p87 start 10 is beyond EOD, truncated [ 971.624196][T24389] loop3: p88 start 25 is beyond EOD, truncated [ 971.630495][T24389] loop3: p89 start 10 is beyond EOD, truncated [ 971.636739][T24389] loop3: p90 start 25 is beyond EOD, truncated [ 971.643031][T24389] loop3: p91 start 10 is beyond EOD, truncated [ 971.649318][T24389] loop3: p92 start 25 is beyond EOD, truncated [ 971.655546][T24389] loop3: p93 start 10 is beyond EOD, truncated [ 971.661834][T24389] loop3: p94 start 25 is beyond EOD, truncated [ 971.668128][T24389] loop3: p95 start 10 is beyond EOD, truncated [ 971.674371][T24389] loop3: p96 start 25 is beyond EOD, truncated [ 971.680661][T24389] loop3: p97 start 10 is beyond EOD, truncated [ 971.686884][T24389] loop3: p98 start 25 is beyond EOD, truncated [ 971.693169][T24389] loop3: p99 start 10 is beyond EOD, truncated [ 971.699451][T24389] loop3: p100 start 25 is beyond EOD, truncated [ 971.705763][T24389] loop3: p101 start 10 is beyond EOD, truncated [ 971.712135][T24389] loop3: p102 start 25 is beyond EOD, truncated [ 971.718507][T24389] loop3: p103 start 10 is beyond EOD, truncated [ 971.724813][T24389] loop3: p104 start 25 is beyond EOD, truncated [ 971.731188][T24389] loop3: p105 start 10 is beyond EOD, truncated [ 971.737559][T24389] loop3: p106 start 25 is beyond EOD, truncated [ 971.743880][T24389] loop3: p107 start 10 is beyond EOD, truncated [ 971.750271][T24389] loop3: p108 start 25 is beyond EOD, truncated [ 971.756585][T24389] loop3: p109 start 10 is beyond EOD, truncated [ 971.762979][T24389] loop3: p110 start 25 is beyond EOD, truncated [ 971.769345][T24389] loop3: p111 start 10 is beyond EOD, truncated [ 971.775649][T24389] loop3: p112 start 25 is beyond EOD, truncated [ 971.782035][T24389] loop3: p113 start 10 is beyond EOD, truncated [ 971.788413][T24389] loop3: p114 start 25 is beyond EOD, truncated [ 971.794733][T24389] loop3: p115 start 10 is beyond EOD, truncated [ 971.801133][T24389] loop3: p116 start 25 is beyond EOD, truncated [ 971.807490][T24389] loop3: p117 start 10 is beyond EOD, truncated [ 971.813795][T24389] loop3: p118 start 25 is beyond EOD, truncated [ 971.820172][T24389] loop3: p119 start 10 is beyond EOD, truncated [ 971.826478][T24389] loop3: p120 start 25 is beyond EOD, truncated [ 971.832891][T24389] loop3: p121 start 10 is beyond EOD, truncated [ 971.839280][T24389] loop3: p122 start 25 is beyond EOD, truncated [ 971.845589][T24389] loop3: p123 start 10 is beyond EOD, truncated [ 971.851969][T24389] loop3: p124 start 25 is beyond EOD, truncated [ 971.858350][T24389] loop3: p125 start 10 is beyond EOD, truncated [ 971.864662][T24389] loop3: p126 start 25 is beyond EOD, truncated [ 971.871077][T24389] loop3: p127 start 10 is beyond EOD, truncated [ 971.877479][T24389] loop3: p128 start 25 is beyond EOD, truncated [ 971.883795][T24389] loop3: p129 start 10 is beyond EOD, truncated [ 971.890188][T24389] loop3: p130 start 25 is beyond EOD, truncated [ 971.896516][T24389] loop3: p131 start 10 is beyond EOD, truncated [ 971.902904][T24389] loop3: p132 start 25 is beyond EOD, truncated [ 971.909279][T24389] loop3: p133 start 10 is beyond EOD, truncated [ 971.915577][T24389] loop3: p134 start 25 is beyond EOD, truncated [ 971.921965][T24389] loop3: p135 start 10 is beyond EOD, truncated [ 971.928339][T24389] loop3: p136 start 25 is beyond EOD, truncated [ 971.934649][T24389] loop3: p137 start 10 is beyond EOD, truncated [ 971.941043][T24389] loop3: p138 start 25 is beyond EOD, truncated [ 971.947347][T24389] loop3: p139 start 10 is beyond EOD, truncated [ 971.953757][T24389] loop3: p140 start 25 is beyond EOD, truncated [ 971.960132][T24389] loop3: p141 start 10 is beyond EOD, truncated [ 971.966435][T24389] loop3: p142 start 25 is beyond EOD, truncated [ 971.972829][T24389] loop3: p143 start 10 is beyond EOD, truncated [ 971.979208][T24389] loop3: p144 start 25 is beyond EOD, truncated [ 971.985510][T24389] loop3: p145 start 10 is beyond EOD, truncated [ 971.991913][T24389] loop3: p146 start 25 is beyond EOD, truncated [ 971.998297][T24389] loop3: p147 start 10 is beyond EOD, truncated [ 972.004610][T24389] loop3: p148 start 25 is beyond EOD, truncated [ 972.011060][T24389] loop3: p149 start 10 is beyond EOD, truncated [ 972.017457][T24389] loop3: p150 start 25 is beyond EOD, truncated [ 972.023774][T24389] loop3: p151 start 10 is beyond EOD, truncated [ 972.030156][T24389] loop3: p152 start 25 is beyond EOD, truncated [ 972.036468][T24389] loop3: p153 start 10 is beyond EOD, truncated [ 972.042842][T24389] loop3: p154 start 25 is beyond EOD, truncated [ 972.049211][T24389] loop3: p155 start 10 is beyond EOD, truncated [ 972.055524][T24389] loop3: p156 start 25 is beyond EOD, truncated [ 972.061928][T24389] loop3: p157 start 10 is beyond EOD, truncated [ 972.068316][T24389] loop3: p158 start 25 is beyond EOD, truncated [ 972.074631][T24389] loop3: p159 start 10 is beyond EOD, truncated [ 972.081020][T24389] loop3: p160 start 25 is beyond EOD, truncated [ 972.087326][T24389] loop3: p161 start 10 is beyond EOD, truncated [ 972.093738][T24389] loop3: p162 start 25 is beyond EOD, truncated [ 972.100147][T24389] loop3: p163 start 10 is beyond EOD, truncated [ 972.106462][T24389] loop3: p164 start 25 is beyond EOD, truncated [ 972.112847][T24389] loop3: p165 start 10 is beyond EOD, truncated [ 972.119219][T24389] loop3: p166 start 25 is beyond EOD, truncated [ 972.125524][T24389] loop3: p167 start 10 is beyond EOD, truncated [ 972.131943][T24389] loop3: p168 start 25 is beyond EOD, truncated [ 972.138333][T24389] loop3: p169 start 10 is beyond EOD, truncated [ 972.144635][T24389] loop3: p170 start 25 is beyond EOD, truncated [ 972.151040][T24389] loop3: p171 start 10 is beyond EOD, truncated [ 972.157360][T24389] loop3: p172 start 25 is beyond EOD, truncated [ 972.163760][T24389] loop3: p173 start 10 is beyond EOD, truncated [ 972.170148][T24389] loop3: p174 start 25 is beyond EOD, truncated [ 972.176493][T24389] loop3: p175 start 10 is beyond EOD, truncated [ 972.182872][T24389] loop3: p176 start 25 is beyond EOD, truncated [ 972.189259][T24389] loop3: p177 start 10 is beyond EOD, truncated [ 972.195560][T24389] loop3: p178 start 25 is beyond EOD, truncated [ 972.201936][T24389] loop3: p179 start 10 is beyond EOD, truncated [ 972.208306][T24389] loop3: p180 start 25 is beyond EOD, truncated [ 972.214606][T24389] loop3: p181 start 10 is beyond EOD, truncated [ 972.220985][T24389] loop3: p182 start 25 is beyond EOD, truncated [ 972.227287][T24389] loop3: p183 start 10 is beyond EOD, truncated [ 972.233663][T24389] loop3: p184 start 25 is beyond EOD, truncated [ 972.240034][T24389] loop3: p185 start 10 is beyond EOD, truncated [ 972.246348][T24389] loop3: p186 start 25 is beyond EOD, truncated [ 972.252717][T24389] loop3: p187 start 10 is beyond EOD, truncated [ 972.259118][T24389] loop3: p188 start 25 is beyond EOD, truncated [ 972.265414][T24389] loop3: p189 start 10 is beyond EOD, truncated [ 972.271791][T24389] loop3: p190 start 25 is beyond EOD, truncated [ 972.278157][T24389] loop3: p191 start 10 is beyond EOD, truncated [ 972.284461][T24389] loop3: p192 start 25 is beyond EOD, truncated [ 972.290845][T24389] loop3: p193 start 10 is beyond EOD, truncated [ 972.297154][T24389] loop3: p194 start 25 is beyond EOD, truncated [ 972.303609][T24389] loop3: p195 start 10 is beyond EOD, truncated [ 972.310006][T24389] loop3: p196 start 25 is beyond EOD, truncated [ 972.316316][T24389] loop3: p197 start 10 is beyond EOD, truncated [ 972.322704][T24389] loop3: p198 start 25 is beyond EOD, truncated [ 972.329080][T24389] loop3: p199 start 10 is beyond EOD, truncated [ 972.335379][T24389] loop3: p200 start 25 is beyond EOD, truncated [ 972.341783][T24389] loop3: p201 start 10 is beyond EOD, truncated [ 972.348145][T24389] loop3: p202 start 25 is beyond EOD, truncated [ 972.354460][T24389] loop3: p203 start 10 is beyond EOD, truncated [ 972.360837][T24389] loop3: p204 start 25 is beyond EOD, truncated [ 972.367140][T24389] loop3: p205 start 10 is beyond EOD, truncated [ 972.373529][T24389] loop3: p206 start 25 is beyond EOD, truncated [ 972.379896][T24389] loop3: p207 start 10 is beyond EOD, truncated [ 972.386206][T24389] loop3: p208 start 25 is beyond EOD, truncated [ 972.392583][T24389] loop3: p209 start 10 is beyond EOD, truncated [ 972.398968][T24389] loop3: p210 start 25 is beyond EOD, truncated [ 972.405282][T24389] loop3: p211 start 10 is beyond EOD, truncated [ 972.411655][T24389] loop3: p212 start 25 is beyond EOD, truncated [ 972.418033][T24389] loop3: p213 start 10 is beyond EOD, truncated [ 972.424335][T24389] loop3: p214 start 25 is beyond EOD, truncated [ 972.430714][T24389] loop3: p215 start 10 is beyond EOD, truncated [ 972.437018][T24389] loop3: p216 start 25 is beyond EOD, truncated [ 972.443408][T24389] loop3: p217 start 10 is beyond EOD, truncated [ 972.449797][T24389] loop3: p218 start 25 is beyond EOD, truncated [ 972.456127][T24389] loop3: p219 start 10 is beyond EOD, truncated [ 972.462516][T24389] loop3: p220 start 25 is beyond EOD, truncated [ 972.468896][T24389] loop3: p221 start 10 is beyond EOD, truncated [ 972.475210][T24389] loop3: p222 start 25 is beyond EOD, truncated [ 972.481580][T24389] loop3: p223 start 10 is beyond EOD, truncated [ 972.487962][T24389] loop3: p224 start 25 is beyond EOD, truncated [ 972.494281][T24389] loop3: p225 start 10 is beyond EOD, truncated [ 972.500639][T24389] loop3: p226 start 25 is beyond EOD, truncated [ 972.506968][T24389] loop3: p227 start 10 is beyond EOD, truncated [ 972.513337][T24389] loop3: p228 start 25 is beyond EOD, truncated [ 972.519708][T24389] loop3: p229 start 10 is beyond EOD, truncated [ 972.526025][T24389] loop3: p230 start 25 is beyond EOD, truncated [ 972.532412][T24389] loop3: p231 start 10 is beyond EOD, truncated [ 972.538788][T24389] loop3: p232 start 25 is beyond EOD, truncated [ 972.545088][T24389] loop3: p233 start 10 is beyond EOD, truncated [ 972.551480][T24389] loop3: p234 start 25 is beyond EOD, truncated [ 972.557845][T24389] loop3: p235 start 10 is beyond EOD, truncated [ 972.564176][T24389] loop3: p236 start 25 is beyond EOD, truncated [ 972.570546][T24389] loop3: p237 start 10 is beyond EOD, truncated [ 972.576855][T24389] loop3: p238 start 25 is beyond EOD, truncated [ 972.583229][T24389] loop3: p239 start 10 is beyond EOD, truncated [ 972.589607][T24389] loop3: p240 start 25 is beyond EOD, truncated [ 972.595914][T24389] loop3: p241 start 10 is beyond EOD, truncated [ 972.602288][T24389] loop3: p242 start 25 is beyond EOD, truncated [ 972.608651][T24389] loop3: p243 start 10 is beyond EOD, truncated [ 972.614974][T24389] loop3: p244 start 25 is beyond EOD, truncated [ 972.621339][T24389] loop3: p245 start 10 is beyond EOD, truncated [ 972.627711][T24389] loop3: p246 start 25 is beyond EOD, truncated [ 972.634119][T24389] loop3: p247 start 10 is beyond EOD, truncated [ 972.640488][T24389] loop3: p248 start 25 is beyond EOD, truncated [ 972.646794][T24389] loop3: p249 start 10 is beyond EOD, truncated [ 972.653171][T24389] loop3: p250 start 25 is beyond EOD, truncated 15:25:36 executing program 4: r0 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, 0x0) [ 972.659551][T24389] loop3: p251 start 10 is beyond EOD, truncated [ 972.665864][T24389] loop3: p252 start 25 is beyond EOD, truncated [ 972.673032][T24389] loop3: p253 start 10 is beyond EOD, truncated [ 972.679407][T24389] loop3: p254 start 25 is beyond EOD, truncated [ 972.685721][T24389] loop3: p255 start 10 is beyond EOD, truncated [ 973.017097][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:25:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004860}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = dup2(0xffffffffffffffff, r1) mq_notify(r4, &(0x7f0000000140)={0x0, 0x1f, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:25:38 executing program 3: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) 15:25:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 15:25:38 executing program 4: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) 15:25:38 executing program 0: io_submit(0x0, 0x1, &(0x7f0000001500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ac6a3147", 0x4}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x117}]}, 0x30}}, 0x0) 15:25:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000140)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'rr\x00', 0x21, 0x7542, 0x5f}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x28c, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0xea1d472c4c40cf35}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30f0eeae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8a7e067}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20d4c2d6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69a7f0dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x262c503c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4097badb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28faaa3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9a80351}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fe2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e8888f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ade}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x164, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a6d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7aa6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2bb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3997}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25322388}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x352a5ebd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b9facb5}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x229065cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21aba0d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72501040}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1658bcfe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2baff2e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd368}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ca36541}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e78}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fa83b32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa545}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15a5740}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dcf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fa7e99a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe54f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4097e3cb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5efbbe91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ca2}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d209742}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x342bfa61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cdaca65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7111}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x590ad8a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ac6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x296e7fd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a8b7a57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfa43f4e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000580)={'nat\x00', 0x2, [{}, {}]}, 0x44) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 973.883155][T24442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24442 comm=syz-executor.2 [ 973.955576][T24444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24444 comm=syz-executor.2 15:25:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 15:25:38 executing program 4: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x100000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) 15:25:38 executing program 0: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0002005}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:25:38 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000140)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:38 executing program 2: r0 = openat$pfkey(0xffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000200)={0x6, 0x400, [0x1f, 0xa, 0x800, 0x7ff, 0x27f], 0x2a18}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'tunl0\x00', r3, 0x786, 0x1, 0x2, 0x40, {{0x19, 0x4, 0x3, 0x23, 0x64, 0x64, 0x0, 0x7, 0x0, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x44, 0x53, 0x1, 0x1, [{@remote, 0x8}, {@remote, 0xfffffff7}, {@loopback, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x80}, {@rand_addr=0x64010101, 0x1}, {@loopback, 0x7a}]}, @lsrr={0x83, 0xb, 0xa7, [@rand_addr=0x64010100, @broadcast]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv4_getaddr={0x4c, 0x16, 0x200, 0x70bd28, 0x25dfdbfb, {0x2, 0x1, 0x50, 0x0, r4}, [@IFA_BROADCAST={0x28, 0x4, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0xdae8, 0xa0000001, 0xffffffff, 0x800}}, @IFA_FLAGS={0x8, 0x8, 0x116}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x4c}}, 0x88c5) 15:25:38 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x51f) write$binfmt_script(r0, &(0x7f0000002980)=ANY=[@ANYBLOB="2321202e2f66696c653020676342c62bbfcc5f8120d5b9934c3987844bb9210e5820637a6714ec2aeda675c414"], 0x1e1) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000001b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5\xfa\xff\xff\xff\xff\xff\xff\xff\xe2\xe3\x02)s\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x90?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00'/453, &(0x7f0000001640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfTf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xff\xff\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xdb\xca\v\xf0\xb0e-\xab\x95\xd1\x84\x88\xa0\xa2d\xfbc+r\xfa\x8d\x9es\xc4\x8d\xd6\x96k\a\x05t\x17\xea'], &(0x7f0000001ac0)=[&(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000840)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000001000)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\x95u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf4\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4\xb5\x05\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x95\x03\xf30\n^\xb1~\x9d=d\x96\xfe\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbcT\xf9_\xd4\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\x06\x06\xe8\x80\xef\xdf\x87\xd8S\xcca\xb9\xb4:\x19t\xa2`Li\xe4\xe3\xa6P\xbc\xc6 \xfaoD\xf7TlC:p\xf3\xc1\td\vO\xcc\xcf\x89\xcb\xd7\xca\xfa\x12B\xa5\x87\x7f\xb4Kh^\xcdO\xb8\xd86j\x93A\x95\x00\x8d\x1dX\xf8\x19\xd7\x8f$\xad3l\xdc\f\xed\xb5NP\x1f\f\xfc\x83C\xa8\xbbA\x87\xcfiT]w\x8b\x06>', &(0x7f0000001240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000000180)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xe6,\xf9\xec\x84R\xc2\x02\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=f\xf3\xca\'\xa8\x1b\xae\xff\xbe\xf9\xe7\xed34\x1c\xd1\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000a40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) 15:25:39 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a66772f892b884dd"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="06000000010d"], 0x80}}, 0x0) 15:25:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8100}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) 15:25:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) read$dsp(r3, &(0x7f0000000200)=""/181, 0xb5) 15:25:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x30) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000000)={@default, @null, 0x2, 0x44}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001080000000000000000004588533c4af31692f9f1c020f81ebb", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000002a7e1f863deecfaa90b98ca952b6231aa75650abaab00476042fc3342388a67a5d4e06c9e64b24b096ca49879964a911dbe3947cd998c70b05f7d05abb96f14b87d8527fe0a2"], 0x28}}, 0x0) [ 975.185827][T24477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 975.286416][T24477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:25:39 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x4207, r0, 0x0, 0x0) 15:25:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x0, 0x1, 0x0, 0x6, 0x1, [{0x1000000}], 'N'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "61e6cb"}]}, {0x0, [0x0]}}, 0xffffffffffffffff, 0x43, 0x9e, 0x2}, 0x20) 15:25:40 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r3, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b000028000280100001"], 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 15:25:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8100}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) [ 975.634502][T24495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:25:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x4207, r0, 0x0, 0x0) [ 975.825553][T24504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:25:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', r3}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x41}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x34}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2a}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x4207, r0, 0x0, 0x0) [ 975.990396][T24515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 976.116480][T24504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:25:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8100}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) 15:25:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8100}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) 15:25:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3c) 15:25:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x8000, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffffe8) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf251a0000005b009a00020000000400cc000400cc00"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c080) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000200)={0x6, 0x401, 0x9, 0x1, 0x12}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:41 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x4207, r0, 0x0, 0x0) [ 976.601240][T24532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:25:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070500000040e4a1a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:41 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200440d0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='f', 0x200001c1}], 0x1}, 0x0) [ 976.894244][T24544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 976.979540][T24552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24552 comm=syz-executor.1 15:25:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8100}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) [ 977.099975][T24555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 977.110301][T24556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24556 comm=syz-executor.1 15:25:41 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x5) setresuid(0x0, 0xee01, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) setregid(0x0, r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$P9_RXATTRCREATE(r1, 0x0, 0xee0000) [ 977.172254][T24561] netlink: 'syz-executor.2': attribute type 28 has an invalid length. [ 977.325763][T24561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 977.367721][T24563] netlink: 'syz-executor.2': attribute type 28 has an invalid length. 15:25:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8100}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) 15:25:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x400, 0x80) clone3(&(0x7f0000000480)={0x10000080, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x36}, &(0x7f00000002c0)=""/92, 0x5c, &(0x7f0000000340)=""/200, &(0x7f0000000440)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) write$cgroup_pid(r1, &(0x7f0000000500)=r2, 0x12) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pkey_free(0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:42 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create(0x53) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x60002013}) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r0, &(0x7f0000000000)) 15:25:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8100}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) 15:25:42 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200440d0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='f', 0x200001c1}], 0x1}, 0x0) 15:25:43 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 15:25:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000200)=""/35) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYBLOB="acc943d2ec006c628f56f0ccca0c881e7891e2e37384809c790d4f62338c8f7c85a69709e9953269edc0de87fa0d17ce2187b0fb35c97e36d42a578aa9dc673b593a1d5149188686b6276a10448e1c8a7f662dc883d42191888a3dcecfb1b87e7e0136cce2874a464bc43c050bba6eb425f8daeaf4e198efc07407592b95dae67c7b8300ba8d812088d8602e77b4b8de61b4b23dc41f205f8c74d9f6436d18478332701f1bb0b3c466b51183944577226dd56e303219af3e", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28a500001000010800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) r4 = dup(r1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x4e22, 0x80, @remote, 0x8}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x7}], 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000058c0)={r7, 0xfffffff7}, &(0x7f0000005900)=0x8) 15:25:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f00000004c0)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x0, 0x0, 0x40046304, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x4000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001300)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs], 0x0, 0x0, 0x0}) 15:25:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, &(0x7f0000000240)=""/228}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') 15:25:43 executing program 4: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 15:25:43 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200440d0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='f', 0x200001c1}], 0x1}, 0x0) 15:25:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x303, 0x0, 0x4, 0x0, 0x0}) 15:25:44 executing program 2: r0 = openat$vcsu(0xffffff9c, &(0x7f0000002780)='/dev/vcsu\x00', 0x40, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000027c0)) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg(r4, &(0x7f0000002740)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'team_slave_0\x00'}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="46b8bee0af5b549aebb186", 0xb}, {&(0x7f0000000340)="89a2177208ba3fbbf878b7cfdc841aa03c4e0c5d4468f91edcb437ceb1e59b92306ff199694f28ccb5d29936f437bb31f8b3fd76d0d9eecfc6d79b79014acacab0003d6b8703b287e029345fd773476e35a496cf77655c4fc083f7ae0d9f3ba0e0bc40eb1eb163137c54ae4b098f3f5c23dd1c55de24e70dea2d4de259eaf1c5fb7d89e054ab7cf5e03f1a0e0341af5bb328e9d857e5971685df02bba32d092f37fa4575db4b2fb5142cfd47e4c068c5351d052176cc55a77179c953e7c88869cd3746558160a430a8552fef01932d5f3924232f6ebbc483db2d5918d197126eb36c", 0xe2}], 0x2, &(0x7f0000000480)=[{0x94, 0x110, 0x35a717e1, "f382558f31fb37851cdc5c1e956bfd64ab3e9fea791cd6056e426b97cfdcb54aa1a5e6bf5ce81e4cbbd59a309988314d1920fb7eb515fc3a40090ddecad1b9d9394d43026602d4bb5657bfa84953e1ab6d29e7e42989b07f19507765a628643c110954ac13e4ff0e509e2a19533fda8b912cabe71ec9a6d6a020acac6a68da6398548ddfb58b"}, {0x100c, 0x101, 0x8, "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"}, {0x100c, 0x105, 0x0, "782ab52a7b2865532a2e45c7f872025d43688e7f6e18dfad132f4b5cdaf3a28476d326878f08cacefa7325acf2160ab6e35cc52f3996a29e93288a3a3dcdb84fa9e10e7001f805f6bdc575a66a8307e2fd166b08c56f25ba7e9d5d7a1494cbf5d7d55e9e0afe00de2ee8587a089e6e05ce203cf5d9dedf7e82a76b3b789c3cbff00f3e532bc0182f45f6b9d825e5524e2129e4e81195ad405d653340309160e54cab0c7012d776fd057d78d77797fadc521cfd00998c672e3a09cc5e1b329fd08dbead53e69f202df6f39329f6c8df76b633effceec10d8dc5bb6266288ceedc2296d503358a800ec2a265bf9a3f008f955291828338fb6e77ed9eb6313db9624ea8cf52494e682b2d136e202f44d353b6cd63f22c08bca5d595223f2c6b2b566b7d8b00fdfd48bebe7047fcd41c479664aff01fd0a2d05fff4c04f65863724fcca5413329e9b16e7a7f19b486300a17448c86c8f6daecd672cf857e065f4accd604a05ada08efe6edaa5dff0165bd22411d3c90240687c94d34665fd662756dd58388b2084b7ebc6233dcc285deda43b4288086403780a0ac2330edda2575889348209ac21e7b8ee1eb840e89497022d3bff989f43b8f128be3939b0bf595a96f80cf7edd582f99e98f9f6fe16720246f5361da334f5995c1a321e1d6173f5b2f81ba0c8b19a96fdddf6c4d02e78923a53354bc1e45106b2b276ef8d6179b98daab5fbfb10e49a20a4b8a4d660badbec445383656be90455a3d57183a703cf546dbeea0419c749f63beaefa654d8dba3c19c81d80558309b755182e1b0b9f416aa0d8f39e110c810db0afca1c9dc4df9cb57021426d1b05fbbb14971b79ba8342fab702f05c2d1705b7977ef009bc8e3565830e72b9b60316390638f3a3e934f667a5cb98eed4813c72e05976e01959ca9bb3c148abea11e5ec6d1a903e2d8425c299817e462e3e6521c99b71e208729fff50e509e7d8fa2c3e6698a3553e48f8325d0487f519bdfbe45e9b397afa64c9ab76a85cbcd7b24055cb170b1e261133aea78d9b4c7f9e8b7b7c46c729656085136acca2395a07d411209ddf63cdd6cfb1a36693944316e8a4ffe68fd1f4eeb4d7acf84c193c83acd7aaa68005db3a7d71981fd577eb8639ee664de01ae6f32935d8dd614e2a3a5ac625d7875429b051121cfea8006446ac1d14b36e1b9a3493fb235c2c9a7f846eab66e007d6ff12886b07ba70aa98491869db44dbeecc7150a5ece30bad0102ac27f7c4e91b5f270cc066810bba7774735d35da543b394ee3e686756e694ed4ce416838bde830e6fe0bceddabfa196491ffa1f44a9b557211ac8b905b6b1ca00deb9fd0fabcaedf773f592aeef9cec6a48a3e67fe61787f6634c2810a0ebe67f1624434feafe7d0e8525d7ef4db793ae51c1851f6e661da39b434e8c51ced2bc2bc69566c3db2f9a8a5ad2cea1ec73bf2591faae64f86a095c83a98a223a7cef97c3f0adc257b636f845689517cb226134b468b0da0294b8edf4ccc6f2f0cad2a5bcf3d641f761675e34264f60bbe081ac71427be1177cfe4a5ce3a44b86b906e1b15ebcb0ab475e0f3bbd46a753c8acff8f9ccebb595c457c1a25e7800f0f3866f8116b418e4124d3f452e80804c65c15a225c1277d69c41d4dde6d78fc42fc98c8c50e5f47ca3eebcda25877aeb5b847d0b85d681c8cc9b6f2d104ac7ff1420a597bc6e051e986cc8ae7bec89822158a56990d9b74be344fb4dcbe3a4fce4ffaac2320ae7956ee70b005b70de8ffbd9d2bbba151708b16c9b14a62adeec5f265336a88f236b879dd236b22ef35a524c8c57db3975af51f9f88bb614c318f47a58f2c3ff25987fd3f3ccc28ebbe0a2b258187984d78a440fe52db246282ef37cde6352aa34b15df9366ce819eecd9729a7a29667ca80fb29e0afe49d501292193a64f38b8ce74781880c62cf87ce54346d01a5bdbff8694d8dec07eda6f9e861799f79d2c7ef1235f0e178d5648729e1edbc62309a0c0d48261ca77dabbba62be631aab13c2727ae5dd385e63bd6704cdd3ffa6b8028109f111806c006fe5907eb5e135bd5945138a3299dbbe310187efbe972ab3a766f3d59acb929ed8c2e494f6a53ac39de57a4aa7d59865b186f423485176e433579556e816ec5bfb35e3c420b78a345fd07bd3a79bfa043437d5ec8488144e5957c332862921e4b94683dec5c5198e7542790522379afe289bd7eb9c0f02478a4feb39575d7d04c23d205f68c16296ca872976c64228ebf62140f942f59390b0feb122d1f3104061a905392fe0ed419c328a1d70d9a03658c05ec38e44b42122d7d0fbc20ae857655c8d07478decb382367eda3173d83a0cd0c33a805ac1afc127ef282bd50a7e112b285b12a2182a7b181f18b8a12b33bb3d56e3f0ef0bb280b0ccc7d98173e52cb448c62c90b0520f609035ae5827cfc91ce5200b84ac8f199ec12db01a29eabd7978700119d8b904dc4ae83872d3a75524d896bac7cca82d51f2c829054e94b8ae2fbce856b0bebe72436309308e9b11a38dc47c7e1fa6b129977eb4bc486a0586322f585b686627e0244e2a44e1ba06ced0da77d3508e3cb9822de1e071eabc7896840ebcad8bae68c0ab3f1e6b56048fca5c0b1a12e321e140eab138e007a1f8968463dbf7ca493adbe48e04e255f59671cab6e3784846bbc202c8e215d1c59065edefbe371db910071dc7eaf6a66190821e9eefdb5557d324c1b565d65b29349ea97fbafe1cb590cb45e6ad63e75783b59274892eb02a3da61a0702763c5cecc0fd3329a7da3708c94d9e0689e0da600b18e0786cafd894396ef62d32975e5f348f1798a12b804cfdcf354d70626d5b88444624238979d96eacb2a04d8f51c7e33bb155db8f2aa847dff08778fbfbbd6bf3bc9f1ec34fb86364e37530fe80a21233b5b23b78ebc4b3da18806a897b8d65e0b6830f1fdd2bb5bf19bce3ca8ceb53d78fa296ee73a6f439f38a462371b0abeed58590e0e333cfa8b22b7a569be843fb03954e72c39db4f876ab4d244f77d51b0c781a51120c6d621dafe99bac7965478fc061fd8abfb0f44a63e04e7d9d8bf1ece205b15d94596e7b34efc8d391effad0017695ec7149fb03de41dc7c6a3de1af034bbf0b76b3ad4906fdd5805ccce57361cabaf2a44b26e3b738defcbba05f31e75acaa217f48b58766dff4d57774296cd2beee6477e6ad2de674f781199b4e9e93872437f6519a43fbb818d85a69af65e4e9e9188e2175ddde3f8bca8abd42acd186c3fe7702161746c95b0348398946cf11e23dffe11cd1b350a0b65d21dc852314517acf263f4327b27f2e40d670a9f4c13ec1813ee21ed6438ff65821eaf4c5ac440767f2d4f421efec1917d943596344f532696c8d940b68c0a19bcc079233c0fac5b1c69a4cf0542aa81a73d6664ee4231365a87b6ff69f06a7d53ed1ae05e9ea71ceda2d4bc4eacc704219aae9a6da42a2e3f887cd69ae448adedfb04f2e498772d5bfb33f3e5e3c512ee91bd96cd84f9e75b41a22b5ce36bf22773c8fbaa0166c4b714090988fe7f5299801d790503eaa925cc664f1cdf8fdf660622622273b21b1923d0b929807406cb096fe805fe031eb55bc71827131543281b24151e78dc47a2f919c41a30e58d95df0dc2974f6509250e37eb5536f5bb5d6400f11cc9a25d4ef43effb283693ff4f9b6797dc192057c27a164a4d8738b28539b3e18b5ed4ac4c69e7f6cb600d2a133647adb856c98566fa4b83e0abc3d952a3344598407c68b8a4e1a3f373e2c5d6272a49c17c4503524fa1f4880d010726dc07574cb6df6f564449ac9f6ebbe54d38fb1ded245ab56d12d1adfb05d62e2f7104f7b40d7f9c6f1a3f73d26dc8c98f1805375b8363c15d2967118356baa2deb19d7f7ef91574968e19bb7095cd139a7442ae934b127b8f177f947f69bfb547662133a62a8340790f14607f0617fda4607a9080ef4fc162d021295a5eaa1e86a1cbb971164c6bc0e52b4edb77fe228ab7ceed0011d176e96a052a306ec85dcd7c6688d395769848d7495daa29e7d0de4213ce0031120c811c2963f2aa4f2f4dee2eeebc130f72f10676cf6226e1a262eb1e9dcaa4edf6212a47278295eacb6cbf08ce71b7cdcb9b7e4015dee4f3fd6298724627d5405d848a573244aad103a15b4b3f9b3c4c6b4295765374b64dd877cfd0c8960d371d51741a8d3b95c6ddcf42fda761f58b4c896233c19a141caf7289d549ede777ec2a0326a733730894d0214cc5312034295ca91abc3c2b702d7945ff81a2925fbeef0685b9c2186b0be5497a2c990519eca8dadc6960f0abd85f310dfb76480e7cc84778c3a409e5f7aef48fc418f2c40e74a10f8065ab8d943a600da3080f8c0086e29bfa859b99755e19716e036c5d43b7790395112698605ea50cb6c77d28d25facc91656a720473205653b0a21e3a5498dafc16b321600c64b6e8ecfeeff642e6388e800b7586254a33c052a8f1f1d88be6beb35da6f48bc48e87cc4c14a1eae1a3394853a99c93d71a93ee14da92fa074857f68d8a9209f09f32758bc930fe658e0c4dbac69d2112ab15c276bba8487396be6ed49bfd91417f0b6fe2a7af246d5e5146c5eed6e52a7ce6d8a6a502f900ba7191b1538debcfb6b0e4276238779fe9da2c93d32970a809c4b378101b50339b224277efdb944e0666751f3ba87ff7a88d86e361fdb496429c109f6e47d9707ba4b306dd37410b32cea477bb42138dcb392d71f4e6c46d7df8c9d1e83238fa09e0b8f53af34eaa1c805b916e8ed5b360d83fed0dbe0c77fd8b2e04abea2e1740d491d6da4c5a8ad96e52a5ae245756bb6092016519ca19105dfa41b59bf495ab2635fffd9e31922903c17fc0608888ee89c5afd383cc522d1bb123a5a92f5f877debe6c0a780c5140a970f3592b4ccad87729b808f60ecdf7b03b682e85155d2743eabc4fcbbd30c77b001561dbaece60ee7bd8152b991ce5616dccf6167087eac4f8605b5007c4edf643cac7d5b9e73eecc3ec19da3a073b064a8ee2651def5211591615a966da4933596f9f532a1ec6eebaed5bccfb4188c85cdc4043e9333b22ec8be691641fad16a980e20e81bdafedbe3902a4965c785d0b7ca511cb5298efbd484dc7b14558821ffcdd732915596023fb5e947d64cd610ad30290c7379f6e74aaa83b11d47b4ffaeec786e95a37b153026552ba3871aed8ef6957e785ec1cb5adab8bfdaf350def311ce0a1e55437fff87437fd8b9094a9743fbd828c23fac3f25d97e1d1d898393a0cb93ebf0fcd86deb33d7e718d4acb5398a3b8fb8b43aa3fb8ce427d5bc69e3acc5de89e4528fa431ea36ff935f20b2032ea9a1aba95c9ea21d1748198a923b7eaa430a41b6fff912a99c2b103cf43ecf968493f67a6c56d0cb8e32e2f94c2de9dc9befdb32dbec2e927d41736719e14f3268c9604b43879c76fe3ebf787f3d7cf8718cf47a881dafa3939338c3781f9b0731a29d6ca03f717bea0026abad42f031e1068f5612cefdf57484e91900421b2e0addc3a80de21b4a275e3cc1e55c45a020b500f0ea59385f29f3a968445df6c5e8da4a5681f26767506e623b82a8d11a1339b17c43c0319f163dc3cd22c7354ac8040f1e48aae2d5fd8c5904aaa91619af3900f22ca9ed22516ba84b9e3f7ddee2e4b082c3b2aa35cea1457b7a4ae980e0f6f05ab5afcdc5a60475c00e2f8fa16b79a02a427d32638c600364cee1129ba7883b614930127e6f3453dabe47d49e09da882d9db090a36eb025b73c29d1746"}, {0x28, 0x0, 0x8, "86dade6afcf164b326e5409ee90d8ea6579c933786fff0a2f5ed84"}, {0x60, 0x10b, 0x2, "e9ee400e03944009dc2a01fe2729cf0249ce6a5a58169ab61cd152c5db08b549b795210d627a4e78429946329281eb00a475ddfe73cbf46e39eeb0e4fdac28fb960844354773fc998c25ea114d513f0428edee"}, {0x8c, 0x108, 0x9, "442e35cf9fdcf4cb8ad50c89cbca37bc5f5bcf09e67ec2d9a015dfe942aac3a6279b1dad2229d293fe84cd73dae3f9920a7fa8aa7dc74965fd5b2fa07d5d945cc330a70d058094fc8bba590588d90a95554b32ffd89cfb0cd2019d9c0b24c45794e0c12dceab479c7d7a07f09809b8ccde77e6f13788a0ac7609b88f4788"}, {0xcc, 0x29, 0x0, "6662d1179ca698e2a17da5c84f4c526c0d3ae108b1fda08c8e9f58b8e98abcaf824d6bae1e19e22472701c3e8e1fe42a7393d23376edb301f66dbcfbb218a9c2ffdb07c3d5b480f46fcb94e780531ec190381061696d5e69031ffff4ca02730328036e36a9d19cdc849f00cb1d21147deff4d794c55e1e9e85d238b49b0817f207955cb9df6b0f3c39185e39edaf45e92db7c4ece11319c94c637d82ea945afc5a7e36948cb78e8fc57d5f78af2d7ae2a2a41753667a1e8f164f5e15090b"}], 0x228c}, 0x8000) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee01, 0x0, r6) setregid(0x0, r6) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x0, {0x1, 0x2, 0x8, 0x4, 0x4, 0x9, {0x0, 0xfffffffffffffffe, 0x800, 0x7, 0x9, 0x5, 0x1, 0xfffffc01, 0x11, 0x2000, 0x1, 0xffffffffffffffff, r6, 0x7398a826, 0xc57}}}, 0x90) 15:25:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') sendfile(r0, r1, 0x0, 0x1000e) 15:25:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="49000000100001080000000000000000000000ed", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:25:44 executing program 4: r0 = semget$private(0x0, 0x20000000102, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') sendfile(r1, r2, 0x0, 0x21) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'veth0_to_batadv\x00', 0x1}, 0x18) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000340)={0x2, 0x1, [0x7, 0x40, 0x7fffffff, 0x0, 0x6, 0x9, 0x1, 0x7]}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x1, 0x81}, 0xc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, r5, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x170, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @loopback, 0x3d}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1be5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x33dfe4a7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/70) 15:25:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x0) getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000280)=""/102, &(0x7f0000000300)=0x66) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40186417, &(0x7f0000000140)={0x1, 0x200, 0x3, 0xb7, 0x0, 0x5}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x26, &(0x7f0000000080)) dup3(r0, r1, 0x0) 15:25:45 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200440d0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='f', 0x200001c1}], 0x1}, 0x0) [ 980.637718][T24651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24651 comm=syz-executor.1 [ 980.746356][T24654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24654 comm=syz-executor.1 15:25:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x102b, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:25:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:25:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x739, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:25:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rseq(&(0x7f0000000180), 0x20, 0x80000000, 0x0) 15:25:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) [ 981.534852][T24673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24673 comm=syz-executor.1 15:25:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x739, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:25:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r3}]}}}]}, 0x38}}, 0x0) 15:25:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYRESHEX=r0], 0x28}}, 0x0) 15:25:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x739, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:25:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 15:25:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280051001ea84cd48a21f1640000800000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x28}}, 0x0) 15:25:47 executing program 3: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x10) 15:25:47 executing program 5: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002700)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 15:25:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x739, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:25:47 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB='errors=continue,discard,nodiscard,quota']) 15:25:47 executing program 3: chroot(&(0x7f0000000000)='./file0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x20000000, 0x4) 15:25:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) 15:25:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x1042, 0x0) write$FUSE_WRITE(r1, &(0x7f0000002080)={0x18}, 0xffee) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x105e00, 0x0) write$FUSE_POLL(r1, &(0x7f0000000080)={0x18}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000080)='./file0\x00', 0xc5042, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000180)={0x20}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000100)='./file0\x00', 0xc1042, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000180)={0x20}, 0xfdef) 15:25:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100090c0900fcff0000040e05a5", 0x58}], 0x1) [ 983.516864][ T28] audit: type=1804 audit(1600183548.088:76): pid=24717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir281957598/syzkaller.Y3EgDS/532/file0" dev="sda1" ino=16380 res=1 [ 983.719185][ T28] audit: type=1804 audit(1600183548.148:77): pid=24717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir281957598/syzkaller.Y3EgDS/532/file0" dev="sda1" ino=16380 res=1 [ 983.744069][ T28] audit: type=1804 audit(1600183548.158:78): pid=24717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir281957598/syzkaller.Y3EgDS/532/file0" dev="sda1" ino=16380 res=1 [ 983.768710][ T28] audit: type=1804 audit(1600183548.228:79): pid=24722 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir281957598/syzkaller.Y3EgDS/532/file0" dev="sda1" ino=16380 res=1 [ 983.793841][ T28] audit: type=1804 audit(1600183548.288:80): pid=24721 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir281957598/syzkaller.Y3EgDS/532/file0" dev="sda1" ino=16380 res=1 15:25:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 15:25:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0xa, 0xb2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="400400000000000005001c0def000000"], 0x28}}, 0x0) r3 = openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x1}, 0x10) 15:25:48 executing program 5: setuid(0xee01) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) 15:25:48 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 984.250442][ T28] audit: type=1800 audit(1600183548.408:81): pid=24717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=16380 res=0 [ 984.270486][ T28] audit: type=1800 audit(1600183548.408:82): pid=24722 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16380 res=0 [ 984.291291][ T28] audit: type=1800 audit(1600183548.418:83): pid=24721 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16380 res=0 [ 984.411069][T24711] JFS: discard option not supported on device 15:25:49 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r0 = gettid() tkill(r0, 0x3d) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') [ 984.629281][ T28] audit: type=1326 audit(1600183549.208:84): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24734 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 15:25:49 executing program 5: r0 = socket(0x1e, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002400)) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@id, 0x10, 0x0}, 0x0) 15:25:49 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) [ 984.977732][ T8693] Bluetooth: hci5: command 0x0405 tx timeout 15:25:49 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r0 = gettid() tkill(r0, 0x3d) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 15:25:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="3b0100000000000000000a00ff00"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, r5, 0x405, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4001}, 0x801) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:49 executing program 5: syz_mount_image$reiserfs(&(0x7f0000001b80)='reiserfs\x00', &(0x7f0000001bc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001d40), 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB='jqfm']) [ 985.420901][ T28] audit: type=1326 audit(1600183549.998:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=24734 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 15:25:50 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r0 = gettid() tkill(r0, 0x3d) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 15:25:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev}}, 0x1c) 15:25:50 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x8993, &(0x7f00000000c0)="aa9069175fa7b0a7f93982b4f93a") 15:25:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x4, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000300)) accept4$llc(r1, 0x0, &(0x7f0000000200), 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x9, 0x10000, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x66, 0x0, 0xed, 0x3b, 0x0, @empty, @loopback, {[@cipso={0x86, 0x9, 0x3, [{0x0, 0x3, "10"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000012a80602463e98fc0000000000000000", @ANYRES32=r3, @ANYBLOB="000000000100000004001400"], 0x24}}, 0xd57208d95c4f0f0b) bind$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x6, 0x4}, 0x20) [ 985.886250][T24762] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "jqfm" [ 986.008123][T24762] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "jqfm" 15:25:50 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc038563b, &(0x7f0000000280)) 15:25:50 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r0 = gettid() tkill(r0, 0x3d) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 15:25:51 executing program 3: r0 = openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/raw/rawctl\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, &(0x7f0000000000)={0x0, 0x7a2, 0x0}) 15:25:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 15:25:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000140)={0x5, 0x80000000, 0x7ff, 0x1ff}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x121181, 0x122) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000200)=""/200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000e3c0e70700000000010000396b1a7f9fd91115e950179c062ff55d5e6893bba54c085805a0a5266a61eedfc8efc64072dfbcd1557253f403f57b74e80be9060195200f20af0b53f8119fec8156ef357da1b647ae3553a2d8fa3ad77a87ff3c"], 0x28}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r1}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4092d90093110d0cddc263e99b7aeb699cdd58d9fd3459c6bae7d929264685cede51fa179011abefec6a8a7d54ab6045fd6ac04d1927e16e3b4357f0690fe62e80eb8b9252ede4f754d91103f772fe169883ecec69be4fe991a170ac53956a165b689d3ec8046b51911b1fb8312fb82a9ea48c8cbb8fd9a6c062bc1df0be4ab5beed82d2640f79e1f62f0c1cdb4de327b746dcde50f444b16c56d86bff09b30e6d982a931050a59e7a06e30447fb9f8455ec4665360055b365841d7db9e07c31c66e12f8d6b3a1f31c2e4808fd30f412203e925a687162cafc406d84617e", @ANYRES16=r6, @ANYBLOB="000129bd7000fddbdf25010000002300070073797374656d5f753a6f626a6563745f723a7661725f72756e5f743a733000000800040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004041}, 0x20000001) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0xff41, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:boot_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) 15:25:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 15:25:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x68, 0xcb, 0x1a, 0x40, 0x424, 0x9530, 0xd46c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x4b, 0xb2, 0xe7}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0x84, 0x38}}]}}]}}, 0x0) 15:25:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x8, {0x0, 0x0, 0x0, r2}, [@IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20008800) 15:25:51 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) 15:25:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}}, 0x0) 15:25:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) [ 987.888522][ T8724] usb 1-1: new high-speed USB device number 21 using dummy_hcd 15:25:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x34) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:52 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x80000000) 15:25:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0485510, &(0x7f0000000580)={0x3ff, 0xa, 0xffffffff, 0x1, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x41}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, [], 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r3 = socket(0x10, 0x803, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000600)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}}, 0x0) [ 988.249122][ T8724] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 988.258523][ T8724] usb 1-1: config 0 interface 0 has no altsetting 1 [ 988.429669][ T8724] usb 1-1: New USB device found, idVendor=0424, idProduct=9530, bcdDevice=d4.6c [ 988.439470][ T8724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.447750][ T8724] usb 1-1: Product: syz [ 988.451990][ T8724] usb 1-1: Manufacturer: syz [ 988.456659][ T8724] usb 1-1: SerialNumber: syz [ 988.609831][ T8724] usb 1-1: config 0 descriptor?? 15:25:53 executing program 4: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) [ 988.650549][ T8724] smsc95xx v1.0.6 [ 988.654481][ T8724] smsc95xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 988.665146][ T8724] smsc95xx: probe of 1-1:0.0 failed with error -22 15:25:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 988.864441][ T8724] usb 1-1: USB disconnect, device number 21 15:25:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}}, 0x0) [ 989.628178][ T8721] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 990.032818][ T8721] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 990.041972][ T8721] usb 1-1: config 0 interface 0 has no altsetting 1 [ 990.248841][ T8721] usb 1-1: New USB device found, idVendor=0424, idProduct=9530, bcdDevice=d4.6c [ 990.258143][ T8721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.266209][ T8721] usb 1-1: Product: syz [ 990.270619][ T8721] usb 1-1: Manufacturer: syz [ 990.275286][ T8721] usb 1-1: SerialNumber: syz [ 990.345480][ T8721] usb 1-1: config 0 descriptor?? [ 990.396636][ T8721] smsc95xx v1.0.6 [ 990.400599][ T8721] smsc95xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 990.410980][ T8721] smsc95xx: probe of 1-1:0.0 failed with error -22 15:25:55 executing program 0: nanosleep(&(0x7f00000005c0)={0x80000001}, 0x0) 15:25:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 15:25:55 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) semget(0x2, 0x1, 0x240) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}}, 0x0) 15:25:55 executing program 4: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000000)="010000000200000000000000009cd97893961adc2d83f67b2f40612af8f6db50", 0x20, 0xfffffffffffffffe) [ 990.657523][ T12] usb 1-1: USB disconnect, device number 22 15:25:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 15:25:55 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000680)='/dev/urandom\x00', 0x0, 0x0) 15:25:55 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x800000000000401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) 15:25:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000384ac24400006600000000386e3ca3203b73ad63d39a4836157cf11c0d2d9a3391dd64", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:25:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fchdir(r0) unlink(&(0x7f0000000140)='./file0\x00') 15:25:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 15:25:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x4d) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000457832", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) r3 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000140)='y', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r5, r3, r4}, &(0x7f0000000400)=""/139, 0x8b, &(0x7f0000000180)={&(0x7f0000000080)={'rmd128\x00'}}) keyctl$set_timeout(0xf, r5, 0x1) 15:25:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x8) 15:25:56 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 15:25:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x93) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x120, r3, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x10c, 0x117, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x101, 0x3, "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"}]}]}, 0x120}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c68b08af35"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "f742224398408d"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = openat$ipvs(0xffffff9c, &(0x7f0000001a80)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendto$l2tp6(r5, &(0x7f0000001ac0)="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", 0x1000, 0x4004000, &(0x7f0000002ac0)={0xa, 0x0, 0x9, @remote, 0x6, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:25:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="b73bf425bbf40000020000000300f0ffffffefffff0000000200000000000000", 0x20) [ 992.562292][T24909] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 992.592480][T24911] __nla_validate_parse: 3 callbacks suppressed [ 992.592518][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 992.627374][T24916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=24916 comm=syz-executor.1 [ 992.701980][T24916] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 992.764065][T24921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=24921 comm=syz-executor.1 15:25:57 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) socketpair(0x0, 0x0, 0x0, 0x0) 15:25:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000007040)=[{{&(0x7f0000001900)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000001940)="5cd8ff193211479cf3c4c206d8b06c9f02dafc93a0766689d87b3c1d32e3e978d1d686bb95efd6d31193a239b3260e1cb01919d54f72587361d73e73dfe3c5e8376b261f7ccaf48d2f84967b2bc53bfd87cb38fec7e68ee4987fd12c4ab5336d330261b5854dfe5d21efa26fc6839bbfcd23d59670b065", 0x77}, {&(0x7f00000030c0)="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", 0x52a}], 0x2, &(0x7f0000001c40)=[@dstopts_2292={{0x1c, 0x29, 0x4, {0x0, 0x1, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x1c}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000007000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)={0xeb, 0x75, 0x1, {0xe0, "13299d5bbd48edc2194a9a3e79c5d8962c87d28ad7ba1f813804c7b225df6cebc0569b295c6741f93a7a4808c70971ebcae4dfdb50db1e355faa2173bddaa7d2b8d72fa6820004d62034baf50282b6c9287f9fe3cc4d7fa4363f6c49c48e033945a63eaf8cbd9710c883ea2f1c24e474f3649ef4a4bcf9d848418adc8bffd1c3cd311fe0de7bf399dd0ea416f851d703ab90a41127407c688c6a6fa46e3ad09de344ca297a7f6e6e7db283f1665797c041d0cc0c613131fa3fdf4ee47e1ed04c5afe60e62eaa32b7ec4a682adc9cea4ecb56c14da028de2a24c14c6c5e35165e"}}, 0xeb) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r5 = openat$proc_capi20(0xffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x226802, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000000240)={r6, 0x14}) 15:25:57 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r1}, 0xc) 15:25:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8907, 0x0) 15:25:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0) 15:25:58 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="5800000014", 0x5}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:25:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x22, 0xd, 0xfffffffd) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x782f462a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800000000e8f07cd600000000", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:25:58 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='ns\x00') getdents(r0, &(0x7f0000000040)=""/84, 0x97) getdents64(r0, 0x0, 0x28) 15:25:58 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket(0x10, 0x803, 0x0) ioprio_get$uid(0x3, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001940)={'batadv0\x00'}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x3, 0x1, 0x7, 0x1}]}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40015) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x74}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x5d) r6 = openat$vcs(0xffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x38c, 0x3, 0x80000000, 0x8, 0xfffffffffffff001, 0x2, 0x4, 0x1000, 0xfff, 0x9, 0x6, 0xb96, 0x2, 0x2, 0x4, 0xffffffffffffb2e6], 0x100000, 0x1}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000004a00000228bd7000fedbdf250a0020001ea40aead736dab3b812858bce9db46ad78e3a", @ANYRESDEC=r0, @ANYBLOB="30f7000100000100fe800000000083e5aa719fd53fff0464000000000000000000aa080002000500000051fe02000b000000000001000000000000000000000000000000eb00000002000b000000"], 0x68}}, 0x0) 15:25:58 executing program 0: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), 0x4) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) close(r0) close(r1) 15:25:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$setperm(0x5, 0x0, 0x21000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000001d00000008001c00ef000000"], 0x28}}, 0x0) 15:25:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) mlock2(&(0x7f00006a1000/0x3000)=nil, 0x3000, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000002c0)=&(0x7f00000001c0)) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x8b4, 0x2, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0x3ff, 0x7f, 0x0, 0xf85d, 0x0, 0x5, 0x7fffffff, 0xc, 0x4, {0x8f5d}, 0x4}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 15:25:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 15:25:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x16, 0x0, &(0x7f0000000340)) 15:25:59 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="5800000014", 0x5}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 994.989514][T24983] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 15:25:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x13, 0xfffffff7, 0x4, 0x3, 0x2d0, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000340)="94e25bd231e6686f3bfaa919d57199c41de7c46d25bd24c559cb41aac2ffd216aacb23b213b93e5207e778f932c28c38d8f3accbd5c0b7ed33156a4609a673cfef6aa2d31d068a03dcbb0526971c9aa6d29ad570cf0de5b513a129c453e3a22071cc020eddbd25071dced3c44694d55ca91d6b523e40e3c982f1c721aaba6312e52e59f68d673b3f3c317e9bba830ce7d9896d9ea78e16847c31f4db4e4bcafc93aa05582d535aab367ba5fe42686d673c42844e7b1e66632af2192a85addde75d2f8efee3ff8ffb87798d93539169efeaa8a4e766a7ebb8a9ba9b8ac511ec392ef8472df5975759180fef8868b212", &(0x7f0000000440)=""/60, &(0x7f0000000480)="6ed2375380689b866e1e4aade3056a9bd684fc7b4905c6e8b3fcc511612782ce5106c6ba7e149dd256c3b5ab82dd39ed6de07f31562c961b4e0dbd5c351d30ce1bb621f25e59d95d98ea8b5084afa408cd0f5bcf67bbaba06188d2fa1d758798597119eed89fee56b3e5c02eff10b3a072d9179a835773ed1eb06672c50f08fbf948db1007bcfa592d47282931de86faa2974cbce96a8478ba48cd83cccc3473a5f6e43cb9835c68", &(0x7f0000000540)="45a4675181f9cb716ca07c7b52bd5e4cb22c62233f9f431b54e446f31c0b83a5fef45343909e3c435ec66f148a59c4dd4f080c0b9bf0ca769a140358b5e6fb36b7fe618ab977d9874d8f8a436a96530d6e121a6f2f726cf96f359043c0", 0x5, r1}, 0x38) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x4dce40) fchdir(r4) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000200)=""/162) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000140)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x1}, 0xffffffffffffffff) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000023000535d25a80648c63940d0824fc601000034004000200051a82c137153e670402018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 15:26:00 executing program 0: mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/151) 15:26:00 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="5800000014", 0x5}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 995.683493][T24999] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 995.683546][T24999] netlink: 262 bytes leftover after parsing attributes in process `syz-executor.4'. [ 995.683586][T24999] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 15:26:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}}, 0x0) 15:26:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010900"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0xee01, r1, 0x0) setreuid(r1, 0x0) 15:26:01 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x10}, {0x8}}]}, 0x20}}, 0x0) 15:26:01 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) setresuid(0x0, 0xee00, 0x0) write$nbd(r0, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x4, "a30901749fa55f56d3adff7f9d5e82099cbab35a2fdbede5fbd0978b97ba59f2bcb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0e94bb02f6b78b1ea5800400185947306a5bc6c5e7be787e839faf6eb9239c15"}, 0x68) 15:26:01 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="5800000014", 0x5}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000280)=0x28) syz_open_dev$char_raw(&(0x7f00000002c0)='/dev/raw/raw#\x00', 0x1, 0xc0000) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r6 = openat$pfkey(0xffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10040, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000300)={0x1, r1}) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000000200)={0x0, 0x8}) 15:26:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000001400)='/dev/dlm-control\x00', 0x40540, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0000114900001359dcc95855f81af5dd"], 0x28}}, 0x0) 15:26:01 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x4, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 996.969995][T25033] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 997.066053][ T28] audit: type=1400 audit(1600183561.638:86): avc: denied { write } for pid=25032 comm="syz-executor.1" name="net" dev="proc" ino=80388 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 997.090276][ T28] audit: type=1400 audit(1600183561.638:87): avc: denied { add_name } for pid=25032 comm="syz-executor.1" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 15:26:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000220007031dfffd946f6105000a0000040000000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 997.112339][ T28] audit: type=1400 audit(1600183561.638:88): avc: denied { create } for pid=25032 comm="syz-executor.1" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 997.140986][T25036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 997.192333][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:26:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 15:26:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e2a, @remote}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000100001080000000000e0ffffff000000", @ANYBLOB="aa4df8c6eccec5f195e8c341bd24da91ea9d96bf5b3c80c7b3a8b7b068a9814bb07ce7d4d39b5996dd2cf0fd92617cc48acee5b8244992afa4d8637788aac3124e419b459de1479f55da76236f135ccc50bf207962336f4799c1f984300e4e399636820774eea46d4c0df5f559d4061e16bd8ce56434e60392c89a5cac1abedfe786917ba0a1fc39e08c628a17e6ff583878baa39ccd7cc7535d5f7ad808954d3d9df2bd7e402945d1998a983ee543d994039a6344c48855582c108685a18c0f8a5a7133ff777787804f0d605ad463475df884", @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x48010) 15:26:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x80000000000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000340)={@mcast1, 0x0, 0x0, 0xff, 0x1}, 0x20) dup2(r0, r1) 15:26:02 executing program 4: r0 = socket(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) [ 997.738981][T25048] binder: BINDER_SET_CONTEXT_MGR already set [ 997.745155][T25048] binder: 25047:25048 ioctl 40046207 0 returned -16 15:26:02 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) write(r0, &(0x7f0000000500)="aee8a913d28b49e38dfd5ee304", 0xd) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000240), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 997.874858][T25052] binder: BINDER_SET_CONTEXT_MGR already set [ 997.881163][T25052] binder: 25047:25052 ioctl 40046207 0 returned -16 [ 998.008879][T25055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:02 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @mcast2}}) 15:26:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000100)={0x90}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f00000002c0)=0x4) 15:26:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1002, 0x0, &(0x7f0000fef000/0x1000)=nil) 15:26:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000100001088b3ac4987fad921ce83560730800ff0100", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070500000040e4a1a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x50}}, 0x0) r8 = openat$vcs(0xffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0xc400, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newchain={0x40, 0x64, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8}, {0xc, 0x8}, {0x7, 0x7}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r8}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008804}, 0x41) [ 999.181822][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 999.261213][T25081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:26:03 executing program 4: prctl$PR_SET_NAME(0x18, &(0x7f0000000040)='/dev/cuse\x00') 15:26:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) unshare(0x40600) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) 15:26:04 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002e00a1b44f5ad47329e2000700000000", @ANYRES32, @ANYBLOB="d7d5d21500000000000300dd"], 0x24}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 999.554242][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 999.614946][T25084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:26:04 executing program 3: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x2, 0x0]}]}}}}}}, 0x0) 15:26:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x144) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x58}}, 0x40010) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:04 executing program 4: syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='nointegrity']) 15:26:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB='\x00'], 0x28}}, 0x0) 15:26:04 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000f1d0000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000000000004974000000000000000602005ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x0, @local}, 0x10) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x5, 0x6, @remote}, 0x10) 15:26:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r4}) 15:26:05 executing program 3: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x2, 0x0]}]}}}}}}, 0x0) [ 1000.433669][T25119] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1000.496246][T25124] device lo entered promiscuous mode [ 1000.537079][T25120] device lo left promiscuous mode [ 1000.572289][T25126] device lo entered promiscuous mode [ 1000.585883][T25119] IPVS: persistence engine module ip_vs_pe_ [ 1000.585883][T25119] ip not found [ 1000.613773][T25120] device lo left promiscuous mode [ 1000.627651][T25128] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1000.650999][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0xbc155b926d363b35, 0x0, 0x0, {0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x2}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e23}}]}, 0x2c}}, 0x0) [ 1000.687079][T25128] IPVS: persistence engine module ip_vs_pe_ [ 1000.687079][T25128] ip not found 15:26:05 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 15:26:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$RTC_AIE_OFF(r0, 0x7002) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x23, @private0, 0x5}, @in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00', 0x7ff}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x98) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:05 executing program 0: getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) 15:26:05 executing program 3: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x2, 0x0]}]}}}}}}, 0x0) 15:26:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x106) 15:26:06 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fstatfs(r2, &(0x7f0000000340)=""/240) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000}, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000140)={0xd8, 0x9, 0xd650, 0x1}) [ 1001.497983][ T9096] usb 6-1: new high-speed USB device number 19 using dummy_hcd 15:26:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f0000000280)={0x1f, 0x5, 0x4, 0x0, 0x3, {}, {0x1, 0x0, 0x5, 0x5d, 0x1, 0x7, "18df9bec"}, 0x0, 0x3, @fd, 0x4, 0x0, 0xffffffffffffffff}) fremovexattr(r1, &(0x7f0000000000)=@random={'security.', '#,*+\'\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}], 0x38) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000108000000000000020000000000596029738e4c3892bd020f3269260b96d997c810b13d2c4badf3b79bc169d96a08ed1fafd8b16cad124ea06352588fbd02233a30e9d71f109b07c14575cf87a96b40fa9ce8000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:06 executing program 3: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x2, 0x0]}]}}}}}}, 0x0) [ 1001.737821][ T9096] usb 6-1: Using ep0 maxpacket: 8 [ 1001.858726][ T9096] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1001.866978][ T9096] usb 6-1: config 0 has no interface number 0 [ 1001.873483][ T9096] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1001.884846][ T9096] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1001.896194][ T9096] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb 15:26:06 executing program 0: getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) [ 1001.905547][ T9096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:26:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x106) [ 1002.147747][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1002.155210][ T9096] usb 6-1: config 0 descriptor?? [ 1002.220292][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1002.225462][ T9096] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input22 [ 1002.413222][ T8693] usb 6-1: USB disconnect, device number 19 [ 1002.419826][ C1] xpad 6-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1002.420058][ C1] xpad 6-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1002.439387][ T8693] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:26:07 executing program 3: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000100)={0x0, @raw_data="08bec0438aede4c59f2feb189391a8e474f02bce7ccaf95a081a67949e4150dd053b2fe474dfc92cda0ea12a115c80d1dd57b9b6f5138f02732965f573b9b0726bcc6bc52ff74304d7d4a6fc69f1b0fd28553c5c37b395f9a11a26354840b67d80cbfe813ae18d35be3738c5daa7f63347ce552fd26ef4a7dbb3db2813baa939134ff1058ad50d759a27a93b0df59dd7537c4c395c9ee23e549a3012890292c9628fe27e7824e0bbc54264c1d7030810d431ab9a59de83175a6438d61f6d59d55873dee8044e0fe7"}) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) getpeername(r0, 0x0, &(0x7f0000000080)) [ 1003.237769][ T8693] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1003.480033][ T8693] usb 6-1: Using ep0 maxpacket: 8 [ 1003.618976][ T8693] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1003.627328][ T8693] usb 6-1: config 0 has no interface number 0 [ 1003.633852][ T8693] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1003.645372][ T8693] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1003.656596][ T8693] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 1003.665849][ T8693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.779163][ T8693] usb 6-1: config 0 descriptor?? [ 1003.831676][ T8693] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input23 [ 1004.041025][ T8721] usb 6-1: USB disconnect, device number 20 [ 1004.047674][ C1] xpad 6-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1004.056462][ T8721] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:26:08 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x6, &(0x7f0000000240)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000e40)=ANY=[], 0x1378) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)="9b", 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) 15:26:08 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000300)={{r3}, "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"}) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = openat$proc_capi20(0xffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x10000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x19, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4020a}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xed}]}, 0x28}}, 0x0) 15:26:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_getnetconf={0x1c, 0x52, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x5e}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4884}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070500000040e4a1a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x50}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x8, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15:26:08 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x106) 15:26:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x4e, 0x0, "79365517136fb2b2078584963528836ff20ca9ebdd3b91d72296e832ba6a8bfea1953c83623e661e132038aa6e6238ad5b68c06d85d8c0b07e229dd53dd337506959bb24fa66b0aeb0f68f63cbb6d82b"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) close(r0) 15:26:08 executing program 0: getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) [ 1004.426458][T25228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1004.508702][T25233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25233 comm=syz-executor.1 15:26:09 executing program 0: getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) [ 1004.620626][T25228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x106) 15:26:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x8, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_open_dev$mouse(0x0, 0x3, 0x40000) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000140)=0xaaa) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1004.667245][T25238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25238 comm=syz-executor.1 [ 1004.695052][T25244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25244 comm=syz-executor.1 15:26:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000040), 0x4) 15:26:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000200)="acbbb5081021300c6a9c54af966deb6f0e78093fc49da774393eefae1219908178420ae9e80989068712e6d7e868735a793c120d498630a6e4070c161f61d16afe56a8270c134d956a1c7d46ecbe7ea0ec9d237d5823540c7ac84ced9f") r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x1, 0x10000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000001780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)={0x133c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x75, 0x3, "3fe51dee6d2d30ef7ef9d6689654a1416863ee7a53c635876c35756bf3e8bd3208f1c258bc1ca164e63dbb619dddb1e192f42ea4b470422d8e1ac4d321fe59ff6afcfaa258dff7afa28c500a3cf8f166a6aff3957f1d343a16726e8487de687257f76ba3a551c684c6ad19013d0dd099e8"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x745c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xa, 0x3, "2d21b03b0ce7"}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x180, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe749}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x922}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @loopback, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x81, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd3c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @remote, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x768}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9a82}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x721}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdfd}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x133c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0280802}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xc8, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x88}, @NFTA_SET_USERDATA={0x76, 0xd, 0x1, 0x0, "2a336d4472f79097e16b0ed7adf0455b8748bcb1cab8005572013902b2450a1e437613782a562a3bd2cc5fc935242eb0990c54840f6c12df4313458c1e2e9eec6c3039f28dcb29d8c0a77ea5221197f4a7c0d44e824e7d3f51f4bcf8edced578786575932ae3f23d24b00f2ce2d9c1eafeed"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3c}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000010}, 0x40014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xbd}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) 15:26:09 executing program 5: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x29, 0x7f, 0x0, 0x0) [ 1005.091524][T25252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=25252 comm=syz-executor.2 [ 1005.192060][T25255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=25255 comm=syz-executor.2 15:26:10 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000580)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4001}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000008280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x8, 0x0, 0x8100a}}, 0x50) 15:26:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 15:26:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1005.536831][T25260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=25260 comm=syz-executor.1 15:26:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000400)="82000000", 0x4) [ 1005.584058][T25263] netlink: 'syz-executor.1': attribute type 28 has an invalid length. [ 1005.643300][T25264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=25264 comm=syz-executor.1 15:26:10 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) [ 1005.798738][T25266] fuse: Bad value for 'fd' [ 1005.831722][T25266] fuse: Bad value for 'fd' 15:26:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1005.963583][T25275] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1005.975326][T25275] team0: Device ipvlan1 failed to register rx_handler 15:26:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0) write(r0, &(0x7f0000000000)="bc", 0x337) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000200)={0x7}, 0x7) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe}) readv(r1, &(0x7f00000001c0), 0xce) 15:26:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESHEX=r1, @ANYRES16, @ANYRES16=r6, @ANYRES32, @ANYRESHEX, @ANYRES32=r5, @ANYRESHEX=r1], 0x4240a2a0) accept4$phonet_pipe(r2, &(0x7f0000000140), &(0x7f0000000200)=0x10, 0x80000) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$vcsu(0xffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x41c0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 15:26:10 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd50}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="050000002300060000068908ac14140de20000093c31b47d0510c147885b6e765e30637ec921f605", 0x2a}], 0x1, 0x0, 0x0, 0x50}, 0x0) 15:26:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) 15:26:11 executing program 3: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000040)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38}, 0x0) 15:26:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000140)={r1, 0x6, 0x401, 0x9}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) r3 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x1f, 0x800, 0x70bd2a, 0x25dfdbff, {0xf}, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x27, 0x0, 0x0, @pid=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x34}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='stat\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)={r7, 0x0, 0x6, [0x6, 0x80, 0x401, 0x6, 0x2, 0x8]}, 0x14) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffdc5}, 0x1, 0x0, 0x0, 0x2040410}, 0x40000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xc12, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x4, 0x7) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="010001352f0000000073b26315"], 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdeb}}], 0x3fffffffffffd33, 0x0, 0x0) 15:26:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x8f) sendmmsg(r0, &(0x7f0000001d00)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}, {{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev, 'veth0_to_bond\x00'}}, 0x80, 0x0}}], 0x2, 0x0) 15:26:11 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000480)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0bc5310, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = getpgrp(0xffffffffffffffff) tkill(r1, 0x1004000000016) 15:26:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000040)=""/249, 0x102) 15:26:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={0x0, 0xd0, 0x5f}, &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'xcbc-aes-ce\x00'}}, &(0x7f0000000280)="d88af26be19d87cabdf7b13e7f6717b948300637cf4d112518554b57db81d603e167feed438e352af32ba03fef22751a9de469c3c41c5b229629518414fa24487f96565ee74839ec936faea68374140383f856f8b9ba4bd5fc7963ea38c3fcb7368ab5ef26e0a4a39ec96b801ae7ad952faa069ed7ff26a9d6bd4d3b0366b31d45585546def3e70697c4fe878fd6b1e1031dc4b6b34a279e37f23bee6ff9a1302d79cb2050c4162d523deb4aa2def58e7477ab3ab9495c6c439708d602e7ab9829abd2c2ad69e6c32a606e2473887a9a", &(0x7f0000000380)=""/95) [ 1007.692762][T25319] netlink: 'syz-executor.2': attribute type 28 has an invalid length. [ 1007.723955][T25319] netlink: 'syz-executor.2': attribute type 28 has an invalid length. 15:26:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r1, 0x127, 0x0, 0x0, {0xa}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 15:26:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000140)=0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x74, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3}, [@IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "703de8c42451af9e99e8aa003d71cbaa"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6a474afebc04b01b97cff4f2a36ec58a"}, @IFLA_PORT_PROFILE={0x7, 0x2, ']@\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}]}, 0x74}}, 0x20004004) 15:26:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 15:26:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000108000000000000050000000000f60ca16725a75786b82d1ea5e302fba92781ce8dfcb8c69408952da6804e28e678c2a455e57c", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:12 executing program 0: unshare(0x2c020400) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000140)) 15:26:13 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000480)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0bc5310, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = getpgrp(0xffffffffffffffff) tkill(r1, 0x1004000000016) 15:26:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000040)=""/249, 0x102) [ 1008.681992][T25344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:13 executing program 0: timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:26:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0x2, 0x98, 0x1000, 0x2637}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000140)={0x0, 0x4}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:14 executing program 0: timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:26:14 executing program 5: timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:26:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000014ff5d822b40800002000000000", @ANYRES32=r2, @ANYBLOB="400000000000000008001ce9ee000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x4) 15:26:14 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000480)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0bc5310, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = getpgrp(0xffffffffffffffff) tkill(r1, 0x1004000000016) 15:26:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000040)=""/249, 0x102) 15:26:14 executing program 5: timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:26:14 executing program 0: timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:26:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000004c0)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x67}, 0x16, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8001, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', r3, 0x2f, 0x9, 0x9, 0x3, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x80, 0x78ca, 0x40, 0xffffffff}}) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@bridge_dellink={0x134, 0x11, 0x200, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x4000, 0x100}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'batadv_slave_1\x00'}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x49d}, @IFLA_VFINFO_LIST={0xb0, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x0, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x61, 0x97, 0x9b}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x267, 0x100, 0x88a8}}]}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8000, 0xe90, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x162, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x64}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0xfffffffb, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xa5, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0xfffffffd, 0x5}}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x50}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6], 0x4240a2a0) dup3(r1, r3, 0x80000) r8 = semget(0x2, 0x4, 0xb8) semctl$SETVAL(r8, 0x4, 0x10, &(0x7f0000000140)=0x3) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:15 executing program 0: timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:26:15 executing program 5: timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:26:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0xbaa) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000200)={0x5, 0x3ff, {r2}, {}, 0x100, 0x200}) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0002002dbd7000fbdbdf250280801fff01fe0201230000"], 0x1c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) 15:26:15 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000480)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0bc5310, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = getpgrp(0xffffffffffffffff) tkill(r1, 0x1004000000016) 15:26:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000040)=""/249, 0x102) 15:26:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7ff) shutdown(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 15:26:16 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') sendfile(r0, r2, 0x0, 0x23) 15:26:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000140)=0x3f) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) 15:26:16 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="050f19007488"]}) 15:26:17 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x4) socket$netlink(0x10, 0x3, 0x0) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x4900, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0x7, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffdab}, 0x1, 0x0, 0x0, 0x4040}, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write(r2, &(0x7f0000000280)="2e0b558cebfb1e662fbcea206a18b9fc9703", 0x12) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x48100, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getmulticast={0x0, 0x3a, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x3c}}, 0x0) 15:26:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x101082, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='veth1_macvtap\x00', 0x10) getsockopt$sock_int(r5, 0x1, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x4, 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00000000000005000000000000000000"], 0x28}}, 0x0) 15:26:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000b04fcff", 0x58}], 0x1) 15:26:17 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0xb01, 0x0) [ 1012.840331][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1012.918470][ T3487] usb 1-1: new high-speed USB device number 23 using dummy_hcd 15:26:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$vcs(0xffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80241, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000240)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) [ 1013.157968][ T3487] usb 1-1: Using ep0 maxpacket: 32 [ 1013.361437][ T3487] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1013.370603][ T3487] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1013.381320][ T3487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1013.591896][ T3487] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1013.601554][ T3487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.609893][ T3487] usb 1-1: Product: syz [ 1013.614160][ T3487] usb 1-1: Manufacturer: syz [ 1013.619023][ T3487] usb 1-1: SerialNumber: syz [ 1014.028031][ T3487] usb 1-1: 0:2 : does not exist [ 1014.059501][ T3487] usb 1-1: USB disconnect, device number 23 [ 1014.748457][ T3487] usb 1-1: new high-speed USB device number 24 using dummy_hcd 15:26:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x1, 0x0, 'queue0\x00', 0x5}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$rose(r3, &(0x7f00000002c0)=@short={0xb, @remote, @remote, 0x1, @bcast}, &(0x7f0000000300)=0x1c, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'sit0\x00', r2, 0x4, 0x0, 0x3f, 0x5, 0x20, @private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10, 0x40, 0x9994, 0x7fffffff}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x51, 0x1c, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 15:26:19 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x5) setresuid(0x0, 0xee01, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) setgroups(0x1, &(0x7f00000000c0)=[r0]) setregid(0x0, r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) 15:26:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x7b, 0x7f, 0x2, 0x0, 0x62, 0x4, 0x40, 0x20, 0x4, 0xfd, 0x5b, 0xff, 0x0, 0x1, 0x614514e0, 0x1, 0x2, 0x7, 0x8, [], 0x5, 0x5}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000140)) 15:26:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5434, 0x0) [ 1015.011063][ T3487] usb 1-1: Using ep0 maxpacket: 32 [ 1015.133710][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1015.218373][ T3487] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1015.227587][ T3487] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1015.238068][ T3487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1015.549296][ T3487] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1015.558736][ T3487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.566820][ T3487] usb 1-1: Product: syz [ 1015.571312][ T3487] usb 1-1: Manufacturer: syz [ 1015.576011][ T3487] usb 1-1: SerialNumber: syz 15:26:20 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:26:20 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@cachetag={'cachetag', 0x3d, '*,$'}}]}}) 15:26:20 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1071fe, 0x0) sendfile(r0, r0, 0x0, 0x0) 15:26:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/wireless\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000340)={0x484, 0x13, 0x400, 0x70bd2b, 0x25dfdbfe, {0x2b, 0x81, 0x7f, 0xe0, {0x4e21, 0x4e24, [0xc0, 0x2, 0x0, 0x9], [0x40, 0x0, 0x8000, 0x3], r4, [0x1, 0x81]}}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "186ec717d95c419ae9722e235652e37833fd42f3488b19db23030ec20c02fd81d9834be09208d71436"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "08e645c73cabd266c0c8d269f5663a0d36eac1227f6a0955fc21177c0a42376a5a56a3fe9e41040471749dad33dd22987f8bf1894372f50f9b9947c77f39ba8d3108ab14821d58be7ecae7b3c60293a3a11617a1e752a5f97097f900ef94f64f3a40a757a2eaf3498201fd41e0f7e11fabecb44266c52114ab34df075b84a64cc16dcb2487a6cdc6a6db0c387108bef26be3f6cabf3d3f58aeebfcaa8085b978"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "84367e7343f224188e6dc8f42932daedcd2f7cbd81bb9970311de2cf0357d56c3aa9db93efac891a6a753e52bd24c5d06e36099e5e0d3d93cb63ae44a2859d6ed3a73361107a7c0d5bc4285cb919501ac9840b6d68154b05a5a5aeba991997ddc0fc6950cbe227e47c401e0e1380dc236f5b48fd7aeaa008"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "4f86b1de8a5b34d8ec240e8bab18"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "2f36bff1023a81996f737156b9bf2e0199a024407dcf78f065b9402898e42678e1d6a1aca3ed07d12ce76be1584312de327bfae9f903a2a5678984c3b8ba6210ee0b338b87bbcadeb64cf1c469239518680d479c6e256304397fee41a1b21d52009700d0e30de61fc477c25ac95b5f6273155f7167ad85d1cecd79ff88d5dfb00c48b5bc50a4b71672ee79ae7fc21bf2bce553c564c192f3b65f463e3b51ae9e99bb77eedcf2b72dc40fbb0b8fb4ee552f6a38ebe680"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "4b6c8dc4f08a4e87e5f7ee26c891fa46d1ca966e269721668d9288b83fbc77e6d83ec1840679e626c017a37516693e669c21ff0cd731c818a2f8592855c8c7a3e8acc74bc7fc89582f3f0886bea85a48557b3e2dda334481fe04370273f2be52e9c1974337b9d22b76696f80d6ab807dd36a4be640b33f9612ddfa3dbbed0aeb4b61990eff49f7052b306dfdfc0a882305bcbfd3848cb96668a9534a6aa7d535365e3230b1afd4"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e593715ef9719c1de74ac7d377"}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "ad6e55cff96c164f055efdc01275251bea7c1e61b10a8a96b431c363032631e074a0d7c7269cecaf490b0e54618183cde50818557aa6f4e9f79be52211bbda7a48cf0c9d412b15b8709ff9449cdefd971fcfa30c37347d72a07465b61af1c4d5349efa132ca852bbd7bfaf6a8743134d5213e89d17f5256f402b8de1c7d48e03370b5708aa363e05ab6e5c086cf84d6511bc54fbadd77706658b0430e378c2ab631eff499b43489087a3"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "2fa9bd0193039cfa0ff2a98d8fea2c5da142c593e4bb9edf9e121b543e47fc5971fd40236a3422e42a3abc1915511778475773ef09447ebba0ea43c3bddbfd8ff5655fccd1d5f051954e19184d4d0d2c5584725272"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "de70a1be70eebf4d884af4560f52a803644a9739ddd64c8c0d6ce59512517e1079b0f5ea9b0309b83fd46e395bd5ac1047d350c2247f025b18ec7b76d7f7debbaa99d416a3d6a831"}]}, 0x484}, 0x1, 0x0, 0x0, 0x5}, 0x40805) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000240)={0x1d, 0x0, [], [@pad1]}, 0x10) 15:26:20 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x1, 0x0) write$char_usb(r0, &(0x7f0000000440)="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", 0x1000) [ 1015.788038][ T3487] usb 1-1: can't set config #1, error -71 [ 1015.832193][ T3487] usb 1-1: USB disconnect, device number 24 15:26:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070500000040e4a1a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000180020002c33a699bd7000fbdbdf251c0000050000ff1200d8ba5e63e023ba932a1e1e4a86d47154b28b88735e6c4784cb3b37a7d146fa31802a53c9db38246a92642b7d6653c734644c6b63744f8adaa871b9e71d6f65f85d4f2a3390d69c4084b698ed5dbb8b6a20f4de32e1e9a33f67285716b93e1d74754115177359bf356b4c6fa9f4c04004189dbd2b7f93ed639925cd9bb5a042d9883a6bd918c35169f3de97087b6383d40fc185ab9f178125410c9b66909636133949e1cddf4389a06ad597b3eeca6aa0bcf92a28310803826796b2cfa23e154fe846fa903288bb6bbca43346db"], 0x1c}}, 0x840) [ 1015.988059][ T28] audit: type=1800 audit(1600183580.548:89): pid=25510 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16290 res=0 [ 1016.197941][ T28] audit: type=1800 audit(1600183580.758:90): pid=25516 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16375 res=0 15:26:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x6, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@link_local, @random="e0b85b100b38", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) 15:26:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00001f00ff77ff00000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d"], 0x6c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x54, 0x0) 15:26:21 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xc1007c01, 0x4f4000) [ 1016.647958][T25524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) [ 1016.815410][T25524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1016.941731][T25540] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1017.121151][T25546] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 15:26:21 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0186416, &(0x7f0000000140)={0x400, 0x1f, 0x6, 0x6, 0x4, 0x7ff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x100) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_deladdr={0x7c, 0x15, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x80, 0xc8, 0xfd, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x8, 0x9, 0x800}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x0, 0x5, 0x101}}, @IFA_LABEL={0x14, 0x3, 'ip6gre0\x00'}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x0) 15:26:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) accept4$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x10, 0x800) r3 = openat$null(0xffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x509000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8200200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x2}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x306}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4e1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 15:26:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 15:26:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000001fd8)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) migrate_pages(0x0, 0x80, 0x0, &(0x7f0000000100)) 15:26:22 executing program 0: io_setup(0x7, &(0x7f0000000280)=0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 15:26:22 executing program 5: futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, 0x0, 0x0) [ 1017.763436][T25557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25557 comm=syz-executor.1 15:26:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14c5d2a0b8ce0000005200000127bd7000fedbdf"], 0x14}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000140)) 15:26:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@ipv4_newrule={0x38, 0x20, 0x313, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'geneve1\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x100}]}, 0x38}}, 0x0) [ 1018.113503][T25565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25565 comm=syz-executor.1 15:26:22 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 15:26:22 executing program 0: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='nls=maccroatian,nls=a']) 15:26:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockname$l2tp(r1, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:23 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000001000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:26:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800530010000108000000000000124d00000000", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x21b, 0x4) sendto$inet6(r0, &(0x7f0000000080)="03042a01093060024003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801610002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4021, 0x0, 0x23f) [ 1018.996662][T25580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:26:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="1400000025000535d25a80648c63940d0124fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="1400000025000535d25a80648c63940d0124fc60", 0x14}], 0x1}, 0x0) 15:26:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)={0x88, 0x1, [], [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x6}]}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f8, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004044}, 0x48010) [ 1019.283439][T25581] ntfs: (device loop0): parse_options(): NLS character set a not found. Using previous one maccroatian. [ 1019.295277][T25581] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 15:26:24 executing program 5: r0 = eventfd2(0x3ff, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffa, 0x8) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r1 = eventfd2(0x0, 0x0) dup2(r0, r1) read$eventfd(r1, &(0x7f0000000000), 0x8) 15:26:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$bsg(0xffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x20000, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000200)=0x1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x2, 0x40000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f00000003c0)=0x7) write$capi20(r3, &(0x7f0000000380)={0x10, 0xff24, 0x4, 0x82, 0x7f, 0xcce1}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x2, 0x1, "ce6b8da3d223296ba5d81558b1820940a2eb0acea3332c0a030e16f34f40d471dcdad65a6bad2f6969d06b9c6c20e07dea83dd8edfef3e1b966ba411656d98aab682527af81c27"}, 0x57) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) connect(r0, &(0x7f0000000240)=@sco={0x1f, @fixed={[], 0x12}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="0000d5000000000008001c0075c8ccd8"], 0x28}}, 0x0) [ 1019.492532][T25581] ntfs: (device loop0): parse_options(): NLS character set a not found. Using previous one maccroatian. [ 1019.504116][T25581] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. [ 1019.569741][T25601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:26:24 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) dup2(r0, r1) 15:26:24 executing program 3: r0 = socket(0xa, 0x6, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0xb, 0x0, 0x0) [ 1019.712332][T25606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=25606 comm=syz-executor.2 15:26:24 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000a20000000000a00000e000008001b000600005a", 0x24) 15:26:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "ba9c1ef7cdf299fa2b34d11ac5295940107964e62ca10994e4dd2e0222d1693105615b4a10148c1997469fde12217625e9a44fa87696a1497db87f611eefc1256e93f3c5f3bc6a29011782de29e2ab69"}, 0xd8) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x26, 0x1, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$rose(r2, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1020.162014][T25621] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 15:26:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/3, 0x3}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15:26:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80044121, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef0000006071aa1efee5b82841c8ffd411b06bc585aa2e4ffc12557db829030c0932218c6d2f3a2da2dec3bcb08df8469ac0fb9ed8625cf8c0ca96038eb96367a0ea8cd563242ee3bc0066d971c058dd4a7f9c0ec2300148e047359d3f4f0300f880854b408c16fcf3bf9a3a24"], 0x28}}, 0x0) 15:26:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) 15:26:25 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=""/206, 0xce) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/180, 0xb4) 15:26:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f00000000c0)=@hci, 0x80, 0x0}}, {{&(0x7f0000001340)=@hci, 0x80, 0x0}}], 0x568, 0x0) 15:26:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280800021000010800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000007000/0x3000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) r5 = dup2(r0, r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '(-,\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_LOCK(r4, 0xb) 15:26:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/3, 0x3}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15:26:25 executing program 3: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='[d::]::'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 15:26:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) [ 1021.367572][T25652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25652 comm=syz-executor.2 [ 1021.456330][T25652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25652 comm=syz-executor.2 15:26:26 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=ANY=[@ANYBLOB='[0::]:6:'], &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 15:26:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000200)=0x92, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) 15:26:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x74, 0x2, 0x6, 0x1, 0xa000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 15:26:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101e010800"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:26 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=ANY=[@ANYBLOB='[0::]:6:'], &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 1021.971091][T15222] libceph: mon0 (1)[::]:6 socket error on write [ 1021.991413][T25675] ceph: No mds server is up or the cluster is laggy 15:26:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) 15:26:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/3, 0x3}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15:26:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @loopback}}]}, 0x30}}, 0x0) [ 1022.345211][T25693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7696 sclass=netlink_route_socket pid=25693 comm=syz-executor.2 15:26:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:27 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=ANY=[@ANYBLOB='[0::]:6:'], &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 15:26:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, [], 0x1c}, @loopback, 0x7, 0x3, 0x3, 0x400, 0x7, 0x200008}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010800004a00"/21, @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) [ 1022.645146][T25702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1022.652567][T25702] IPv6: NLM_F_CREATE should be set when creating new route [ 1022.659986][T25702] IPv6: NLM_F_CREATE should be set when creating new route 15:26:27 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=ANY=[@ANYBLOB='[0::]:6:'], &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 15:26:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/3, 0x3}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15:26:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) 15:26:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @loopback}}]}, 0x30}}, 0x0) 15:26:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'macvtap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x80047453, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000140)={0x3, 0xffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fchown(r4, 0xee01, 0xee01) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4c657424100001dd09ae4d000000000013000000000000000000000000090000000000fbcd6207afc75c0df8423de3996a7b1955b0e16c5e408225bb6cce1d2b576fe4803b99409300", @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x8}, &(0x7f0000000240)=0x8) [ 1023.183297][T25721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.264892][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:26:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 15:26:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$procfs(0xffffff9c, &(0x7f0000000300)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000340)=0x9) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1023.546755][T25741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 15:26:28 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @loopback}}]}, 0x30}}, 0x0) 15:26:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000140)={0x0, 0x7, 0x0}) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x5, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r3, 0x13b}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2100200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r3, 0x238, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x80) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000007007c9b00000000d281689608c32e64105a1cf38f05822ece8beae7c43e172dd8035e4e89182990c00464750d7056f532d1d2405fdc7235206090de0392"], 0x28}}, 0x0) 15:26:28 executing program 0: syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)={[{@nolargeio='nolargeio'}]}) 15:26:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0500006a75d1d7fbe6c52e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 15:26:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1024.336696][T25762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1024.372022][T25756] XFS (loop0): Invalid superblock magic number [ 1024.430455][T25767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1024.440405][T25771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="0400000f000000007aec6c8c91b91d22db59dd83636a5ab5f367062ebf5bced9ef56912334cbeb2490fd78782469902ddc2c34fd93d516eee33de06ea39a37de9e5f7a8d891129733a5fb527b3fc8b184beda4b0e6e18e449410fbcb1ff40962ec935e1aa001bd8ab3f2f3fbf1d20e7c37c703a0a44db18de9656c3b29bb0a4eb4b8c27e1f2d"], 0x28}}, 0x0) [ 1024.567086][T25756] XFS (loop0): Invalid superblock magic number 15:26:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @loopback}}]}, 0x30}}, 0x0) [ 1024.765154][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1024.825950][T25784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x7e}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 15:26:29 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpu.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r1, 0x4) [ 1024.935246][T25786] netlink: 'syz-executor.2': attribute type 28 has an invalid length. 15:26:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000200)=0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1025.192208][T25792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 15:26:29 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}, @IFLA_PHYS_PORT_ID={0x21, 0x22, "dd4bccd324e9009bfddc0790ec640c58f0fac84f2dc0ffbcea6bace5e5"}, @IFLA_WEIGHT={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15:26:29 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x80802, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@t={0x81, 0x4}], 0x8) 15:26:30 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbde20", 0x44, 0x3c, 0x0, @initdev={0xfe, 0x88, [0x0, 0xff], 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) 15:26:30 executing program 5: r0 = socket$inet(0x2, 0x3, 0xa3) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f0000000140)={@multicast2, @dev}, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x5, 0x0, 0x0) 15:26:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x4445}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000200)={0x45, {{0xa, 0x4e23, 0x1a06, @private2}}, 0x1, 0x6, [{{0xa, 0x4e23, 0x2, @local, 0xa34}}, {{0xa, 0x4e23, 0x7f, @empty, 0x1ff}}, {{0xa, 0x4e22, 0x80, @mcast2, 0x5}}, {{0xa, 0x4e21, 0x2, @empty, 0x7}}, {{0xa, 0x4e20, 0x4, @loopback, 0x3}}, {{0xa, 0x4e22, 0x3530, @remote, 0x4}}]}, 0x38c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002b000507d25a80648c63940d0324fc6010000a4002000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 15:26:30 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0\x00', 0x0, 0x85003, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x70820, &(0x7f00000000c0)={[{@noblock_validity='noblock_validity'}]}) 15:26:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, r1, 0x301, 0x0, 0x0, {0x11}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) 15:26:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f00000000c0)={0x0, 0x0, "74e928"}) [ 1026.950514][T25827] netlink: 'syz-executor.1': attribute type 28 has an invalid length. 15:26:31 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 15:26:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:26:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1027.398505][T25821] EXT4-fs (sda1): re-mounted. Opts: noblock_validity,,errors=continue [ 1027.478604][T25833] EXT4-fs (sda1): re-mounted. Opts: noblock_validity,,errors=continue 15:26:32 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0\x00', 0x0, 0x85003, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x70820, &(0x7f00000000c0)={[{@noblock_validity='noblock_validity'}]}) 15:26:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) [ 1027.782107][T25841] netlink: 'syz-executor.1': attribute type 28 has an invalid length. 15:26:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x2004c082) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 15:26:32 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x4020565b, &(0x7f0000000140)={0x3}) 15:26:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_init_net_socket$llc(0x1a, 0x6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0xf}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffffa7) [ 1028.142656][T25844] EXT4-fs (sda1): re-mounted. Opts: noblock_validity,,errors=continue 15:26:32 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0\x00', 0x0, 0x85003, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x70820, &(0x7f00000000c0)={[{@noblock_validity='noblock_validity'}]}) 15:26:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4020aea5, &(0x7f0000000000)) 15:26:33 executing program 5: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 15:26:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001080000000000080000000000002b7e90323038f2babd37474f42888c7349583f76b5e117be20fb64bf4b40900e4cf4161c35bee9c6c34e4c7e210c9e54a05d6a805891b71a089e2bd9ab9a0c51bb151f7e152d6d4b58fb9e6428049e5a1034eb8416b08ff428ae7e8f92c804663e8f0af05c4a0b7212346dc2a507ba40f00345b07cd9bd8a9731591b205424f5509424dd1cf0ff7422a6ac14085060dbe4932a643ef94cae2e9597b56740e36fe0ab6fcf3008e81a4e3fe5e5b796a247", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r0) 15:26:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000100000000087d4abf1ae066676a7b81dee677cf4345c3db0a07e8cdf204ab86905ad61b0c0f48ccdd14f3d5b0184713d58b0de326cfb730916e1c4f6455cef183a043f863c2ae5a0f09b9a3dd0e6ab90a890f6fef7886798472ea3f2dbac907790d0248f371fcb568c45584c0fdf0ffab33e163c4189d30693755612dcad181262093c7fd83d1321905e8b2964196d61265933b2a1455961b6e20c1832d4837fa17afe7f80d06249f851289aae952f09fee7fb3d2cde5b0f5d69eafae98466bc5139d732a28ccde6f63f35e4fa2df999329ab9f496f2d10b0cefad1c92"], 0x28}}, 0x0) [ 1028.891304][T25865] EXT4-fs (sda1): re-mounted. Opts: noblock_validity,,errors=continue 15:26:33 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @local}, @NL80211_ATTR_WIPHY={0x8}]}, 0x34}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000c80)=""/137, 0x89}, {&(0x7f0000000ac0)=""/148, 0x94}], 0x3}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x8}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x681}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 1028.976613][ T8724] Bluetooth: hci0: command 0x080f tx timeout 15:26:33 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x3, 0x0, &(0x7f0000000040)) 15:26:33 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0\x00', 0x0, 0x85003, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x70820, &(0x7f00000000c0)={[{@noblock_validity='noblock_validity'}]}) 15:26:33 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000140)=0x40000000) socket$netlink(0x10, 0x3, 0x0) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x20100, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00055638cc7000ffdbdf2500000000"], 0x14}}, 0x0) 15:26:34 executing program 0: r0 = open(&(0x7f0000000380)='./file0\x00', 0x2817e, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:26:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1029.794467][T25886] EXT4-fs (sda1): re-mounted. Opts: noblock_validity,,errors=continue 15:26:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 15:26:34 executing program 2: socket$rds(0x15, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x38, 0x803, 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0185649, &(0x7f0000000300)={0x0, 0x5, 0x3ff, r1, 0x0, &(0x7f00000002c0)={0x0, 0x75d, [], @p_u16=&(0x7f0000000140)=0x3}}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0000000d9b00004ae8263b00ef0000008c576d813b8ea40d7d1758a3704ced5af4d8328819071fea03cb322fcf4c907c8dab846f744c8d9d31f10b762ec82e8ed6a7d33d967e20a01498691a5164bd39e13d1d8593293a14e1207815eab5cd69602050cda998e1f82f02080cc0cfdcb666cf8dcd5253e99996497e8510cbeed0a194"], 0x28}}, 0x0) 15:26:34 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c505, 0x0, 0x0, 0x0, 0x0) 15:26:34 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="bc") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000040)=ANY=[]}) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0xfffffde9, &(0x7f0000000040)}, 0xc6) 15:26:34 executing program 3: io_setup(0x5, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x20000005002}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040), 0xa}]) 15:26:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008001c62ef000000"], 0x28}}, 0x0) 15:26:35 executing program 5: r0 = socket(0x1e, 0x5, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x10000}, 0x10) r2 = socket(0x1e, 0x805, 0x0) sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@tipc, 0x80, 0x0}, 0x0) [ 1030.591428][T25903] IPVS: ftp: loaded support on port[0] = 21 [ 1030.635266][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1030.708358][T25914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:26:35 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1030.904977][T25942] IPVS: ftp: loaded support on port[0] = 21 15:26:35 executing program 3: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000fb0000000000090000000000000038"], 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 15:26:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)={[{@swidth={'swidth'}}]}) 15:26:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000007c15bf57ed58a664a77d315200200118"], 0x14}}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x47, 0x101) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000200)={0x7, 0x100, "c1fd97e75f0e922c4510c5119694166944d96f56af6ea5960af08071992edc0f", 0x4, 0x3f, 0x838c7c, 0x9, 0x11}) [ 1031.189525][T12642] tipc: TX() has been purged, node left! 15:26:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1f, 0x803, 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000140)={0x2d}) 15:26:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0xd}, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020662a, &(0x7f0000000040)) 15:26:36 executing program 0: syz_emit_ethernet(0xf2, &(0x7f0000000280)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x12, 0xe4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x32, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x771, @empty, @local, {[@ra={0x94, 0x4}, @end, @rr={0x7, 0xf, 0x0, [@empty, @remote, @rand_addr]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0xc, "51d48808530dfb390a80"}, {0x0, 0xa, "b798c3479ff47444"}, {0x0, 0xb, "ae0dc5f2009a607c2d"}, {0x0, 0x10, "519f3183fb0839f210a0576c73d0"}, {0x0, 0xe, "1eeec88ddc184f60902976b6"}, {0x0, 0x8, "1e916a2891e6"}, {0x0, 0x3, '\v'}]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@empty}, {@loopback}, {@private}, {@local}, {}, {@remote}, {@empty}, {@multicast1}]}, @generic={0x0, 0x6, "b1e203bf"}, @rr={0x7, 0x3, 0x5f}]}}}}}}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x100000000}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @empty}, 0x8, 0x40, 0xff22, 0x480, 0x9}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x44004) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) fchdir(0xffffffffffffffff) unshare(0x40000000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x20002, 0x0) write$sequencer(r1, &(0x7f0000000100)=[@t={0x81, 0x5, 0x0, 0x0, @TMR_WAIT_ABS=0xbf}], 0x8) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) [ 1031.624021][T25979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5500 sclass=netlink_route_socket pid=25979 comm=syz-executor.1 15:26:36 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1030f2f, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 15:26:36 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 15:26:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="31d0d6678709d2939ece601b9e5eb125993251a3bac6f24c56c55b711908c1d51f5b6fda128a75fe", @ANYRESHEX=r2, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15:26:36 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prctl$PR_GET_THP_DISABLE(0x2a) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070500000040e4a1a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@ipv4_delroute={0x80, 0x19, 0x100, 0x70bd2a, 0x25dfdbfb, {0x2, 0x10, 0x0, 0x6, 0xfc, 0x1, 0xfe, 0xa, 0x2c00}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_ENCAP={0x2c, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x28, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x20, 0x3, "c792b95938e94abced7322056d3fad7f86693a2bbccd25d9a133007e"}}}}, @RTA_OIF={0x8, 0x4, r8}, @RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_OIF={0x8, 0x4, r1}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) [ 1032.002580][T25990] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 15:26:36 executing program 5: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 1032.550053][T26003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:26:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x10}}, 0x24, 0x0) 15:26:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x11, 0x85, 0x93, 0x40, 0x546, 0x3273, 0x8e05, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9, 0xf1, 0x88}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:26:37 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x2) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) readv(r0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) 15:26:37 executing program 4: unshare(0x400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind(r0, 0x0, 0x0) [ 1033.355987][ T8693] usb 4-1: new high-speed USB device number 23 using dummy_hcd 15:26:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070500000040e4a1a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x5, 0x3, 0x5, @mcast2, @private0={0xfc, 0x0, [], 0x1}, 0x80, 0x80, 0x20, 0x2}}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400040}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x8000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000000030000000000000008", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) [ 1033.717333][ T8693] usb 4-1: New USB device found, idVendor=0546, idProduct=3273, bcdDevice=8e.05 [ 1033.726697][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.778406][T26029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1033.854002][T26036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=26036 comm=syz-executor.2 [ 1033.894505][ T8693] usb 4-1: config 0 descriptor?? [ 1033.975056][ T8693] hub 4-1:0.0: bad descriptor, ignoring hub [ 1033.981507][ T8693] hub: probe of 4-1:0.0 failed with error -5 [ 1033.993124][ T8693] gspca_main: sunplus-2.14.0 probing 0546:3273 [ 1034.102401][T26029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1034.153040][T26036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=26036 comm=syz-executor.2 15:26:39 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setreuid(0xee00, 0xee00) write$P9_RSTATu(r0, 0x0, 0x90) 15:26:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 15:26:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x13) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1f, 0x800, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="0000ffff0004000008001c00ef000000"], 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc01cf509, &(0x7f0000000200)={r0, 0x3ff, 0x3, 0x3}) tee(r5, r7, 0x9c44, 0x4) 15:26:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073014b00000000009500000000000000a86fd191c2137edf1176df08a7311c127b7a2202d04563c7412a1426671cc46a7c37227bd5b8f7c7ccac64c34b8cf403b7be3d59bca5ff6c13ff3f183111b3"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 15:26:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800000000000000afb9890e34", @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) [ 1035.046610][ T8693] gspca_sunplus: reg_w_riv err -71 [ 1035.052115][ T8693] sunplus: probe of 4-1:0.0 failed with error -71 15:26:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0), 0x6) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 15:26:39 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000020c0)) [ 1035.179505][ T8693] usb 4-1: USB disconnect, device number 23 [ 1035.815474][ T12] usb 4-1: new high-speed USB device number 24 using dummy_hcd 15:26:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x755, 0x2626, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) 15:26:40 executing program 2: rmdir(&(0x7f0000000000)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001080000000000000000000000005a0a83b92b0f56869988f4454274b7da3f5a835a5eec4ac1d09bac3b0aca6fdc8f0c1621830a5c396ea559c3dbb571a31c6ac24f2b82e82e06889c1b5942b2c81587194365e6a8e34cd151c6ba1a9a942bc1d6b219ce124042c45d81c5647f21561733fdb2dfc7b6df080afb0765d0ab2d56fc4c8f249eef0c5dc3e12290a093a7b56a6884c9b8ceec2afa7e3a3d354d50fe43f0d8d7", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:40 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20002007}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 15:26:40 executing program 4: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) 15:26:40 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r1, 0xb03, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 15:26:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="be0e536554a9c0ac2f213c3cd825770a66fedf66990a5c2db55b63c72f9ad5d1894a3ca5e88481d58cb760571a", 0x2d}, {&(0x7f0000000240)="9f3471c13db543f34161bd70bda4d174d261bcdc0fbe42110cd971d0fbf501b65a71d67f073d8d3ec430fb3d656d883cd96850480746304c0d11b1d2b99449a1b00b6b341c97b94a54c8114fb138570cfa3df8f181b39ba56f2ba4782acbf400f39b187b86b4408819197b66d7ccfe25ddca0aa023072e79e443327a6e876581f94a0c80df48bafc91a3f0bde3c5a1be617e7cbc2ab67a994fc9a9def4e52f15deeb16f86d29e6a35b0debaf7ae0c6e0c5eb5ed35db178956b40cdc7b81142a4781c", 0xc2}, {&(0x7f0000000340)="223dd0fbb429852aae216ab53393445cd9fc65a3359e790976477a2bea71b8f9ccdfa8619a6fd5ebe45d75b307b0e9a455fcf002b7f6f93ce2457c4643e50c5c7291a49084db11bd0d8329c8908e5e511384147d3d08904da1b69be080ddc3bc3a683a04c59d69ccda7e352bdd46456009f1e35460f3a7f2390067efd5332f267271a172a368c2abbf2f65965572037d5171e94f02d305efc03a5bb12d4bcc00473e62", 0xa3}], 0x3, &(0x7f0000000440)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0x5, [{@broadcast, 0x6}]}, @end, @noop, @noop, @timestamp_addr={0x44, 0x24, 0xef, 0x1, 0x8, [{@remote, 0x1}, {@rand_addr=0x64010100}, {@local, 0x4}, {@rand_addr=0x64010101, 0x3}]}, @timestamp_prespec={0x44, 0x1c, 0x5b, 0x3, 0x9, [{@rand_addr=0x64010102, 0x1}, {@private=0xa010102, 0x1}, {@broadcast, 0x7fff}]}, @timestamp_prespec={0x44, 0x1c, 0xfc, 0x3, 0x0, [{@loopback, 0x7}, {@local}, {@empty, 0x6}]}, @timestamp={0x44, 0x10, 0x22, 0x0, 0x6, [0x1, 0xffff, 0x7ff]}]}}}], 0xb0}, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1036.156685][ T12] usb 4-1: device descriptor read/all, error -71 [ 1036.247970][T26089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1036.344103][T26099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:26:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r4}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f2f73838b9ce96fd5033bcbeda3437585028607bd364444a4eb60a3e27291ae5c7320d4c39f850d6fad8e5b3143f5579baaf82ef34ddc6023713cf4a297dd185", 0x40) 15:26:41 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) 15:26:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00000000000092b45f0008001c00ef000000"], 0x28}}, 0x0) 15:26:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xe, &(0x7f0000651000)=""/240, &(0x7f0000000100)=0x483) [ 1036.916333][T26118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1037.086385][ T12] usb 4-1: new high-speed USB device number 25 using dummy_hcd 15:26:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f2f73838b9ce96fd5033bcbeda3437585028607bd364444a4eb60a3e27291ae5c7320d4c39f850d6fad8e5b3143f5579baaf82ef34ddc6023713cf4a297dd185", 0x40) [ 1037.346113][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1037.465459][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.476886][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.487091][ T12] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40 [ 1037.496526][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.831559][ T12] usb 4-1: config 0 descriptor?? [ 1038.320135][ T12] aureal 0003:0755:2626.0005: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.3-1/input0 [ 1038.508036][ T3487] usb 4-1: USB disconnect, device number 25 [ 1039.315393][ T3487] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1039.554587][ T3487] usb 4-1: Using ep0 maxpacket: 32 15:26:44 executing program 3: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c40)={&(0x7f0000000200)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:26:44 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1132}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 15:26:44 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x7, 0xfeaa, 0x4, 0x101, 0x2, 0xfffffffe, 0x100}, {0x7, 0x1, 0x3, 0x7ff, 0x3, 0x400, 0x2}]}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x1f) r2 = socket(0xf, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:44 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[d:]]:'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 15:26:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000200)=@bpq0='bpq0\x00', 0x10) 15:26:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f2f73838b9ce96fd5033bcbeda3437585028607bd364444a4eb60a3e27291ae5c7320d4c39f850d6fad8e5b3143f5579baaf82ef34ddc6023713cf4a297dd185", 0x40) [ 1039.775112][ T3487] usb 4-1: device descriptor read/all, error -71 [ 1039.981583][T26152] libceph: resolve 'd' (ret=-3): failed [ 1039.987675][T26152] libceph: Failed to parse monitor IPs: -3 15:26:44 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) 15:26:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f2f73838b9ce96fd5033bcbeda3437585028607bd364444a4eb60a3e27291ae5c7320d4c39f850d6fad8e5b3143f5579baaf82ef34ddc6023713cf4a297dd185", 0x40) 15:26:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:44 executing program 5: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x0) 15:26:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newnexthop={0x28, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x2}, @NHA_GROUP_TYPE={0x6}]}, 0x28}}, 0x0) 15:26:45 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40002, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@l={0x92, 0x0, 0xb0}], 0x8) 15:26:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}]}, 0x4c}}, 0x0) 15:26:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x1e282, 0x0) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000200)=0x5) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:45 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 15:26:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, 0x8) r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x1, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000200)=""/6, &(0x7f0000000240)=0x6) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002006d0740800000000000000e0fa23b2ad8100000000", @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x6c}}, 0x0) 15:26:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61129c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000560600000fff07006706000002000000070600000ee60000bf250000000000006b350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b7a800"/196], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 1041.553511][T26193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1568 sclass=netlink_route_socket pid=26193 comm=syz-executor.1 15:26:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtaction={0x7a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x75c, 0x1, [@m_mirred={0x1e8, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0xffffffffffffff99}, @TCA_MIRRED_PARMS={0x20}]}, {0xdc, 0x6, "cc9850e2d31b1df64c07e668e79ba869152668ce9a54c8a6b217fbf45707202e2ab60ba21ff3b2b1946a519ec63a2e0842f7dcc005433994760fd0fe8e12a64ce1b3af0b8b1bd7dd6b17ecc7382a6ed08a0d304b785538c5b9eac7b6fee87ba30a3b7afd9521a658ec12ca4891eee2e15cfe360d2afbb04ccf2805879a1c60146f9c06c459ca5409b42cc7bc7bac1a15b7ee0204144847c976cbc2a5e014e51647e8eca3d345a63552877d6a9a8d62f167ba4cb8b11b052a88afaf83b22c65101a5fcaadf721897cf456664375a3fca897511abe157287e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_tunnel_key={0x104, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x91, 0x6, "465d22cd029247bfa0e29f742c3791349c09aff180ef2570e3b7e4e6e8aef84fbb0d3c748d72b95ec3580ae6de0cd4a53089536d3a014c1e02cb1edb59f20a42e72d698523eee6745bfcb23ed38d7c554b96b2b6b9dcb2762ab64fb9ff335611e538ae3a0fa5e8bb69b0d5d4cf6f4a37e884c5f51685937fe5adf7dd68a06ade11a4a1c7a782fbc72d91464a1b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x158, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x98, 0x6, "f3f479f3a5a67407779947661c02949a315de7eef0274b7060581f69dc2eca9d1df101e7f176dad0841b3e723c6f1ee1562bf42f86a907c132715496a5ce204de2bc3aeac932a68e91e49c057cdd27d5c98b9b54c1a36c9cdce5d12b7128d4176dba50b2032fb79a06dd014d7fa238682c8a305923eb3f9328543975eda26afb2234c6c3ead941095ad46f19ba42d83fd508fc6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x38, 0x0, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0xb, 0x6, "42567053e72f6d"}, {0xc}, {0xc}}}, @m_nat={0x1d0, 0x0, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @multicast1}}]}, {0xdf, 0x6, "5b00b916d23d2d79bfd61124e3155018b392cb3141c165a633781a433d433fa974537e65ffb9ec0b6cbf948bd8cc91ba08a27e91706e04741c3cdfcd107c533cd9927a3754c30ef1d3cfa9dc895239577428b3fd75d08405c4a332494f7caca7ce62bb4934498f46eec4888a4a9e487d2d613c369d15f5f0e1c6a3170452de3996125fe3ea29a34738b4bbd73c5b84e813647557ea30c9c53d996bf2ed5682bcc4ef9cd3e62ebd80d5bd3d672f3da988a247c35058f026ee7ae2ef90bf0edcfb19882ad81939db4ccfb808c625fbbfb542cb990a858852efd92f96"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x10c, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x9a, 0x6, "830cce30366288fe90c5e9e141da601022a0339d2522c5339f7eab5764217b328b2b456df899701aae52af4263d7944ce817b4d843e01d634f789a1aef9e4c5ab7de346691ca82ecce911c57fdc3f1e147e523de45531c0b6410c7fb8aa1156cca13ec8986cd5725827d638cf786e163b6bfe034490991c4d9ea35456f9138cec4eee76c7d1715004eef439675dcc47cb33538196804"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x7a0}}, 0x0) 15:26:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800dd00d88c0108000000010000000000000000e5a57a0278a9fb8d86cc31a4458369d1713ba9ab6f764e040d9c5663dcef6caa07970600000000000000cd9734a799694213cc4e4d53b0f4e217fdf366cfa9afba007e3f7439742ea8ccded38914a4e25380c6b7ff765b9f56792422e881f297205d18386cef60d71ddc96d290910329f4", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:26:46 executing program 5: syz_emit_ethernet(0xaa, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 15:26:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000140)={0x1ff, 0x7fffffff, 0x4, 0x1, 0x4, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:46 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x5, &(0x7f0000000000), 0x20a154cc) 15:26:46 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 1042.084912][T26204] netlink: 788 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1042.094746][T26204] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1042.104471][T26204] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 15:26:46 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x28, 0x1, 0xffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffd86}}, 0x0) r1 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x20005, 0x488200) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000200)={0x2, 0xa, 0x6, "16f6532bf542c5291b739e4cad1c92c272b7be08cb2bc751e777615f117a03a471211801a759a74ef5a551eebcdd11fa5c5b92dc77a3e047391acd09", 0x6, "56278d181640f619ac31e70d233f2cf2cfa9beb34736ec46a41da5648296e61e83644ae5add634bf0ccd0e94fb49e7b18d29feebc0257e54ba69425c", 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtaction={0x7a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x75c, 0x1, [@m_mirred={0x1e8, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0xffffffffffffff99}, @TCA_MIRRED_PARMS={0x20}]}, {0xdc, 0x6, "cc9850e2d31b1df64c07e668e79ba869152668ce9a54c8a6b217fbf45707202e2ab60ba21ff3b2b1946a519ec63a2e0842f7dcc005433994760fd0fe8e12a64ce1b3af0b8b1bd7dd6b17ecc7382a6ed08a0d304b785538c5b9eac7b6fee87ba30a3b7afd9521a658ec12ca4891eee2e15cfe360d2afbb04ccf2805879a1c60146f9c06c459ca5409b42cc7bc7bac1a15b7ee0204144847c976cbc2a5e014e51647e8eca3d345a63552877d6a9a8d62f167ba4cb8b11b052a88afaf83b22c65101a5fcaadf721897cf456664375a3fca897511abe157287e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_tunnel_key={0x104, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x91, 0x6, "465d22cd029247bfa0e29f742c3791349c09aff180ef2570e3b7e4e6e8aef84fbb0d3c748d72b95ec3580ae6de0cd4a53089536d3a014c1e02cb1edb59f20a42e72d698523eee6745bfcb23ed38d7c554b96b2b6b9dcb2762ab64fb9ff335611e538ae3a0fa5e8bb69b0d5d4cf6f4a37e884c5f51685937fe5adf7dd68a06ade11a4a1c7a782fbc72d91464a1b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x158, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x98, 0x6, "f3f479f3a5a67407779947661c02949a315de7eef0274b7060581f69dc2eca9d1df101e7f176dad0841b3e723c6f1ee1562bf42f86a907c132715496a5ce204de2bc3aeac932a68e91e49c057cdd27d5c98b9b54c1a36c9cdce5d12b7128d4176dba50b2032fb79a06dd014d7fa238682c8a305923eb3f9328543975eda26afb2234c6c3ead941095ad46f19ba42d83fd508fc6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x38, 0x0, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0xb, 0x6, "42567053e72f6d"}, {0xc}, {0xc}}}, @m_nat={0x1d0, 0x0, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @multicast1}}]}, {0xdf, 0x6, "5b00b916d23d2d79bfd61124e3155018b392cb3141c165a633781a433d433fa974537e65ffb9ec0b6cbf948bd8cc91ba08a27e91706e04741c3cdfcd107c533cd9927a3754c30ef1d3cfa9dc895239577428b3fd75d08405c4a332494f7caca7ce62bb4934498f46eec4888a4a9e487d2d613c369d15f5f0e1c6a3170452de3996125fe3ea29a34738b4bbd73c5b84e813647557ea30c9c53d996bf2ed5682bcc4ef9cd3e62ebd80d5bd3d672f3da988a247c35058f026ee7ae2ef90bf0edcfb19882ad81939db4ccfb808c625fbbfb542cb990a858852efd92f96"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x10c, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x9a, 0x6, "830cce30366288fe90c5e9e141da601022a0339d2522c5339f7eab5764217b328b2b456df899701aae52af4263d7944ce817b4d843e01d634f789a1aef9e4c5ab7de346691ca82ecce911c57fdc3f1e147e523de45531c0b6410c7fb8aa1156cca13ec8986cd5725827d638cf786e163b6bfe034490991c4d9ea35456f9138cec4eee76c7d1715004eef439675dcc47cb33538196804"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x7a0}}, 0x0) 15:26:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@mcast1, 0x0, 0x0, 0x1, 0x1}, 0x20) 15:26:47 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000440)={r1}, &(0x7f0000000480)=0x8) 15:26:47 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000400000007000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}}, 0x0) [ 1042.728777][T26220] netlink: 788 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1042.738789][T26220] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1042.748520][T26220] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 15:26:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfe8a}]}, 0x1c}}, 0x1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f00000002c0)='/dev/vcsu\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e22, 0x1, @local, 0x2}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x5, @private0, 0xff}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}], 0xb8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r4, @ANYBLOB="000000f9ff2d0bff07001c0000000000"], 0x28}}, 0x0) 15:26:47 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 15:26:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x38}}, 0x0) 15:26:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtaction={0x7a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x75c, 0x1, [@m_mirred={0x1e8, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0xffffffffffffff99}, @TCA_MIRRED_PARMS={0x20}]}, {0xdc, 0x6, "cc9850e2d31b1df64c07e668e79ba869152668ce9a54c8a6b217fbf45707202e2ab60ba21ff3b2b1946a519ec63a2e0842f7dcc005433994760fd0fe8e12a64ce1b3af0b8b1bd7dd6b17ecc7382a6ed08a0d304b785538c5b9eac7b6fee87ba30a3b7afd9521a658ec12ca4891eee2e15cfe360d2afbb04ccf2805879a1c60146f9c06c459ca5409b42cc7bc7bac1a15b7ee0204144847c976cbc2a5e014e51647e8eca3d345a63552877d6a9a8d62f167ba4cb8b11b052a88afaf83b22c65101a5fcaadf721897cf456664375a3fca897511abe157287e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_tunnel_key={0x104, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x91, 0x6, "465d22cd029247bfa0e29f742c3791349c09aff180ef2570e3b7e4e6e8aef84fbb0d3c748d72b95ec3580ae6de0cd4a53089536d3a014c1e02cb1edb59f20a42e72d698523eee6745bfcb23ed38d7c554b96b2b6b9dcb2762ab64fb9ff335611e538ae3a0fa5e8bb69b0d5d4cf6f4a37e884c5f51685937fe5adf7dd68a06ade11a4a1c7a782fbc72d91464a1b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x158, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x98, 0x6, "f3f479f3a5a67407779947661c02949a315de7eef0274b7060581f69dc2eca9d1df101e7f176dad0841b3e723c6f1ee1562bf42f86a907c132715496a5ce204de2bc3aeac932a68e91e49c057cdd27d5c98b9b54c1a36c9cdce5d12b7128d4176dba50b2032fb79a06dd014d7fa238682c8a305923eb3f9328543975eda26afb2234c6c3ead941095ad46f19ba42d83fd508fc6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x38, 0x0, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0xb, 0x6, "42567053e72f6d"}, {0xc}, {0xc}}}, @m_nat={0x1d0, 0x0, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @multicast1}}]}, {0xdf, 0x6, "5b00b916d23d2d79bfd61124e3155018b392cb3141c165a633781a433d433fa974537e65ffb9ec0b6cbf948bd8cc91ba08a27e91706e04741c3cdfcd107c533cd9927a3754c30ef1d3cfa9dc895239577428b3fd75d08405c4a332494f7caca7ce62bb4934498f46eec4888a4a9e487d2d613c369d15f5f0e1c6a3170452de3996125fe3ea29a34738b4bbd73c5b84e813647557ea30c9c53d996bf2ed5682bcc4ef9cd3e62ebd80d5bd3d672f3da988a247c35058f026ee7ae2ef90bf0edcfb19882ad81939db4ccfb808c625fbbfb542cb990a858852efd92f96"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x10c, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x9a, 0x6, "830cce30366288fe90c5e9e141da601022a0339d2522c5339f7eab5764217b328b2b456df899701aae52af4263d7944ce817b4d843e01d634f789a1aef9e4c5ab7de346691ca82ecce911c57fdc3f1e147e523de45531c0b6410c7fb8aa1156cca13ec8986cd5725827d638cf786e163b6bfe034490991c4d9ea35456f9138cec4eee76c7d1715004eef439675dcc47cb33538196804"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x7a0}}, 0x0) 15:26:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x800000800000001) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_slab\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1043.310542][T26235] netlink: 'syz-executor.2': attribute type 28 has an invalid length. 15:26:48 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7a, 0x9d, 0x57, 0x8, 0x1286, 0x2046, 0x1289, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1}}]}}]}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x2d7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) dup3(r3, r0, 0x0) 15:26:48 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = open(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) close(r1) [ 1043.441077][T26238] netlink: 'syz-executor.2': attribute type 28 has an invalid length. [ 1043.605045][T26243] netlink: 788 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1043.615118][T26243] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1043.625291][T26243] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 15:26:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$alg(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="7b01707a754ebad5df628bc7c1ddb3cd88d587aaa8e705ba87abf2e6ce32d161d647c71b1c65da00fb80c173e36093a479017059ae9c3ba4e310ca0fb95c695710d1ffe0c79a561d485e01d55ab03160173de82a50ea0bc117852932d8998d34f1746278d370ff", 0x67}, {&(0x7f0000000280)="df5f79790d8cadff6d250638242640b6cf4c38a0a767cc4ab3dba9fe4c2e8ac556867187d2fc4d7b718b473c2cf5eb844ea3b66f1aac6a6b22b575a43019cf7d6ac905f0d73bdf103977e7ff05fad89a62f785f36489f1d91fef9f08", 0x5c}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="5135821c08414c8c3bcd6a73b0779c58b0a1584b50f2497164c619f9c415368f7e43338ae3b4988a9f305dda48a8774be264baf3195e7a18c2a86951bd86e6041b04684e6b48da53886da1f11e96da46fb2d47acb18ae8ea2c9659c2330988284b84877fe4242a9a48469cb96e2d919ed5595f829951b9c51a31a2eea0aa60ea3bcf9e609fe94f7d7dbbec09c968fa89bee28bc3d5503ec62d881a47bf9438d0822728b66020f7430fbc44952c679cff7a5c727431a277b7addf2e1111f22a1372df4d64b6b8fb4b83a798ae194a5cb19e43944a01d7548679de31f06d8a8d5afb7c8d1a33", 0xe5}, {&(0x7f0000001400)="db86199e36e758b6b7d0834cef419285ad48da0d933a662eab88316d0d16033888068ef013132a6eabde6a45444978d9ab1b748db11142879f54b8bf3b256b4570981f1c81ed0b1261088db62100598c468b0f8ce8dc70eea0a23d851dc89f", 0x5f}], 0x5, &(0x7f0000001480)=[@assoc={0x10, 0x117, 0x4, 0x9}, @assoc={0x10, 0x117, 0x4, 0x5}, @iv={0x3c, 0x117, 0x2, 0x29, "cc79d36d69c2543fcb5de043bf2a71c713ef53c260709ac275064874b72601b9500f3c169b9df03994"}, @iv={0x38, 0x117, 0x2, 0x26, "f213e472fd26944b5aaa4497adc8adf9456ee3324c45829335b4ddeb45c699be0e30ed53dd31"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0xb4, 0x40800}, 0x20008800) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000001580)) r4 = openat$proc_capi20(0xffffff9c, &(0x7f00000015c0)='/proc/capi/capi20\x00', 0x2000, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x48000) 15:26:48 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) pwritev2(r0, &(0x7f0000003500)=[{&(0x7f00000000c0)='H', 0x1}], 0x1, 0x0, 0x0, 0x748e825aaaa87bb3) 15:26:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) unshare(0x8000400) r1 = getpgid(0x0) r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 15:26:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtaction={0x7a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x75c, 0x1, [@m_mirred={0x1e8, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0xffffffffffffff99}, @TCA_MIRRED_PARMS={0x20}]}, {0xdc, 0x6, "cc9850e2d31b1df64c07e668e79ba869152668ce9a54c8a6b217fbf45707202e2ab60ba21ff3b2b1946a519ec63a2e0842f7dcc005433994760fd0fe8e12a64ce1b3af0b8b1bd7dd6b17ecc7382a6ed08a0d304b785538c5b9eac7b6fee87ba30a3b7afd9521a658ec12ca4891eee2e15cfe360d2afbb04ccf2805879a1c60146f9c06c459ca5409b42cc7bc7bac1a15b7ee0204144847c976cbc2a5e014e51647e8eca3d345a63552877d6a9a8d62f167ba4cb8b11b052a88afaf83b22c65101a5fcaadf721897cf456664375a3fca897511abe157287e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_tunnel_key={0x104, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x91, 0x6, "465d22cd029247bfa0e29f742c3791349c09aff180ef2570e3b7e4e6e8aef84fbb0d3c748d72b95ec3580ae6de0cd4a53089536d3a014c1e02cb1edb59f20a42e72d698523eee6745bfcb23ed38d7c554b96b2b6b9dcb2762ab64fb9ff335611e538ae3a0fa5e8bb69b0d5d4cf6f4a37e884c5f51685937fe5adf7dd68a06ade11a4a1c7a782fbc72d91464a1b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x158, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x98, 0x6, "f3f479f3a5a67407779947661c02949a315de7eef0274b7060581f69dc2eca9d1df101e7f176dad0841b3e723c6f1ee1562bf42f86a907c132715496a5ce204de2bc3aeac932a68e91e49c057cdd27d5c98b9b54c1a36c9cdce5d12b7128d4176dba50b2032fb79a06dd014d7fa238682c8a305923eb3f9328543975eda26afb2234c6c3ead941095ad46f19ba42d83fd508fc6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x38, 0x0, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0xb, 0x6, "42567053e72f6d"}, {0xc}, {0xc}}}, @m_nat={0x1d0, 0x0, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @multicast1}}]}, {0xdf, 0x6, "5b00b916d23d2d79bfd61124e3155018b392cb3141c165a633781a433d433fa974537e65ffb9ec0b6cbf948bd8cc91ba08a27e91706e04741c3cdfcd107c533cd9927a3754c30ef1d3cfa9dc895239577428b3fd75d08405c4a332494f7caca7ce62bb4934498f46eec4888a4a9e487d2d613c369d15f5f0e1c6a3170452de3996125fe3ea29a34738b4bbd73c5b84e813647557ea30c9c53d996bf2ed5682bcc4ef9cd3e62ebd80d5bd3d672f3da988a247c35058f026ee7ae2ef90bf0edcfb19882ad81939db4ccfb808c625fbbfb542cb990a858852efd92f96"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x10c, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x9a, 0x6, "830cce30366288fe90c5e9e141da601022a0339d2522c5339f7eab5764217b328b2b456df899701aae52af4263d7944ce817b4d843e01d634f789a1aef9e4c5ab7de346691ca82ecce911c57fdc3f1e147e523de45531c0b6410c7fb8aa1156cca13ec8986cd5725827d638cf786e163b6bfe034490991c4d9ea35456f9138cec4eee76c7d1715004eef439675dcc47cb33538196804"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x7a0}}, 0x0) 15:26:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x7fff, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x8}, 0x20) [ 1044.133794][ T8693] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1044.383709][ T8693] usb 4-1: Using ep0 maxpacket: 8 15:26:49 executing program 5: creat(&(0x7f0000000040)='./bus\x00', 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) [ 1044.505686][ T8693] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=12.89 [ 1044.515014][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.575671][ T8693] usb 4-1: config 0 descriptor?? 15:26:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/61, 0x3d}], 0x1, &(0x7f0000000300)=""/154, 0x9a}, 0x8e1}, {{&(0x7f00000003c0)=@generic, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f0000000640)=""/88, 0x58}], 0x4, &(0x7f0000000700)=""/89, 0x59}, 0x100}, {{&(0x7f0000000780)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000800)=""/253, 0xfd}, {&(0x7f0000000900)=""/143, 0x8f}, {&(0x7f00000009c0)=""/225, 0xe1}, {&(0x7f0000000ac0)=""/178, 0xb2}, {&(0x7f0000000b80)=""/252, 0xfc}, {&(0x7f0000000c80)=""/73, 0x49}, {&(0x7f0000000d00)=""/186, 0xba}, {&(0x7f0000000dc0)=""/177, 0xb1}], 0x8, &(0x7f0000000ec0)=""/231, 0xe7}, 0x93e}, {{&(0x7f0000000fc0)=@nfc_llcp, 0x80, &(0x7f0000002040)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1, &(0x7f0000002080)=""/241, 0xf1}, 0x4}], 0x4, 0x2102, &(0x7f0000002200)={0x77359400}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000018000100"/20, @ANYRES32=r2, @ANYBLOB="000000000020dbc8e5040f0914c6023000000ae8d401905f"], 0x28}}, 0x0) [ 1044.626088][ T8693] usb 4-1: NFC: intf 0000000068725ae1 id 00000000dbe67732 [ 1044.680843][T26269] netlink: 788 bytes leftover after parsing attributes in process `syz-executor.0'. 15:26:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) unshare(0x8000400) r1 = getpgid(0x0) r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) [ 1044.832963][ T8693] usb 4-1: USB disconnect, device number 28 15:26:49 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_mr_cache\x00') ioctl$FIBMAP(r0, 0x80086601, 0x0) 15:26:49 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000000100)={0x0, 'ip6_vti0\x00'}, 0x18) [ 1045.623904][ T9096] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1045.863510][ T9096] usb 4-1: Using ep0 maxpacket: 8 [ 1045.984819][ T9096] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=12.89 [ 1045.994229][ T9096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.009994][ T9096] usb 4-1: config 0 descriptor?? [ 1046.055762][ T9096] usb 4-1: NFC: intf 00000000dbcf0812 id 00000000dbe67732 [ 1046.263883][ T9096] usb 4-1: USB disconnect, device number 29 15:26:50 executing program 3: alarm(0x5) alarm(0x0) 15:26:50 executing program 5: creat(&(0x7f0000000040)='./bus\x00', 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 15:26:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, 0x0, 0x0) 15:26:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) unshare(0x8000400) r1 = getpgid(0x0) r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 15:26:50 executing program 0: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x552}) [ 1046.552988][T26316] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 15:26:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, r1, 0xf5ffffff}}, 0x48) [ 1046.756116][T26316] IPVS: persistence engine module ip_vs_pe_ [ 1046.756116][T26316] ip not found 15:26:51 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) unshare(0x8000400) r1 = getpgid(0x0) r2 = pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 15:26:51 executing program 5: creat(&(0x7f0000000040)='./bus\x00', 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 15:26:51 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:26:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x1c) [ 1047.297500][T26333] __nla_validate_parse: 2 callbacks suppressed [ 1047.297538][T26333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:26:52 executing program 4: socketpair(0x1e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0), 0x4) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$FIBMAP(r1, 0x1, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:26:52 executing program 5: creat(&(0x7f0000000040)='./bus\x00', 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 15:26:52 executing program 1: open(&(0x7f00000000c0)='./bus\x00', 0x1071fe, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) 15:26:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') read$char_raw(r0, &(0x7f0000000200)={""/40472}, 0xa000) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000000000000f20000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008000c00ef000000"], 0x28}}, 0x0) [ 1047.546976][T26333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:26:52 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0x541b, 0x0) 15:26:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x81, 0x41, 0x50, 0x20, 0xccd, 0x10b4, 0x410b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x52, 0x10, 0x38}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x6, "7acf10f8789c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1047.771660][ T28] audit: type=1800 audit(1600183612.352:91): pid=26344 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16368 res=0 [ 1047.886772][ T28] audit: type=1804 audit(1600183612.392:92): pid=26346 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir194759449/syzkaller.90vWF8/789/bus" dev="sda1" ino=16368 res=1 [ 1048.127773][ T28] audit: type=1800 audit(1600183612.712:93): pid=26349 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16380 res=0 15:26:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b45, 0x0) 15:26:52 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000600)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f2f2f1", 0x18, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xe8, [], @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}, 0x0) 15:26:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x212002, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x7, 0x7b, 0x2}, 0x7) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="00000000000000940d82838e5972c6a6fc00"], 0x28}}, 0x0) 15:26:52 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0x541b, 0x0) 15:26:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)) [ 1048.613115][ T8693] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1048.664935][T26366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:26:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc038563c, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ffa000"}, 0x0, 0x0, @planes=0x0}) [ 1048.887422][ T8693] usb 4-1: Using ep0 maxpacket: 32 15:26:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000980)={'filter\x00', 0x2, 0x4, 0x3f4, 0x0, 0x0, 0x104, 0x314, 0x314, 0x314, 0x9802, 0x0, {[{{@uncond=[0x2], 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@dev, @loopback, @multicast2, 0x4}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x440) [ 1049.013254][ T8693] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10b4, bcdDevice=41.0b [ 1049.022497][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:26:53 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0x541b, 0x0) [ 1049.211649][ T8693] usb 4-1: config 0 descriptor?? 15:26:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000140)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:54 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af0003140023000000000031dbe924825e9ee30800000000ffffedff00000000000034ffb17650", 0x2d, 0x1c0}]) [ 1049.473447][ T8693] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state 15:26:54 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80) [ 1050.132979][ T8693] usb write operation failed. (-71) [ 1050.156707][ T8693] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1050.167622][ T8693] dvbdev: DVB: registering new adapter (Terratec H7) [ 1050.175514][ T8693] usb 4-1: media controller created [ 1050.297943][ T8693] usb read operation failed. (-71) [ 1050.337451][ T8693] usb write operation failed. (-71) [ 1050.384872][ T8693] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1050.464134][ T8693] usb 4-1: USB disconnect, device number 30 [ 1051.003456][ T8693] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1051.252511][ T8693] usb 4-1: Using ep0 maxpacket: 32 15:26:55 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) 15:26:55 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100), 0x1) 15:26:55 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0x541b, 0x0) 15:26:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef008000"], 0x28}}, 0x0) 15:26:55 executing program 4: setregid(0xee01, 0x0) r0 = gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x4240a2a0) prlimit64(r0, 0x0, 0x0, 0x0) 15:26:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffbfffffffc58e}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000100)) [ 1051.422877][ T8693] usb 4-1: device descriptor read/all, error -71 15:26:56 executing program 5: openat$full(0xffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) [ 1051.746757][T26416] ptrace attach of "/root/syz-executor.5"[26403] was attempted by "/root/syz-executor.5"[26416] 15:26:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x23, &(0x7f0000000080)={r2}, 0x8) 15:26:56 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x3, 0x1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 15:26:56 executing program 0: prctl$PR_GET_KEEPCAPS(0x2f) 15:26:56 executing program 3: getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) 15:26:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_mr_cache\x00') ioctl$FIBMAP(r0, 0xc020660b, 0x0) 15:26:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef00000023700dbe1a9790a4f43fc59bc1b2a5c8801e26da57e0178f9559f4f740cd465d3e6d5958aa1b2cdcb12b0a21e900e1f99ead902ea615e2e4d391f78a19a59f6b29d4d2a3c1e7ee393edd92d212b8ac565faf37e5085017603e3650281ca0055d605dfa228b"], 0x28}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r1, 0x2111, 0xe7, 0x7}) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000140)) 15:26:57 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x6) 15:26:57 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x20, @multicast, 'veth0_to_hsr\x00'}}, 0x1e) dup2(r1, r2) 15:26:57 executing program 0: unshare(0x400) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/seq\x00', 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) 15:26:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa}}) 15:26:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xeea) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0xffffffffffffffff, 0x0) 15:26:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80300, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf251900000005001c00010000000500a20080000000100002009c04e6dc66759243d8de75820c00990006000000ffffffff05001e000100000008000300", @ANYRES32=0x0, @ANYBLOB="05006000e6000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044088) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x8884) 15:26:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 15:26:58 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x6) [ 1053.993570][T26459] netlink: 'syz-executor.2': attribute type 28 has an invalid length. [ 1054.033663][T26462] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT 15:26:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) [ 1054.120171][T26470] netlink: 'syz-executor.2': attribute type 28 has an invalid length. 15:26:58 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, [0x8]}, 0x40) 15:26:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 15:26:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xb, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = fsopen(&(0x7f0000000140)='sockfs\x00', 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000013c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) [ 1054.536320][T26477] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT 15:26:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 15:26:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xed6e0e2f2826d8d5, 0x0, 0x0}) 15:26:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 15:26:59 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x6) 15:26:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) [ 1055.010679][T26498] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT 15:26:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001300)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r2, 0x309, 0x0, 0x0, {0x33}}, 0x14}, 0x1, 0xa0028000}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80004}, 0x801) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setpgid(0x0, 0x0) r5 = openat$bsg(0xffffff9c, &(0x7f00000002c0)='/dev/bsg\x00', 0x41, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c1}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:26:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 15:26:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xed6e0e2f2826d8d5, 0x0, 0x0}) [ 1055.552964][T26511] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT 15:27:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 15:27:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000007e0000000008001c00ef000000"], 0x28}}, 0x0) 15:27:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) 15:27:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xed6e0e2f2826d8d5, 0x0, 0x0}) 15:27:00 executing program 0: r0 = socket(0x23, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) [ 1056.305485][T26540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1056.355628][T26541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 15:27:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 1056.458707][T26544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1056.495101][T26545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 15:27:01 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x6) 15:27:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xed6e0e2f2826d8d5, 0x0, 0x0}) 15:27:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x5) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280008001000747d000000000080000000000008", @ANYRES32=r3, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) 15:27:01 executing program 1: setrlimit(0x7, &(0x7f0000001280)) open_tree(0xffffffffffffff9c, 0x0, 0x0) 15:27:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) 15:27:01 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x8}}, 0x50) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "034c6360"}, 0x0, 0x0, @fd}) 15:27:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="dcc8027880c498c15edf856bcc45954b153bfc2fe6ee4e51c6f6169c20", 0x1d}, {&(0x7f0000000500)="e4", 0x1}, {&(0x7f0000000040)='Q', 0x1}, {&(0x7f0000000740)="a2", 0x1}], 0x4}}], 0x1, 0x400c090) recvmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 15:27:02 executing program 1: socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@mcast1, 0x0, r3}) 15:27:02 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0}, 0x74) 15:27:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) clone3(&(0x7f0000000240)={0x4000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @loopback}], 0x20) 15:27:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000001a00ebe38ac115a1115f797816a273e32f19c0270000010000a04f6516b22bbe488f", 0x4f}], 0x1, 0x0, 0x0, 0x68}, 0x0) 15:27:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000002c0)={@val, @void, @eth={@random="2dd367da2956", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "d25705", 0x8, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, {[], {0x0, 0x4e22, 0x8}}}}}}}, 0x42) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:27:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000140)={'tunl0\x00', @ifru_mtu}) 15:27:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) [ 1058.345542][T26589] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 15:27:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:27:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000001a00ebe38ac115a1115f797816a273e32f19c0270000010000a04f6516b22bbe488f", 0x4f}], 0x1, 0x0, 0x0, 0x68}, 0x0) 15:27:03 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{}, {}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x205, 0x4) close(r0) 15:27:03 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add4e671b140da2e6a262b", 0x11}], 0x1) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xff16) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1059.155891][T26611] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 15:27:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:27:04 executing program 1: syz_mount_image$btrfs(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x3a3dd40084848f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f0000000140)='*\x00') 15:27:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000001a00ebe38ac115a1115f797816a273e32f19c0270000010000a04f6516b22bbe488f", 0x4f}], 0x1, 0x0, 0x0, 0x68}, 0x0) 15:27:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}, @func={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000002c0)=""/236, 0x40, 0xec, 0x8}, 0x20) 15:27:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="25bc2575cbdf603ecb36fa0095e060cecc48b86a548802a9021e0700000000004e2f98b579a782d257146d0e0206e73ba0f4dc2bedc6760253ef", 0x3a, 0x400}], 0x3, &(0x7f0000000040)) 15:27:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1059.859361][T26624] CIFS: Attempting to mount [ 1059.864350][T26624] CIFS: VFS: Device name not specified [ 1059.869870][T26624] CIFS: VFS: Malformed UNC in devname [ 1059.895487][T26627] CIFS: Attempting to mount [ 1059.900301][T26627] CIFS: VFS: Device name not specified [ 1059.906135][T26627] CIFS: VFS: Malformed UNC in devname [ 1059.934371][T26629] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 15:27:04 executing program 1: syz_mount_image$btrfs(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x3a3dd40084848f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f0000000140)='*\x00') [ 1059.986914][T26630] BPF: (anon) type_id=2 bits_offset=0 [ 1059.992780][T26630] BPF: [ 1059.995611][T26630] BPF:Invalid member [ 1059.999631][T26630] BPF: [ 1059.999631][T26630] [ 1060.120156][T26630] BPF: (anon) type_id=2 bits_offset=0 [ 1060.125944][T26630] BPF: [ 1060.128766][T26630] BPF:Invalid member [ 1060.132929][T26630] BPF: [ 1060.132929][T26630] 15:27:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000001a00ebe38ac115a1115f797816a273e32f19c0270000010000a04f6516b22bbe488f", 0x4f}], 0x1, 0x0, 0x0, 0x68}, 0x0) [ 1060.314688][T26634] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1060.323249][T26634] EXT4-fs (loop5): Invalid log block size: 466434 [ 1060.426669][T26638] CIFS: Attempting to mount [ 1060.431628][T26638] CIFS: VFS: Device name not specified [ 1060.437137][T26638] CIFS: VFS: Malformed UNC in devname 15:27:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0x3}]}, 0x28}}, 0x0) 15:27:05 executing program 1: syz_mount_image$btrfs(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x3a3dd40084848f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f0000000140)='*\x00') [ 1060.528211][T26634] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1060.536788][T26634] EXT4-fs (loop5): Invalid log block size: 466434 15:27:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:27:05 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002480)={0x288, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}]}, 0x288}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 1060.809024][T26644] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1060.952137][T26648] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1061.009775][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1061.090085][T26651] CIFS: Attempting to mount [ 1061.095111][T26651] CIFS: VFS: Device name not specified [ 1061.100871][T26651] CIFS: VFS: Malformed UNC in devname 15:27:05 executing program 1: syz_mount_image$btrfs(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x3a3dd40084848f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f0000000140)='*\x00') 15:27:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00') read$midi(r0, 0x0, 0x0) 15:27:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x4001a, 0x200c2}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8844}, 0x8000) [ 1061.732966][T26661] CIFS: Attempting to mount [ 1061.737719][T26661] CIFS: VFS: Device name not specified [ 1061.743665][T26661] CIFS: VFS: Malformed UNC in devname 15:27:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002480)={0x288, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}]}, 0x288}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:27:06 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000000440)='t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x1c, &(0x7f000059aff8)={0x0}, &(0x7f000034f000)=0x2059b000) r4 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r4, &(0x7f0000000000)='{', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) connect$inet(r4, &(0x7f0000001280)={0x2, 0x0, @rand_addr=0x10000}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r3}, 0x8) 15:27:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x9}) 15:27:06 executing program 1: munmap(&(0x7f0000e43000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000e43000/0x3000)=nil, 0x3000, 0x0) [ 1061.902542][T26663] team0: Device veth45 is up. Set it down before adding it as a team port 15:27:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4092d90093110d0cddc263e99b7aeb699cdd58d9fd3459c6bae7d929264685cede51fa179011abefec6a8a7d54ab6045fd6ac04d1927e16e3b4357f0690fe62e80eb8b9252ede4f754d91103f772fe169883ecec69be4fe991a170ac53956a165b689d3ec8046b51911b1fb8312fb82a9ea48c8cbb8fd9a6c062bc1df0be4ab5beed82d2640f79e1f62f0c1cdb4de327b746dcde50f444b16c56d86bff09b30e6d982a931050a59e7a06e30447fb9f8455ec4665360055b365841d7db9e07c31c66e12f8d6b3a1f31c2e4808fd30f412203e925a687162cafc406d84617e", @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf25010000002300070073797374656d5f753a6f626a6563745f723a7661725f72756e5f743a733000000800040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004041}, 0x20000001) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0xff, 0x101}, &(0x7f0000000340)=0x8) r8 = openat2(r2, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x50, 0x2}, 0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000380)={r7, 0x9, 0x1, [0x2]}, &(0x7f00000003c0)=0xa) 15:27:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x1, 0x4, 0x3, 0x88, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 15:27:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xd}}) 15:27:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x21c, 0x0, 0x0, 0x148, 0x0, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x278) [ 1062.897982][T26693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26693 comm=syz-executor.2 15:27:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffdfff}]}) io_cancel(0x0, 0x0, 0x0) 15:27:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002480)={0x288, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}]}, 0x288}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:27:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x1, 0x4, 0x3, 0x88, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 15:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) 15:27:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000003340)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @remote, 0x2}, 0x80, 0x0}}], 0x1, 0x20000084) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) [ 1063.626530][T26708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26708 comm=syz-executor.3 15:27:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x400000, 0x48, 0xc}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 15:27:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x1, 0x4, 0x3, 0x88, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 15:27:08 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002480)={0x288, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}]}, 0x288}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:27:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000006c0)={0x0, [], 0x2}) [ 1064.149787][T26713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26713 comm=syz-executor.2 [ 1064.215169][T26713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26713 comm=syz-executor.2 15:27:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 15:27:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x1, 0x4, 0x3, 0x88, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 15:27:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 15:27:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7, 0x41) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400)=0x1, r6, 0x0, 0x0, 0x1}}, 0x20) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40010) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e20, 0x6c5, @dev={0xfe, 0x80, [], 0x19}}}}, 0x84) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="281cc06fb41ab13463000000000000000000d573ab41e00000", @ANYRES32=r9, @ANYBLOB="002001000000000005001c00ef000000"], 0x28}}, 0x0) 15:27:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) [ 1064.899471][T26726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 15:27:09 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000100)={[{@errors_continue='errors=continue'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@disable_sparse_yes='disable_sparse=yes'}, {@nls={'nls', 0x3d, 'cp865'}}, {@disable_sparse_yes='disable_sparse=yes'}, {@dmask={'dmask'}}, {@dmask={'dmask'}}, {@case_sensitive_no='case_sensitive=no'}, {@umask={'umask'}}]}) [ 1065.057216][T26733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1065.069606][T26733] bond0: (slave bond5): Enslaving as an active interface with an up link 15:27:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x6, 0x0, 0xb8c3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:27:10 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local={0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x48, 0x3c, 0x0, @dev={0xfe, 0x7e}, @mcast2, {[@hopopts={0x0, 0x4, [], [@hao={0xc9, 0x10, @mcast1={0x0}}, @hao={0xc9, 0x10, @local}]}], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) 15:27:10 executing program 4: r0 = memfd_create(&(0x7f0000000200)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xca\x00\x00\x00Ib\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xacD\xd2\xc5\x8e\xf7\x0e\xe6x\xad]\xcf\x82\x8aWJ\x01\x024\xb7\xfdf\xfb\xd7\xcf\x9a\x1a\xd0\xe0\x00\r\xe4\x1b\\Z\xb7\xc5nU\xadt4*\xf7\x8e\x99\x10\xbe\xd6\x1f\xef\x1b\xee\x00`\b\x13\xae\xb7-\xa1s$\xba\xb7\xf3\xf9\x1e\xf2m^9\xd7 .3\xd1\xa0\xde\x11\x7f\xce\xc4\x99\xf9\x80f;\x8a\xe4\xf9\x1c\xfb\xb2\xf2\xae\xd3`\x97K\x8av\xce\xbfk;\x01\xfcz\tQ\xd4QF;\xa7\x8d#(\x8d\x7f\xb04\xfboD\xed!\x9e(@\xefC1\x96-eh\xf4~\x04KJVk\xe6\xa1\xc7u\xc4-\x1d\x9dJ\xb6\xe1\t\'\x0e\x86I\xc6|\x9a\x90\xf8#AB\xf81\xe3\x00\x00\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe8, 0x0, &(0x7f0000000000)) [ 1065.749102][T26738] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1065.819065][T26738] 8021q: adding VLAN 0 to HW filter on device bond7 15:27:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = signalfd4(r0, &(0x7f0000000140)={[0x6, 0x5]}, 0x8, 0x80000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x48080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1065.862924][T26774] bond7: (slave veth21): Enslaving as an active interface with a down link [ 1065.906575][T26775] bond7: (slave veth23): Enslaving as an active interface with a down link [ 1065.932686][T26776] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 15:27:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00'}) 15:27:11 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902a3ff02010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300000000000904"], 0x0) [ 1066.930891][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1066.970856][T26787] bond7: (slave veth25): Enslaving as an active interface with a down link [ 1066.989094][T26782] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1067.290385][ T3224] usb 2-1: new high-speed USB device number 2 using dummy_hcd 15:27:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3a, 0x0, &(0x7f0000000440)) 15:27:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x5, 0x0, 0x201a7fa6, 0x5}]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) [ 1067.539810][ T3224] usb 2-1: Using ep0 maxpacket: 8 15:27:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MTU={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x9, 0x2}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) 15:27:12 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/136, 0x88}], 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) close(r1) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 15:27:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') socket$caif_seqpacket(0x25, 0x5, 0x2) read$FUSE(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000e0010000108000000000000010000000000", @ANYRES32=r2, @ANYBLOB="000000000000000008001c00ef000000"], 0x28}}, 0x0) [ 1067.662017][ T3224] usb 2-1: config index 0 descriptor too short (expected 65443, got 92) [ 1067.670977][ T3224] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.681376][ T3224] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1067.690472][ T3224] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 15:27:12 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{}, {0xac}, {0x6}]}) [ 1068.061468][ T3224] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1068.071227][ T3224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.079394][ T3224] usb 2-1: Product: syz [ 1068.083873][ T3224] usb 2-1: Manufacturer: syz [ 1068.088608][ T3224] usb 2-1: SerialNumber: syz 15:27:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x25b, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb90a0a4465ef0b007c05e87c55a1bc000900b8000699020000000500150007008178a8001600140001c00200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 1068.168766][T26866] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1068.177146][T26866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1068.186646][T26866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 15:27:12 executing program 2: socket$netlink(0x10, 0x3, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x220400, 0x80, 0x4}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000002000000128bd7000fedbdf2502102081f80000040000000008000200c04fe0bf33e66c17000000000200000508000a00fdffffa6147d3545cc56b28fbbccff08000b00ff"], 0x48}}, 0x0) [ 1068.312958][ T3224] cdc_ncm 2-1:1.0: skipping garbage [ 1068.318461][ T3224] cdc_ncm 2-1:1.0: bind() failure [ 1068.515982][T15222] usb 2-1: USB disconnect, device number 2 [ 1068.539795][T26873] IPv6: NLM_F_CREATE should be specified when creating new route [ 1068.547884][T26873] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1068.556320][T26873] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1068.588500][ T28] audit: type=1326 audit(1600183633.166:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26867 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 15:27:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x0, 0x0, [0x4d0, 0x0, 0x3, 0x8, 0xda0]}) 15:27:13 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffff7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) [ 1069.141807][ T28] audit: type=1326 audit(1600183633.726:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26867 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 15:27:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000140)=0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRESOCT=r2], 0x28}}, 0x20000000) [ 1069.319974][T15222] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1069.376587][T26887] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1069.385237][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1069.394699][T26887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.558231][T26893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=26893 comm=syz-executor.0 [ 1069.580145][T15222] usb 2-1: Using ep0 maxpacket: 8 [ 1069.704246][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1069.723807][T15222] usb 2-1: config index 0 descriptor too short (expected 65443, got 92) [ 1069.732575][T15222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.743007][T15222] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1069.752134][T15222] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1069.757019][T26910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:14 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af03, &(0x7f0000000000)) 15:27:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010600090002206d041cc304000000000109022400011000a0000904000001030101000921000000012205000905810346"], 0x0) syz_usb_ep_read(r0, 0x0, 0x0, 0x0) 15:27:14 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) dup2(r1, r0) 15:27:14 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffff7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) 15:27:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x0, 0x0, [0x4d0, 0x0, 0x3, 0x8, 0xda0]}) 15:27:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1070.189628][T15222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.198857][T15222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 15:27:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x0, 0x0, [0x4d0, 0x0, 0x3, 0x8, 0xda0]}) [ 1070.300171][T15222] usb 2-1: can't set config #1, error -71 [ 1070.319850][T15222] usb 2-1: USB disconnect, device number 3 [ 1070.394999][T26931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=26931 comm=syz-executor.0 15:27:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40002, 0x0) write$sequencer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9c"], 0x20000008) 15:27:15 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffff7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) 15:27:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000140)={r3, 0x7, 0x6, 0xffffffffffffff00}) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000240)=0x18) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:27:15 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af03, &(0x7f0000000000)) 15:27:15 executing program 4: setns(0xffffffffffffffff, 0x0) 15:27:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x0, 0x0, [0x4d0, 0x0, 0x3, 0x8, 0xda0]}) [ 1071.177158][T26955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=26955 comm=syz-executor.0 15:27:15 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) unlink(&(0x7f0000000000)='./file0/../file0/file0/file0\x00') 15:27:16 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffff7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) 15:27:16 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af03, &(0x7f0000000000)) 15:27:16 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000580)={{0x0}}) 15:27:16 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b99000000010500010006000000080006c0"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1071.900192][T26977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=26977 comm=syz-executor.0 15:27:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x20, &(0x7f0000000f00)=0x301414ac, 0x4) 15:27:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 15:27:16 executing program 4: setrlimit(0x7, &(0x7f0000001880)) socket$isdn_base(0x22, 0x3, 0x0) 15:27:16 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af03, &(0x7f0000000000)) 15:27:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0xd1357000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r2, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x3, 'ip6gretap0\x00'}) ioctl$FIOCLEX(r2, 0x5451) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000240)=r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @private=0xa010101}, 0x201, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='ip6gretap0\x00', 0x1, 0x3}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @private1={0xfc, 0x1, [], 0x1}, 0x3f}, {0xa, 0x4e24, 0x4000, @mcast1, 0x4}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x5, 0x8ab8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffff9, @mcast1, 0x1}, {0xa, 0x4e23, 0x4, @empty, 0x3}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e22, 0xfffffffc, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8651, @empty, 0x7}, 0x0, [0x0, 0x0, 0x81, 0x8, 0x0, 0x1, 0xfffffffc, 0x8000000]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) 15:27:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000b00)={{0x1b, 0x5b, 0x7, 0x7, 0x31, 0x0, 0x31, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x105d, 0x40}, [{}]}, 0x78) [ 1072.828784][T27004] IPVS: ftp: loaded support on port[0] = 21 15:27:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = io_uring_setup(0x358, &(0x7f0000000000)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) 15:27:17 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) 15:27:17 executing program 1: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) 15:27:17 executing program 5: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 15:27:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0500006a75d1d7fbe6c52e00000000009540"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) [ 1073.496584][T27004] IPVS: ftp: loaded support on port[0] = 21 15:27:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fchown(r0, 0x0, 0x0) fchown(r0, 0x0, 0x0) 15:27:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x6, 0x0, &(0x7f0000000000)) 15:27:18 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) [ 1073.845587][ T8523] tipc: TX() has been purged, node left! 15:27:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @private1}, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockname$qrtr(0xffffffffffffffff, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10006, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 15:27:18 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000100)={0x0, 0x7ffffffff000}) 15:27:18 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xa, &(0x7f0000000000), 0x20a154cc) 15:27:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x27, 0x3, 0xfc) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x114, 0x8, 0x0, &(0x7f000033bffc)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x101, @rand_addr=' \x01\x00', 0x3f}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @rand_addr=0x8}, @in={0x2, 0x4e21, @rand_addr=0x1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x44}, 0x40}], 0x88) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffd58, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc40) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000f05000000401cffa30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000022090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000900010072737670000000000c00020008000200e0"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x24, 0x11, 0xd25, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e00)={0x2a4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x20, 0x9, 0x7d, 0x3}, {0x1, 0x0, 0x8, 0xffffffff}, {0x400, 0x1, 0x9f, 0x800}, {0x5ae7, 0xec, 0x0, 0xfffffff9}, {0x6, 0xd4, 0x9, 0x13f}, {0x9, 0x7f, 0x4a, 0x6}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7, 0x1f, 0x1, 0x28d79f8e}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r5 = socket$kcm(0x2, 0x5, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x40501, 0x0) ioctl$CAPI_GET_MANUFACTURER(r6, 0xc0044306, &(0x7f0000000100)=0x80) setsockopt$sock_attach_bpf(r5, 0x84, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3012}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 15:27:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001480)='/dev/sequencer\x00', 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/33, 0x21}], 0x1) 15:27:19 executing program 0: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x2) socket$inet6(0xa, 0x0, 0x0) 15:27:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0500006a75d1d7fbe6c52e00000000009540"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 15:27:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4, 0x2, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) 15:27:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000014000380080002400000000008000140000000005c000000180a01010000000000000000010000000900020073797a32000000000900010073797a3000000000040003802c0003801400010076"], 0xe4}}, 0x0) 15:27:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfb], 0x0, 0xa00}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000000)=""/55, &(0x7f0000000080)=0x37) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:27:20 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r3, r2) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) 15:27:20 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8970, &(0x7f0000000080)) 15:27:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x54}}, 0x0) [ 1076.082646][T27134] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1076.091403][T27134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1076.325993][ T28] audit: type=1400 audit(1600183640.907:96): avc: denied { ioctl } for pid=27139 comm="syz-executor.1" path="socket:[85700]" dev="sockfs" ino=85700 ioctlcmd=0x8970 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 15:27:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfb], 0x0, 0xa00}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000000)=""/55, &(0x7f0000000080)=0x37) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:27:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x71, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xc) 15:27:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0500006a75d1d7fbe6c52e00000000009540"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 15:27:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x54}}, 0x0) 15:27:21 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020f0000100000002f3144e800000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb000000000000002300000000030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 15:27:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfb], 0x0, 0xa00}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000000)=""/55, &(0x7f0000000080)=0x37) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:27:21 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) getcwd(&(0x7f0000001780)=""/241, 0xf1) 15:27:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14010000140005b30000450000000000028419c7b1"], 0x114}], 0x1}, 0x0) 15:27:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x54}}, 0x0) 15:27:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x6}]}}}]}, 0x48}}, 0x0) 15:27:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0500006a75d1d7fbe6c52e00000000009540"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 15:27:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfb], 0x0, 0xa00}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000000)=""/55, &(0x7f0000000080)=0x37) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1077.977221][ T8523] tipc: TX() has been purged, node left! 15:27:22 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) getcwd(&(0x7f0000001780)=""/241, 0xf1) 15:27:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x54}}, 0x0) 15:27:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0xe4, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xfffffffffffffdc2}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0}}}}]}]}, 0xe4}}, 0x0) 15:27:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x0, 0x0, 0xe80}, @mpls={[], @ipv4=@dccp={{0x6, 0x4, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "209200", 0x0, "b90005"}}}}}, 0xfdef) 15:27:23 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) getcwd(&(0x7f0000001780)=""/241, 0xf1) [ 1078.858866][T27201] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1078.868684][T27201] tipc: Started in network mode [ 1078.873700][T27201] tipc: Own node identity , cluster identity 2 15:27:23 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r0) 15:27:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14010000140005b30000450000000000028419c7b1"], 0x114}], 0x1}, 0x0) [ 1079.061675][T27203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1079.071509][T27203] tipc: Started in network mode [ 1079.076427][T27203] tipc: Own node identity , cluster identity 2 15:27:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0xe4, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xfffffffffffffdc2}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0}}}}]}]}, 0xe4}}, 0x0) 15:27:24 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) getcwd(&(0x7f0000001780)=""/241, 0xf1) 15:27:24 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x3, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 15:27:24 executing program 3: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) [ 1080.100399][T27227] IPVS: ftp: loaded support on port[0] = 21 15:27:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa947}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = getpid() add_key$user(0x0, 0x0, &(0x7f00000001c0)='\x00', 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d5010400000000ff0000deffde0068a94a86be908a9118565bd34bae7f599761137206c77938761ada0005b0c0eb04b652fe6d4387e27ce03ff34d1884a51986474ede7bad1e933dc235f40172d10992060076e8e3d174e85fd1207f070000009d", @ANYRES16=r2], 0x92) r3 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r3, 0x1, 0x0) 15:27:25 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000002200)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "b335e071cfcce0efc914ede4c7890c6c"}}}}}}, 0x0) 15:27:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14010000140005b30000450000000000028419c7b1"], 0x114}], 0x1}, 0x0) [ 1080.628680][T27221] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1080.638447][T27221] tipc: Started in network mode [ 1080.643375][T27221] tipc: Own node identity , cluster identity 2 [ 1080.778351][T27252] IPVS: ftp: loaded support on port[0] = 21 15:27:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb06ac59ba906a6f9f7886f58bae18b61a", 0x11) 15:27:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "69a78585"}, 0x0, 0x0, @userptr}) 15:27:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0xe4, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xfffffffffffffdc2}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0}}}}]}]}, 0xe4}}, 0x0) 15:27:25 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 1081.383205][T27255] sg_write: data in/out 262577/104 bytes for SCSI command 0x13-- guessing data in; [ 1081.383205][T27255] program syz-executor.3 not setting count and/or reply_len properly [ 1081.542344][T27255] sg_write: data in/out 262577/104 bytes for SCSI command 0x13-- guessing data in; [ 1081.542344][T27255] program syz-executor.3 not setting count and/or reply_len properly [ 1081.625117][T27291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1081.634780][T27291] tipc: Started in network mode [ 1081.639866][T27291] tipc: Own node identity , cluster identity 2 15:27:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0xe4, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xfffffffffffffdc2}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0}}}}]}]}, 0xe4}}, 0x0) 15:27:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) 15:27:26 executing program 5: creat(&(0x7f0000000200)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="03eb6fd04768a503638e0f019552de256d"], 0x2, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 15:27:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14010000140005b30000450000000000028419c7b1"], 0x114}], 0x1}, 0x0) 15:27:26 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000002280)=[{&(0x7f0000000100)="80", 0x1}], 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000006c0)='\b', 0x1, r0) r2 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000380)="06", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) [ 1082.225607][T27297] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1082.235511][T27297] tipc: Started in network mode [ 1082.240720][T27297] tipc: Own node identity , cluster identity 2 15:27:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="ff000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) [ 1082.557472][ T28] audit: type=1804 audit(1600183647.138:97): pid=27306 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir281957598/syzkaller.Y3EgDS/639/bus" dev="sda1" ino=16374 res=1 15:27:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x1c, 0x35, 0x1, 0x0, 0x0, "", [@typed={0x4}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}], 0x1}, 0x0) 15:27:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0xffffffff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x0) [ 1082.715151][ T28] audit: type=1804 audit(1600183647.218:98): pid=27308 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir281957598/syzkaller.Y3EgDS/639/bus" dev="sda1" ino=16374 res=1 15:27:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074c1300000000f9ff00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6}]}}]}, 0x44}}, 0x0) [ 1082.929293][T27314] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 15:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) 15:27:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = dup2(r0, r2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) [ 1083.047833][T27314] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1083.139471][T27316] bond8: (slave bridge21): Enslaving as a backup interface with an up link [ 1083.191730][ T8523] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1083.206158][T15222] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready 15:27:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000140)=0x42) [ 1083.307648][T24080] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1083.456054][T27316] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 15:27:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0xffffffff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x0) [ 1083.553252][T27314] bond8: (slave bridge23): Enslaving as a backup interface with a down link [ 1083.564258][T27363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1083.658580][T27375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:27:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x52, &(0x7f0000000040)={@link_local={0x3}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x1c, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @private1}}}}}}, 0x0) 15:27:28 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x0, 0x0, '2j'}]}}}}}}, 0x0) 15:27:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xcacf, 0x20000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x0, 0x6, 0x3f, 0x5, 0x400}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000000)=0xf00, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x81, 0xffff, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast1, 0x8000, 0x40, 0xfffffffe, 0x80000}}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a4141, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80801, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0}}], 0x1, 0x200000c1) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000804) r5 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0x40}, @dev={0xfe, 0x80, [], 0x32}, @mcast2, 0x9, 0x2, 0x5, 0x400, 0x400, 0x100280, r6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x74, r6}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private1={0xfc, 0x1, [], 0x1}, @private2, @ipv4={[], [], @broadcast}, 0x8, 0xff00, 0x3ff, 0x400, 0xfff, 0x41210090, r6}) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001240)=ANY=[@ANYBLOB="ff0b0000000000000740000000010e0300000180000000000000c1ffffffffffffff0200000000000000010000000000000040cf0000000000007f00000000000000fcffffffffffffff00005455a2c2d616c3d1889ac68fbea8ad466bdcb35c65139efd7f18350b8e2a3076db15b23dfc7eb48e903633f0660b73552a33584efd83e90b03fe0ea0b20fe91542cf3390f194b3ed84e278d2508a31057fa9a997e7b0b99e78a16accf98a6310ac7ca5da041233c170f6f3191e86e59f8a92c07f90a65340bf7cbe3c40ecce7dbd196d8012c639ac560d75764e4a98cc2402576a3df006397ba1599d2089c5356e73200f65dd5c43cd2324cf7c0759e23466cce93516ad2539d073ef651c19df1bd36fc0f5f3594c220460cfd2ea5de1384cd80a03b24aa1c72209706622b0e15c7c850700d769803ab9bdb9384b01fc26d930cdcebd25b50fc53f32b3471a3e588e1057621a4255f5cf023c4a0dd1eced80a529546e8e1828d0f25e0c0da019f9eef82c58c6fde059cf77987c990c406f6765e7599a6f069a9bee375c195a0ba54e2cc040acc7e98a6c5cef8c679a1a9c59561e158987907776d7aacfa3e311fce7d06f5d820736c345844d680ecd45a2cac24736a4fd7cbf714c24878225e5849c7881dbb76fff12c23f20c3167e42db82ec2eb1c70bb73c0d8e170224ffcaeb09a7ec835f63c48e5742e3c97817f46954f94515ac907384f4a18733c49a5797a5bb5beeaccc6f70eab6e3c06d983dedef58589395c50401b4b76594f2b2dcdab8479ad8efaf97ce30b53bd978f58f51cbf0a3605fb2fbf398e535cb317721ee9a72a095c8c9016994cfc9620a33c549472fbfd9c4c8a08c59250dac8f458e61d9d850771f470a7e136326acb92b79ffc589b508ba19eb8c9ea33ae3a83e230bf50261ec08ebc35b504435f10b75e5e206c05b555bd30d829ad1b8523f32ef703f1c2d35d95b0f2a3d0696527de94fedaf443583fb80874ff85012789984a85a5408bec6ea338eb3f261b230fbd85019ddeb7605c4c373fd2062f130ad2cc1110f13dec364b5909ab4dfdfa2332a7f7395a08e9c3dfddc66f8243c6d2d88c3700e2ffe57486e016a770ebf0e196324ea57244b0142ed8bec2f26f7cf8feb56575b706a1ecc411c11772b05af2dbfd6df3223848bde282b3927ced6c49eae630272da5580bda2801f1767623c2414ac87ba83a7b742ed03d2dd8434e67cea4e98b90724b33310eba5ec28f8f809717dda39e4dc03c2c10f2c8784c9485d9a88f585cd8a8d713a54a54a58db86e4a465fc3bc3d01f12befa899a82f77d0c4ace73f35d237698b1c8dc84d71bc5232b1f6f1568719cc3f283e01d9c12a3f296e33de6db9cfc81dcda56c691ccab85daf40fc03b615835f1cd29a12abecb8a067d9f469d2c23ccad4de05910ee59cac8c81b682e28684af52d06715eaf82854426674404fe11a474c122ea468c4a3a732a8e325665a355c52d72b69c954234ffe7c162d9ff027141ff4e2b4fea0d4ed1c6d9448a21322a847d29a08f2d29aef7aae0861fa7e3efa2b6827c0a984fdc9217b8fcb7f00210302775c09f9b26d77cab514315725384b25eed88c144a27fb9d73ef1119bba783712a05c51bcebaae64c3621d4bccbb25a8f3fe2c35d413eecec53e6282ee9406d2dec8a80230dfd0592ff6edc5898e913288f5864e402b0d19415a3b336e73f383d22029283ab0ab18cf94866e091e4ce7097434449cccf6c96a9c69be356156d6979fa017475eaa8e5e91221286a44f94d1d6ed71bc9416fe9845fa1f387f6d92fe8b211622e8cba380737966302c45a1f6b0c08b02c6cd432d5ab7988fa912bc4b972fdbe26cfe3ce7f96f11c50d6e4781fd369cd901a8419c5acd9dec4c6e43e1fb01d7f98390fe2d6ec224d85e7ba1f3209803161542e6b3f8114bce4e1cb08afa7b878c5d7a00326e7fb0f3970129b9f8380aeb48afc6603758e17b440109e8d147f90d38dd51133ae5b3068fb954989cb6101e9aa81c57e59a55f9af4de93b70eb987fbefa1ef5f2e3ca8eb8cc08c4554edbd4821a98d4d8316949b86ece605138d4a61ecff6a4d1dc76669f72ade294afb8a8c1c888cc6dd256aa253f3fbf81b0c8ca66757621b76512955916912b4d1d687591950a421ade2413a283f82e79f665528140fe3dce183188b39bfb6b4bfcdd7855aab2a4e70a93227f4483a3d071faba3c34f1219b147760ad66c828a4b3fa94300c4f28ebaf84a5241a30e1a4a9135579698245f62d9fcab7114c4982f9f764a60022a4b05158b987a15c19190b802b7a67a95af447f256059a2edf3f53403b238022e367c4c9e65fe9d84513b19c2e2b472bec9dc759188f6405ecadcff8ddea554af55bdcf8e5bed79beea18f98bafe154624c9d01894e3caa610fc2a608648e075aec171e3eb91cb3354ce5f01495c5cdfad062f66a184ee4da6fc6582fc91bc43d5b5eb881dea109cb3a7b07e6357368bead9b99f01dfce333ddbb784ecb9353ab4843a43a69c2be569d34f5e3845fac4f13fe067b2a4e50cfdb4b846805f9a825868f186a57c476e1b8464379e237e7a573b5513b16f564e07d8151eb7a0f5af8d9b5959e8b773fe57c8cc0b493ebe6ae04b0e2628f4b8ec17cf2665b77c7801c84005661f284a1fc76aa92cd0304990a62e168174ff29a80ce9941e46f8cd9504029cd79b78c1d5b60f0b35ad3950681c527999c744977bd58ba08a9dd66cd376ba2bb39576c34600ee75b97c7ed872b9b770a5576150cacc76a4a5be0de4c94e3615ae56a1a455908c73a6be004912d41e82657afcbb753b9cc93a49e912cd0705e79abab28ed72eeef572bbd9f2cf7ecb78e207d74eb93979c7cf090b738e71853fa33e4fb909a419743743e6d83b3d984ec90c7294e04aa8af13e052decf9d32a92a102173456e36896e5550564f5424ef5826182a2a02cb4d1d0966ac3ae83981ff38e0af05dfb890ef752d271756f2adeea2ff589f3b7521319cee390075be7f11d8acece7660e2478e6f86ab5cfe0719e29ab13a56bc44811827ae2fe77b0b148f0b982cd887ed45e4a8be9ef201889fd74f230ea8a7a099f75b9788953cbd71ebde18589207eaef6040758a2c99449e66ab6b31cc90ae5da5f8ca18d330b003a3d08bd79d3c806d01015a73fcd96286ba3e0c07384f3ccbeda4e333c7aa8e868c564c4f098ed28f7559104ff5ade6f001a1eb87b74eee7c36d1114e81b4bc45ea0df733d5ac90282cd2e519858519dd49708f5c9f5de7a0a70245c770caf7c3a5ad7a5f9be99a9e8703d228bd5bc994abf0e6f1a31c3b985f001943bf53fad0d4246b4edd1c339a0743fe2971491c893cf0713dce1974d8d98ba67db9b9146548acee4b2628ac3597797a33a40661631b6bdb9ea9c2e54b4d8817ac31ec167171a61192f39dffbe63500e54a29ccc462b847078aa5ad9d9bff302b777a896272b4e8f098a3467552de341458d451f1f00376dd9d5846d456627c1920e2df0a591eb4d68a876227b61aa92d47ab598c853956b0ba5377d64dc8edbaab426a6dc3e465c68682803969e83ab65f8ef442bfbd5ce0aa7c3977c6cdc2647ba98691f476ed64c959eaa864324583deaf9bf12bbff1aa3fa40f6eb080a1e7afde6dfff4763b6e96467975281ab94730858f14f727065cd18687c3f3c182fa3991cd57440d4dd58e092746755ff2d112f76e21b4d480fffe57998242bbf7ce641c543506e38800b7e655ce816460e59563ea6a42c71fbf2f5b01aeb3ac5657306ce990365329f31811259caa052ec0cee80e299d3f449b2bea76fd054ce14bcd73bbcc0d53575ce743468d02c91647827a186805620d882c0dd478123117349a075363caacf06e43ab8cbfcb5edd31d911546d2404226a324edf83aa310da794f86ca28d3ebc24493937c620c9b2ccdab3dc57d2c6255040f08c2faf1360c40a1b6613009142e601191b3f8bde26753e1ff37d0cbb3a0a2dc44fc507e0d3c2c6d9afc62e246d7b8e07aadf8ed637e1b53606c9a3e546bee39a13285f764de5c1e97de7da6bec06e5ceaf8f1984c6825517f0cd6152c5b94a7ce0faa38674daec6ebbccc29457be5ab75a2c4f610d9016b5ba28dc1fd941f69650604eb5c0e7e234e014b52a7d097dc904ea1ee0dee23cfcf6344f34c24434dbcaab8cbb995ab60e950b7bd3f4226cef242771353f88506f4c4f9b0467343e7e80c425bd20f1e313b06ce2d456bfeaa6c13dffa9d44184f02d952a7856db0a71f031884cd99040aa787b87851d5194024ab5c8bb2647d161cccf5ad43646c9e6c6d3c550e52a3754264f1ccbb6bdf38775defdd337b9985c0d6626877ed03e57fd719207e757680d1a4c8bb181b4819febf5dfb11e2b6e206624ff84e527def5edf8a86c80e3341f93cabe09abcd3173c37d109a2c9d74b62c2da5374c96832f46664cebf9322bdba9f5445eb78f133525453ce91a438a785fd77cc43e87625a261aacf148ad7e74b5ae9f177e7f98701b887b07fcf16d6149e73bcb775e90058d08bb91eb0873fa444a418d1a504d5c12300b8f8cbc52243049d00cc3e27a066166d368f393a4b494532313052f1a944d122896a2b655cd7e03340293761afc5584ea460114be7e8053f8547b6efc300eaa36b70da8885ec415aacc10394c1b0f5ff2b9f6f3cb8d3dca12b2211d8a1063d99ceba867a45fcc2ba12a43e2bbd7ff88000517c1c0fbcfd80326f5b28bbb07b8c07f39b068cc7a3e40ae1bc40361239636dd58b323cac2e363bbb92e5106bc0ec25b296b9700777680d359eccdcda37290715e26b8dad92cbee81d5dbf9e5ed234735127522f48a6a07e58e54352fa2d3600abd12d2a4e8e0bea3fbc8f1d39a4f0e4d30de3754e5983e5c66209aba86b0eb8edbedaeb59144327c25d2d3f84a68d8224301074b7b59d074664dd3e46c5c6806a791b1de102ee27cb2e99d422b0c7e1091a595edd70630c550bb57af48bd7e97e84fb45d2332da11c013f2fe66465b9383e01a4b2df98ba98a04ab6db9b65d011c3b72d5a4fe99efe8d18603270852232475307ccc8ce89f66f9c1ad49986bddd9b8b54ccbf0007da3e998d05ef31e446acc1fe80ea506a01f0347bfc9005aa1f8a6ae137f1c36e0fbfd65e16ec415d252a24e09a2dc7a9f2830517ea715fb78560cfcd4f844247815d64439c9145c83af682c630ffb43dc85ba5ad1ff0da1bcab9346c6bd4683232da853f58d9de443c19f1835f3e12e1020ea26d15d21181c8071d773ffc633fa307e5dd28b9052b5662650708fe5b9fbe457c73a5c18286c4501bca69fc0454865999f27383aed0d3e4f17af56dc71cbf3d88bffedfa2109e778f1f0d7c87e18bed8bc1036f93c4eaebf6452d0dfea4ffac06cc2891f640b1bc2855fef46ca31ae60c6cf6e71af28c63f7e7773a4cbd71788389c705e988c5e70bf75affdbd3a900f3d93d0d20397433590957f0c1937df52aef01e0353309051b4242793ecbd8fe2033263347134297d93ef6d2cde3a74bcad5ae19a63840e0a752babceff8b77c9378f1775d082f29b09be8f0ae862a4d2553cbac966d99fbe2429e4416a9f04416bd65e06013dc3375aeaabc827406363ba8c58fb736f76fe4c476c2e9cc1f63156e7bd83d3aed6f1784fdc0dfbd1c70d5894fb93a53520f3d4e33c7d668ed6de3db45ea44d3be167f64711a7a6d49d9bc941fb9845ab1f11f3ff8f14806d94e4ab264ffb4851e71eccd6891525e438599243c02287173c5c74f696035c1021ceb8b72b6141a80d220e00b9c0ba307e8145322bd67756ba771e8ea556207dc1b5cb63a9ef6e2932f35e967be0c30ef6e8bf86504f69ebe6f793b4c85a1dd94bd15014367996d611ab9d010500000000000502001f0f071bc60bfbbfd4630502000504010300d2c57193018611a80b4721a95816549d4d57e3de7f"], 0x1068) 15:27:28 executing program 5: r0 = openat$mice(0xffffff9c, &(0x7f00000003c0)='/dev/input/mice\x00', 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000006c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 15:27:28 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) 15:27:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0xffffffff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x0) 15:27:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x29}) 15:27:29 executing program 3: unshare(0x2040400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) inotify_add_watch(r1, 0x0, 0x2) 15:27:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xcacf, 0x20000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x0, 0x6, 0x3f, 0x5, 0x400}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000000)=0xf00, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x81, 0xffff, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast1, 0x8000, 0x40, 0xfffffffe, 0x80000}}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a4141, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80801, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0}}], 0x1, 0x200000c1) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000804) r5 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0x40}, @dev={0xfe, 0x80, [], 0x32}, @mcast2, 0x9, 0x2, 0x5, 0x400, 0x400, 0x100280, r6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x74, r6}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private1={0xfc, 0x1, [], 0x1}, @private2, @ipv4={[], [], @broadcast}, 0x8, 0xff00, 0x3ff, 0x400, 0xfff, 0x41210090, r6}) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1068) 15:27:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xcacf, 0x20000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x0, 0x6, 0x3f, 0x5, 0x400}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000000)=0xf00, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x81, 0xffff, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast1, 0x8000, 0x40, 0xfffffffe, 0x80000}}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a4141, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80801, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0}}], 0x1, 0x200000c1) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000804) r5 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0x40}, @dev={0xfe, 0x80, [], 0x32}, @mcast2, 0x9, 0x2, 0x5, 0x400, 0x400, 0x100280, r6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x74, r6}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private1={0xfc, 0x1, [], 0x1}, @private2, @ipv4={[], [], @broadcast}, 0x8, 0xff00, 0x3ff, 0x400, 0xfff, 0x41210090, r6}) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001240)=ANY=[@ANYBLOB="ff0b0000000000000740000000010e0300000180000000000000c1ffffffffffffff0200000000000000010000000000000040cf0000000000007f00000000000000fcffffffffffffff00005455a2c2d616c3d1889ac68fbea8ad466bdcb35c65139efd7f18350b8e2a3076db15b23dfc7eb48e903633f0660b73552a33584efd83e90b03fe0ea0b20fe91542cf3390f194b3ed84e278d2508a31057fa9a997e7b0b99e78a16accf98a6310ac7ca5da041233c170f6f3191e86e59f8a92c07f90a65340bf7cbe3c40ecce7dbd196d8012c639ac560d75764e4a98cc2402576a3df006397ba1599d2089c5356e73200f65dd5c43cd2324cf7c0759e23466cce93516ad2539d073ef651c19df1bd36fc0f5f3594c220460cfd2ea5de1384cd80a03b24aa1c72209706622b0e15c7c850700d769803ab9bdb9384b01fc26d930cdcebd25b50fc53f32b3471a3e588e1057621a4255f5cf023c4a0dd1eced80a529546e8e1828d0f25e0c0da019f9eef82c58c6fde059cf77987c990c406f6765e7599a6f069a9bee375c195a0ba54e2cc040acc7e98a6c5cef8c679a1a9c59561e158987907776d7aacfa3e311fce7d06f5d820736c345844d680ecd45a2cac24736a4fd7cbf714c24878225e5849c7881dbb76fff12c23f20c3167e42db82ec2eb1c70bb73c0d8e170224ffcaeb09a7ec835f63c48e5742e3c97817f46954f94515ac907384f4a18733c49a5797a5bb5beeaccc6f70eab6e3c06d983dedef58589395c50401b4b76594f2b2dcdab8479ad8efaf97ce30b53bd978f58f51cbf0a3605fb2fbf398e535cb317721ee9a72a095c8c9016994cfc9620a33c549472fbfd9c4c8a08c59250dac8f458e61d9d850771f470a7e136326acb92b79ffc589b508ba19eb8c9ea33ae3a83e230bf50261ec08ebc35b504435f10b75e5e206c05b555bd30d829ad1b8523f32ef703f1c2d35d95b0f2a3d0696527de94fedaf443583fb80874ff85012789984a85a5408bec6ea338eb3f261b230fbd85019ddeb7605c4c373fd2062f130ad2cc1110f13dec364b5909ab4dfdfa2332a7f7395a08e9c3dfddc66f8243c6d2d88c3700e2ffe57486e016a770ebf0e196324ea57244b0142ed8bec2f26f7cf8feb56575b706a1ecc411c11772b05af2dbfd6df3223848bde282b3927ced6c49eae630272da5580bda2801f1767623c2414ac87ba83a7b742ed03d2dd8434e67cea4e98b90724b33310eba5ec28f8f809717dda39e4dc03c2c10f2c8784c9485d9a88f585cd8a8d713a54a54a58db86e4a465fc3bc3d01f12befa899a82f77d0c4ace73f35d237698b1c8dc84d71bc5232b1f6f1568719cc3f283e01d9c12a3f296e33de6db9cfc81dcda56c691ccab85daf40fc03b615835f1cd29a12abecb8a067d9f469d2c23ccad4de05910ee59cac8c81b682e28684af52d06715eaf82854426674404fe11a474c122ea468c4a3a732a8e325665a355c52d72b69c954234ffe7c162d9ff027141ff4e2b4fea0d4ed1c6d9448a21322a847d29a08f2d29aef7aae0861fa7e3efa2b6827c0a984fdc9217b8fcb7f00210302775c09f9b26d77cab514315725384b25eed88c144a27fb9d73ef1119bba783712a05c51bcebaae64c3621d4bccbb25a8f3fe2c35d413eecec53e6282ee9406d2dec8a80230dfd0592ff6edc5898e913288f5864e402b0d19415a3b336e73f383d22029283ab0ab18cf94866e091e4ce7097434449cccf6c96a9c69be356156d6979fa017475eaa8e5e91221286a44f94d1d6ed71bc9416fe9845fa1f387f6d92fe8b211622e8cba380737966302c45a1f6b0c08b02c6cd432d5ab7988fa912bc4b972fdbe26cfe3ce7f96f11c50d6e4781fd369cd901a8419c5acd9dec4c6e43e1fb01d7f98390fe2d6ec224d85e7ba1f3209803161542e6b3f8114bce4e1cb08afa7b878c5d7a00326e7fb0f3970129b9f8380aeb48afc6603758e17b440109e8d147f90d38dd51133ae5b3068fb954989cb6101e9aa81c57e59a55f9af4de93b70eb987fbefa1ef5f2e3ca8eb8cc08c4554edbd4821a98d4d8316949b86ece605138d4a61ecff6a4d1dc76669f72ade294afb8a8c1c888cc6dd256aa253f3fbf81b0c8ca66757621b76512955916912b4d1d687591950a421ade2413a283f82e79f665528140fe3dce183188b39bfb6b4bfcdd7855aab2a4e70a93227f4483a3d071faba3c34f1219b147760ad66c828a4b3fa94300c4f28ebaf84a5241a30e1a4a9135579698245f62d9fcab7114c4982f9f764a60022a4b05158b987a15c19190b802b7a67a95af447f256059a2edf3f53403b238022e367c4c9e65fe9d84513b19c2e2b472bec9dc759188f6405ecadcff8ddea554af55bdcf8e5bed79beea18f98bafe154624c9d01894e3caa610fc2a608648e075aec171e3eb91cb3354ce5f01495c5cdfad062f66a184ee4da6fc6582fc91bc43d5b5eb881dea109cb3a7b07e6357368bead9b99f01dfce333ddbb784ecb9353ab4843a43a69c2be569d34f5e3845fac4f13fe067b2a4e50cfdb4b846805f9a825868f186a57c476e1b8464379e237e7a573b5513b16f564e07d8151eb7a0f5af8d9b5959e8b773fe57c8cc0b493ebe6ae04b0e2628f4b8ec17cf2665b77c7801c84005661f284a1fc76aa92cd0304990a62e168174ff29a80ce9941e46f8cd9504029cd79b78c1d5b60f0b35ad3950681c527999c744977bd58ba08a9dd66cd376ba2bb39576c34600ee75b97c7ed872b9b770a5576150cacc76a4a5be0de4c94e3615ae56a1a455908c73a6be004912d41e82657afcbb753b9cc93a49e912cd0705e79abab28ed72eeef572bbd9f2cf7ecb78e207d74eb93979c7cf090b738e71853fa33e4fb909a419743743e6d83b3d984ec90c7294e04aa8af13e052decf9d32a92a102173456e36896e5550564f5424ef5826182a2a02cb4d1d0966ac3ae83981ff38e0af05dfb890ef752d271756f2adeea2ff589f3b7521319cee390075be7f11d8acece7660e2478e6f86ab5cfe0719e29ab13a56bc44811827ae2fe77b0b148f0b982cd887ed45e4a8be9ef201889fd74f230ea8a7a099f75b9788953cbd71ebde18589207eaef6040758a2c99449e66ab6b31cc90ae5da5f8ca18d330b003a3d08bd79d3c806d01015a73fcd96286ba3e0c07384f3ccbeda4e333c7aa8e868c564c4f098ed28f7559104ff5ade6f001a1eb87b74eee7c36d1114e81b4bc45ea0df733d5ac90282cd2e519858519dd49708f5c9f5de7a0a70245c770caf7c3a5ad7a5f9be99a9e8703d228bd5bc994abf0e6f1a31c3b985f001943bf53fad0d4246b4edd1c339a0743fe2971491c893cf0713dce1974d8d98ba67db9b9146548acee4b2628ac3597797a33a40661631b6bdb9ea9c2e54b4d8817ac31ec167171a61192f39dffbe63500e54a29ccc462b847078aa5ad9d9bff302b777a896272b4e8f098a3467552de341458d451f1f00376dd9d5846d456627c1920e2df0a591eb4d68a876227b61aa92d47ab598c853956b0ba5377d64dc8edbaab426a6dc3e465c68682803969e83ab65f8ef442bfbd5ce0aa7c3977c6cdc2647ba98691f476ed64c959eaa864324583deaf9bf12bbff1aa3fa40f6eb080a1e7afde6dfff4763b6e96467975281ab94730858f14f727065cd18687c3f3c182fa3991cd57440d4dd58e092746755ff2d112f76e21b4d480fffe57998242bbf7ce641c543506e38800b7e655ce816460e59563ea6a42c71fbf2f5b01aeb3ac5657306ce990365329f31811259caa052ec0cee80e299d3f449b2bea76fd054ce14bcd73bbcc0d53575ce743468d02c91647827a186805620d882c0dd478123117349a075363caacf06e43ab8cbfcb5edd31d911546d2404226a324edf83aa310da794f86ca28d3ebc24493937c620c9b2ccdab3dc57d2c6255040f08c2faf1360c40a1b6613009142e601191b3f8bde26753e1ff37d0cbb3a0a2dc44fc507e0d3c2c6d9afc62e246d7b8e07aadf8ed637e1b53606c9a3e546bee39a13285f764de5c1e97de7da6bec06e5ceaf8f1984c6825517f0cd6152c5b94a7ce0faa38674daec6ebbccc29457be5ab75a2c4f610d9016b5ba28dc1fd941f69650604eb5c0e7e234e014b52a7d097dc904ea1ee0dee23cfcf6344f34c24434dbcaab8cbb995ab60e950b7bd3f4226cef242771353f88506f4c4f9b0467343e7e80c425bd20f1e313b06ce2d456bfeaa6c13dffa9d44184f02d952a7856db0a71f031884cd99040aa787b87851d5194024ab5c8bb2647d161cccf5ad43646c9e6c6d3c550e52a3754264f1ccbb6bdf38775defdd337b9985c0d6626877ed03e57fd719207e757680d1a4c8bb181b4819febf5dfb11e2b6e206624ff84e527def5edf8a86c80e3341f93cabe09abcd3173c37d109a2c9d74b62c2da5374c96832f46664cebf9322bdba9f5445eb78f133525453ce91a438a785fd77cc43e87625a261aacf148ad7e74b5ae9f177e7f98701b887b07fcf16d6149e73bcb775e90058d08bb91eb0873fa444a418d1a504d5c12300b8f8cbc52243049d00cc3e27a066166d368f393a4b494532313052f1a944d122896a2b655cd7e03340293761afc5584ea460114be7e8053f8547b6efc300eaa36b70da8885ec415aacc10394c1b0f5ff2b9f6f3cb8d3dca12b2211d8a1063d99ceba867a45fcc2ba12a43e2bbd7ff88000517c1c0fbcfd80326f5b28bbb07b8c07f39b068cc7a3e40ae1bc40361239636dd58b323cac2e363bbb92e5106bc0ec25b296b9700777680d359eccdcda37290715e26b8dad92cbee81d5dbf9e5ed234735127522f48a6a07e58e54352fa2d3600abd12d2a4e8e0bea3fbc8f1d39a4f0e4d30de3754e5983e5c66209aba86b0eb8edbedaeb59144327c25d2d3f84a68d8224301074b7b59d074664dd3e46c5c6806a791b1de102ee27cb2e99d422b0c7e1091a595edd70630c550bb57af48bd7e97e84fb45d2332da11c013f2fe66465b9383e01a4b2df98ba98a04ab6db9b65d011c3b72d5a4fe99efe8d18603270852232475307ccc8ce89f66f9c1ad49986bddd9b8b54ccbf0007da3e998d05ef31e446acc1fe80ea506a01f0347bfc9005aa1f8a6ae137f1c36e0fbfd65e16ec415d252a24e09a2dc7a9f2830517ea715fb78560cfcd4f844247815d64439c9145c83af682c630ffb43dc85ba5ad1ff0da1bcab9346c6bd4683232da853f58d9de443c19f1835f3e12e1020ea26d15d21181c8071d773ffc633fa307e5dd28b9052b5662650708fe5b9fbe457c73a5c18286c4501bca69fc0454865999f27383aed0d3e4f17af56dc71cbf3d88bffedfa2109e778f1f0d7c87e18bed8bc1036f93c4eaebf6452d0dfea4ffac06cc2891f640b1bc2855fef46ca31ae60c6cf6e71af28c63f7e7773a4cbd71788389c705e988c5e70bf75affdbd3a900f3d93d0d20397433590957f0c1937df52aef01e0353309051b4242793ecbd8fe2033263347134297d93ef6d2cde3a74bcad5ae19a63840e0a752babceff8b77c9378f1775d082f29b09be8f0ae862a4d2553cbac966d99fbe2429e4416a9f04416bd65e06013dc3375aeaabc827406363ba8c58fb736f76fe4c476c2e9cc1f63156e7bd83d3aed6f1784fdc0dfbd1c70d5894fb93a53520f3d4e33c7d668ed6de3db45ea44d3be167f64711a7a6d49d9bc941fb9845ab1f11f3ff8f14806d94e4ab264ffb4851e71eccd6891525e438599243c02287173c5c74f696035c1021ceb8b72b6141a80d220e00b9c0ba307e8145322bd67756ba771e8ea556207dc1b5cb63a9ef6e2932f35e967be0c30ef6e8bf86504f69ebe6f793b4c85a1dd94bd15014367996d611ab9d010500000000000502001f0f071bc60bfbbfd4630502000504010300d2c57193018611a80b4721a95816549d4d57e3de7f"], 0x1068) 15:27:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x14, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x1d4, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @empty}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x1d4}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x401, 0x1, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0xb}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x60}}, 0x0) [ 1085.104204][T27422] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1085.113058][T27422] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 15:27:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0xffffffff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x0) 15:27:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@dev}, 0x14) 15:27:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 15:27:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xcacf, 0x20000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x0, 0x6, 0x3f, 0x5, 0x400}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000000)=0xf00, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x81, 0xffff, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast1, 0x8000, 0x40, 0xfffffffe, 0x80000}}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a4141, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80801, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0}}], 0x1, 0x200000c1) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000804) r5 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0x40}, @dev={0xfe, 0x80, [], 0x32}, @mcast2, 0x9, 0x2, 0x5, 0x400, 0x400, 0x100280, r6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x74, r6}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private1={0xfc, 0x1, [], 0x1}, @private2, @ipv4={[], [], @broadcast}, 0x8, 0xff00, 0x3ff, 0x400, 0xfff, 0x41210090, r6}) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1068) 15:27:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xcacf, 0x20000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x0, 0x6, 0x3f, 0x5, 0x400}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000000)=0xf00, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x81, 0xffff, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast1, 0x8000, 0x40, 0xfffffffe, 0x80000}}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a4141, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80801, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0}}], 0x1, 0x200000c1) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000804) r5 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0x40}, @dev={0xfe, 0x80, [], 0x32}, @mcast2, 0x9, 0x2, 0x5, 0x400, 0x400, 0x100280, r6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x74, r6}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private1={0xfc, 0x1, [], 0x1}, @private2, @ipv4={[], [], @broadcast}, 0x8, 0xff00, 0x3ff, 0x400, 0xfff, 0x41210090, r6}) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1068) 15:27:30 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000315ad8084c052b000d01000000010902240003000000000904000002de4f2c0009058f02000100000009050212"], 0x0) 15:27:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40440, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x80041270) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000280)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x24040091) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000002c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x11, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setuid(0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030302c6d6f64653d30303030303038303030303030303030303030303030302c6d6f64653d30303030303030303030303030303030303030303031312c66736e616d653d275c2c646f6e745f6d6561737572652c736d61636b66736861743d8c087f12ef92390145bcfb103a59db2fb8d33dd1431418dee546525897f8642c7365636c6162656c2c61707072616973652c7375626a5f757365723d2c2c00"]) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'bridge_slave_1\x00', 0x4}, 0x18) dup3(0xffffffffffffffff, r1, 0x0) clock_adjtime(0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32=r0], 0xc63b9e35) 15:27:30 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 15:27:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xcacf, 0x20000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x0, 0x6, 0x3f, 0x5, 0x400}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000000)=0xf00, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x81, 0xffff, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast1, 0x8000, 0x40, 0xfffffffe, 0x80000}}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a4141, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80801, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0}}], 0x1, 0x200000c1) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000804) r5 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0x40}, @dev={0xfe, 0x80, [], 0x32}, @mcast2, 0x9, 0x2, 0x5, 0x400, 0x400, 0x100280, r6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x74, r6}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private1={0xfc, 0x1, [], 0x1}, @private2, @ipv4={[], [], @broadcast}, 0x8, 0xff00, 0x3ff, 0x400, 0xfff, 0x41210090, r6}) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1068) 15:27:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 15:27:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xcacf, 0x20000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x0, 0x6, 0x3f, 0x5, 0x400}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000000)=0xf00, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x81, 0xffff, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast1, 0x8000, 0x40, 0xfffffffe, 0x80000}}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a4141, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80801, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0}}], 0x1, 0x200000c1) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000804) r5 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0x40}, @dev={0xfe, 0x80, [], 0x32}, @mcast2, 0x9, 0x2, 0x5, 0x400, 0x400, 0x100280, r6}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x74, r6}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private1={0xfc, 0x1, [], 0x1}, @private2, @ipv4={[], [], @broadcast}, 0x8, 0xff00, 0x3ff, 0x400, 0xfff, 0x41210090, r6}) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1068) [ 1086.548827][ T28] audit: type=1800 audit(1600183651.139:99): pid=27447 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16375 res=0 15:27:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000f100000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 15:27:31 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 15:27:31 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7) dup2(r1, r3) 15:27:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x64000845, &(0x7f000031e000)={0xa, 0x0, 0x0, @remote}, 0x1a) 15:27:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) [ 1087.034715][T27458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1087.292955][T27464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:27:32 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000100)={{r1}, {0x77359400}}) sendfile(r0, r0, 0x0, 0x0) 15:27:32 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006800b595000006000000f60000000000", @ANYRES32=0x0, @ANYBLOB="140002"], 0x3}}, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0) 15:27:32 executing program 2: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 15:27:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/479], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x9c}, 0x48) 15:27:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 15:27:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8009}, 0xff6d) write(r0, &(0x7f0000000140)="200000001a000100f2ffff65835f7f081c148000000800000000000000001300", 0x20) 15:27:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 15:27:32 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 15:27:33 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1088.518869][ T17] usb 3-1: new high-speed USB device number 6 using dummy_hcd 15:27:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) clock_adjtime(0x0, &(0x7f0000000000)={0x9}) 15:27:33 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$inet(0x10, 0x2000000000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20002007}) epoll_wait(r0, &(0x7f0000000080)=[{}, {}], 0x2, 0x0) [ 1088.891102][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1088.902214][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1088.912298][ T17] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 15:27:33 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000440)) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="5df1870cd830", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1089.170343][ T17] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1089.180050][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.188392][ T17] usb 3-1: Product: syz [ 1089.192699][ T17] usb 3-1: Manufacturer: syz [ 1089.197548][ T17] usb 3-1: SerialNumber: syz 15:27:33 executing program 4: r0 = socket(0x1d, 0x3, 0x1) bind$inet6(r0, 0x0, 0x0) 15:27:34 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800a0001007663616e"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x8, @dev}, @IFA_ADDRESS={0x8, 0x4, @multicast2=0x10000000}]}, 0x28}}, 0x0) [ 1089.696708][ T17] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1089.704528][ T17] usb 3-1: 2:1 : sample bitwidth 129 in over sample bytes 0 [ 1089.712371][ T17] usb 3-1: 2:1 : unsupported sample bitwidth 129 in 0 bytes [ 1089.860342][ T17] usb 3-1: USB disconnect, device number 6 [ 1089.863220][T27534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1089.993963][T27541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1090.516867][ T17] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1090.887469][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1090.898555][ T17] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1090.908617][ T17] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1091.086901][ T17] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1091.096205][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.104332][ T17] usb 3-1: Product: syz [ 1091.108835][ T17] usb 3-1: Manufacturer: syz [ 1091.113561][ T17] usb 3-1: SerialNumber: syz 15:27:36 executing program 2: futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0x0) 15:27:36 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$inet(0x10, 0x2000000000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20002007}) epoll_wait(r0, &(0x7f0000000080)=[{}, {}], 0x2, 0x0) 15:27:36 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000440)) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="5df1870cd830", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:27:36 executing program 4: r0 = socket(0x1d, 0x3, 0x1) bind$inet6(r0, 0x0, 0x0) 15:27:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20}], 0x20}], 0x4924924924924d0, 0x0) 15:27:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x495f) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x2, 0x5, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) [ 1091.385491][ T17] usb 3-1: can't set config #1, error -71 [ 1091.473492][ T17] usb 3-1: USB disconnect, device number 7 [ 1091.822952][ T8501] block nbd5: Receive control failed (result -107) [ 1091.831583][T27564] block nbd5: shutting down sockets 15:27:36 executing program 4: r0 = socket(0x1d, 0x3, 0x1) bind$inet6(r0, 0x0, 0x0) 15:27:36 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000440)) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="5df1870cd830", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:27:37 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$inet(0x10, 0x2000000000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20002007}) epoll_wait(r0, &(0x7f0000000080)=[{}, {}], 0x2, 0x0) 15:27:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20}], 0x20}], 0x4924924924924d0, 0x0) 15:27:37 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000140)) 15:27:37 executing program 2: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)) 15:27:37 executing program 4: r0 = socket(0x1d, 0x3, 0x1) bind$inet6(r0, 0x0, 0x0) 15:27:37 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000440)) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="5df1870cd830", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:27:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 15:27:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20}], 0x20}], 0x4924924924924d0, 0x0) 15:27:37 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$inet(0x10, 0x2000000000003, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20002007}) epoll_wait(r0, &(0x7f0000000080)=[{}, {}], 0x2, 0x0) 15:27:38 executing program 2: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xfd, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000180)={0x7fffffff, 0x0, @name="7f24be61ee77f36e958b8b842fcfd66c3e5cafb81bb53712e80576daa9a6d1f3"}) 15:27:38 executing program 4: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) 15:27:38 executing program 1: syz_emit_ethernet(0x9a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000e00", 0x64, 0x2b, 0x0, @local, @local, {[], {0x2b00, 0x0, 0x64, 0x0, @wg=@response={0x2b, 0x0, 0x0, "e47b79cd1bc73863303d9bc41e9913a7c6795a3f57b99cf285d561d6dd214c90", "c0ff00008e00000000000500", {"784f4a196089275dfc1a834df6c2bee8", "63b5055b06518b1803dc0b238d5c792e"}}}}}}}}, 0x0) 15:27:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20}], 0x20}], 0x4924924924924d0, 0x0) 15:27:38 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000340)={0x0, 'batadv_slave_1\x00', {0x20fffe}}) 15:27:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x6a, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2, 0x300}, [@typed={0x4}]}, 0x18}}, 0x0) 15:27:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24004000) ioctl$NBD_DISCONNECT(r2, 0xab08) [ 1094.391191][T27632] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1094.431146][T27628] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:27:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f0000004ec0)='./file0\x00', &(0x7f0000004f00)) 15:27:39 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 15:27:39 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40000400000002c2, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 1095.018016][T27640] block nbd2: NBD_DISCONNECT [ 1095.022917][T27640] block nbd2: Send disconnect failed -32 15:27:39 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:27:39 executing program 4: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) [ 1095.118974][T27639] block nbd2: Disconnected due to user request. [ 1095.126120][T27639] block nbd2: shutting down sockets [ 1095.186850][T27639] block nbd2: shutting down sockets 15:27:40 executing program 2: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) 15:27:40 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 15:27:40 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15:27:40 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @broadcast, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1095.927981][T27655] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 15:27:40 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = socket(0x2, 0x805, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 1096.170560][T27670] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 15:27:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15:27:41 executing program 2: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) 15:27:41 executing program 4: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) 15:27:41 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x12, 0xffffffff}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="0000000000401800280012800a00010076786c616e00000018000280140010"], 0x3}}, 0x0) socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 15:27:41 executing program 1: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x4}, {0x77359400}}, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0}) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{r2}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/237, 0xed}], 0x1) 15:27:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 1097.259034][T27681] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1097.411316][T27684] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 15:27:42 executing program 2: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) 15:27:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8000000}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xcd}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}], {0x14}}, 0xb8}}, 0x0) 15:27:42 executing program 4: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) 15:27:42 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15:27:42 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) dup3(r0, r1, 0x80000) [ 1098.275425][T27700] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 15:27:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000006a80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c, 0x0}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) [ 1098.475304][T27708] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 15:27:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x48}}, 0x0) 15:27:43 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x4004743d, &(0x7f0000001080)=""/244) 15:27:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x205, 0x183001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:27:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:27:44 executing program 4: r0 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r0, 0xc00000) read(r0, &(0x7f00000000c0)=""/40, 0x28) 15:27:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1ff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05034a00a4fd3e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0xfdf8, 0x0, 0x0, 0x1d3) 15:27:44 executing program 5: setgroups(0x3, &(0x7f00000002c0)=[0x0, 0xee00, 0x0]) 15:27:44 executing program 0: unshare(0x8000400) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000000) inotify_rm_watch(r0, r1) 15:27:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000280)={0x2c, 0x1, r1}, 0x10) 15:27:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6], 0x4240a2a0) dup3(r1, r3, 0x80000) r8 = semget(0x2, 0x4, 0xb8) semctl$SETVAL(r8, 0x4, 0x10, &(0x7f0000000140)=0x3) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:27:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0xa, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x44}}, 0x0) [ 1099.975470][T24857] usb 2-1: new high-speed USB device number 4 using dummy_hcd 15:27:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000040)='\x00\x00\x02\x13\x00\x00\x00\x05\x00x\x92\x12\xbc(^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x9e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91ze\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\x84\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x81\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjVA\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\xbfy:d\x9e\xc5,\x9287\x83\xb0\xd8\xdec\xae\xdd\x1eh2\xd5\xd8\xc9\x8f\xc9\xef\x97\xd0\xae\x86\x81\xf7|a\x035\xe8\xd6\x042\xe8\xa4\xe2\x93\xb4{\x8bb\xdd\x02\xc3H\t\x80\xaf\xb4/\x85(v{\t\xe0\xac\x92d\xec7\xf9\xedN\x9b=y\xc6\x9b\\\xb2\x9b\xb41\x11\xb2\xcbcxX#6\n\xb2j\x00\xe5') ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000400)='\x00\x00\t\x13\x00\x00\x00\x01\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\x00\x01\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0u\xba\xfc\x00\xc2\x19\x02\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82J\x00\x00\x00h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00H\x06\x00\x00\x00\x00\x00\x00\x00>\xfdb\x18+C\xdd\xaaV\xf1\xdbjE\x01\xd1sD\x89\x94&\\U1\xdc-\'\x01\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92\xe6&\x87\xd3\xc1\xd2\b\x95*\x10\'Lh\x97~\x00\x00\x00\x00\x00\x00\x00\x00\x00t@\xcd\x15\xe9\x91q\x89Z\xdf\x1a\xb7\x04\x84\x82\xddq\xed\xb3\x1d\xd2\xa1\f') dup2(r1, r2) [ 1100.234948][T24857] usb 2-1: Using ep0 maxpacket: 16 15:27:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7fffffff, @broadcast}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) [ 1100.376462][T24857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1100.390174][T24857] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1100.399557][T24857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:27:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0xa, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x44}}, 0x0) [ 1100.582927][T24857] usb 2-1: config 0 descriptor?? 15:27:45 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xac}, {0x2c}, {0x6}]}) [ 1100.643370][T27756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1100.662573][T24857] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1100.757419][T27760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1100.837651][ T12] usb 2-1: USB disconnect, device number 4 [ 1101.424876][ T12] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1101.675777][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 1101.712193][ T28] audit: type=1326 audit(1600183666.301:100): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27769 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 [ 1101.826574][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.837714][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.847826][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1101.857078][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.997212][ T12] usb 2-1: config 0 descriptor?? [ 1102.044828][ T12] hub 2-1:0.0: USB hub found [ 1102.188446][ T28] audit: type=1326 audit(1600183666.781:101): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27769 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 [ 1102.265089][ T12] hub 2-1:0.0: 1 port detected [ 1102.574931][ T12] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1102.581578][ T12] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1102.596778][ T12] usbhid 2-1:0.0: can't add hid device: -22 [ 1102.603054][ T12] usbhid: probe of 2-1:0.0 failed with error -22 [ 1102.705897][ T12] usb 2-1: USB disconnect, device number 5 [ 1103.344557][ T12] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1103.604549][ T12] usb 2-1: Using ep0 maxpacket: 16 15:27:48 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8, 0xb9, 0x5b, 0x40, 0x471, 0x302, 0xf91e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x0, 0x52, 0x31, 0xe8}}]}}]}}, 0x0) 15:27:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) 15:27:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xac}, {0x2c}, {0x6}]}) 15:27:48 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc058534f, &(0x7f0000000040)={{0x0, 0x1}}) 15:27:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6], 0x4240a2a0) dup3(r1, r3, 0x80000) r8 = semget(0x2, 0x4, 0xb8) semctl$SETVAL(r8, 0x4, 0x10, &(0x7f0000000140)=0x3) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:27:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0xa, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x44}}, 0x0) [ 1103.768946][ T12] usb 2-1: device descriptor read/all, error -71 [ 1103.868056][ T28] audit: type=1326 audit(1600183668.461:102): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27782 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 [ 1103.921793][T27791] mmap: syz-executor.5 (27791) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 15:27:48 executing program 0: bpf$BPF_BTF_LOAD(0x18, 0x0, 0x0) 15:27:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0xa, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x44}}, 0x0) [ 1104.494484][ T12] usb 2-1: new high-speed USB device number 7 using dummy_hcd 15:27:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x101) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:27:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6], 0x4240a2a0) dup3(r1, r3, 0x80000) r8 = semget(0x2, 0x4, 0xb8) semctl$SETVAL(r8, 0x4, 0x10, &(0x7f0000000140)=0x3) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 15:27:49 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xac}, {0x2c}, {0x6}]}) 15:27:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b45, 0x4) [ 1104.885906][ T12] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 1104.894362][ T12] usb 2-1: config 0 has no interface number 0 [ 1104.900642][ T12] usb 2-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=f9.1e [ 1104.910066][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.127315][ T12] usb 2-1: config 0 descriptor?? [ 1105.376273][ T8693] usb 2-1: USB disconnect, device number 7 [ 1105.565371][ T28] audit: type=1326 audit(1600183670.161:103): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 [ 1106.154279][ T8693] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1106.514192][ T8693] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 1106.522633][ T8693] usb 2-1: config 0 has no interface number 0 [ 1106.529452][ T8693] usb 2-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=f9.1e [ 1106.538769][ T8693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.627561][ T8693] usb 2-1: config 0 descriptor?? [ 1106.885288][ T8693] usb 2-1: USB disconnect, device number 8 15:27:51 executing program 1: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x321, r0) keyctl$update(0x2, r1, &(0x7f0000000200)="96", 0x10) 15:27:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x101) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:27:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) 15:27:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 15:27:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xac}, {0x2c}, {0x6}]}) 15:27:51 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5], 0x4240a2a0) dup3(r0, r2, 0x80000) r7 = semget(0x2, 0x4, 0xb8) semctl$SETVAL(r7, 0x4, 0x10, &(0x7f0000000140)=0x3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) [ 1107.333787][ T28] audit: type=1326 audit(1600183671.922:104): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27839 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3e549 code=0x0 15:27:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x101) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}, 0x1, 0x200000000000000}, 0x0) 15:27:52 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {}, {0x4, 0x10}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:27:52 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5], 0x4240a2a0) dup3(r0, r2, 0x80000) r7 = semget(0x2, 0x4, 0xb8) semctl$SETVAL(r7, 0x4, 0x10, &(0x7f0000000140)=0x3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 15:27:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x101) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1108.493340][T27859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:27:53 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load trusted:user: 00000000000000000074 '], 0x80752ced1d6eb88b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 15:27:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000f10000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x11, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x7, 0xa000000}, 0x0) [ 1108.803165][T27859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1109.137578][T27875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:27:53 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load trusted:user: 00000000000000000074 '], 0x80752ced1d6eb88b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 1109.340167][T27880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:27:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0xea60}, 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 15:27:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 15:27:54 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setns(r2, 0x0) 15:27:54 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x4240a2a0) dup3(r0, r1, 0x80000) r6 = semget(0x2, 0x4, 0xb8) semctl$SETVAL(r6, 0x4, 0x10, &(0x7f0000000140)=0x3) 15:27:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000f10000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x11, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x7, 0xa000000}, 0x0) 15:27:54 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load trusted:user: 00000000000000000074 '], 0x80752ced1d6eb88b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 15:27:54 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@nls={'nls', 0x3d, 'cp852'}}]}) 15:27:54 executing program 1: clone(0x2000000002808100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe, 0xc, 0x2, [@typedef]}}, &(0x7f0000000340)=""/142, 0x26, 0x8e, 0x8}, 0x20) [ 1110.219898][T27909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:27:55 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load trusted:user: 00000000000000000074 '], 0x80752ced1d6eb88b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 15:27:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000f10000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x11, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x7, 0xa000000}, 0x0) [ 1110.755996][T27926] BPF:Section overlap found [ 1110.789336][T27927] BPF:Section overlap found 15:27:55 executing program 1: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) 15:27:55 executing program 0: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f00000004c0)='1', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_mtu(r2, 0x29, 0x30, 0x0, &(0x7f0000000080)) 15:27:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x4240a2a0) dup3(r0, r1, 0x80000) semget(0x2, 0x4, 0xb8) [ 1111.294136][T27935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:27:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 15:27:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 15:27:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030038000505d25a80648c69940d0224fc6012000a400a080048051282c16c153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) 15:27:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f0f6d07ff009b66299667b70536342623b372d808efa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6a9b4c8dee825286b31a260e60482bb0b4179b3143", 0xff7c}], 0x1) 15:27:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000f10000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x11, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x7, 0xa000000}, 0x0) [ 1111.916933][T27955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1111.938880][T27956] netlink: 210876 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1112.053624][T27958] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 1112.065101][T27958] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 15:27:56 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x800000051a, 0x4) ftruncate(r1, 0x17ff) syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) close(r0) 15:27:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 15:27:57 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x4240a2a0) semget(0x2, 0x4, 0xb8) 15:27:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x325, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4]}}, 0x0}, 0x0) 15:27:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd00}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}, 0x1, 0x2000000}, 0x0) [ 1112.900945][T27974] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1113.170073][T27982] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 1113.181926][T27982] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 15:27:58 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000080), 0x3e0000) [ 1113.383389][T15222] usb 4-1: new high-speed USB device number 33 using dummy_hcd 15:27:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 1113.623463][T15222] usb 4-1: Using ep0 maxpacket: 8 [ 1113.743288][T15222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.754765][T15222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.765072][T15222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1113.778206][T15222] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.40 [ 1113.787566][T15222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.806511][T15222] usb 4-1: config 0 descriptor?? [ 1113.884419][T27994] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 1113.895917][T27994] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 15:27:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 15:27:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0xa00000000000000}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 15:27:58 executing program 1: ioprio_set$uid(0x0, 0x0, 0x4) 15:27:58 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) semget(0x2, 0x4, 0xb8) 15:27:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 1114.311052][T15222] wacom 0003:056A:0325.0006: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 15:27:59 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1de) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1de) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r2, 0x1, 0x0, 0x0, {0x2, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) [ 1114.497203][ T12] usb 4-1: USB disconnect, device number 33 15:27:59 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e249922cb18f6e2e2aba000400012e0b3836005404b0e0301a4ce8070000005f1655e340b76795008000000000fdff0001013c5811039e1531e33a0ce142a1c188242c1c34f214f316f3f6b61c0001000000000000004974000000000000326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r1, &(0x7f00000012c0)="0c262c927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa030596aecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 1114.715348][T28020] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 1114.726831][T28020] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 15:27:59 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) semget(0x2, 0x4, 0xb8) [ 1115.273018][ T12] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1115.542933][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 1115.685553][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.697006][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.707126][ T12] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.720162][ T12] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.40 [ 1115.729484][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.907940][ T12] usb 4-1: config 0 descriptor?? 15:28:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff4d, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000010000505d23080648c63940d0324fc60100002c137153e370907018048f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x20, 0x4, 0x6}, 0x1}}, 0x18) rt_sigpending(&(0x7f00000000c0), 0x8) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x401) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) poll(&(0x7f0000001980)=[{r3}], 0x1, 0x5) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000280)=0x100010, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'vlan0\x00', {}, 0x68}) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) poll(&(0x7f0000001980)=[{r5}], 0x1, 0x5) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000140)=0x200, 0x4) 15:28:00 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1de) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1de) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r2, 0x1, 0x0, 0x0, {0x2, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) 15:28:00 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x32}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:28:00 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) pipe(&(0x7f00000001c0)) semget(0x2, 0x4, 0xb8) 15:28:00 executing program 5: r0 = memfd_create(&(0x7f0000000200)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xb5\x8fM\xddU\x10\xaaod\x96\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r\x14\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xcd\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9Y\xb8\xc9\xdd\xadp3\xbe\x93C\xa3b\x18\xe7\xcdx\x86aA\x9e\x83\aKc\xba\x05\x19\xb1\x9cJ\xce2\x9fW\xd3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x560) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x10, &(0x7f000059aff8), &(0x7f00000001c0)=0x8) [ 1116.285558][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 1116.291855][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 1116.378101][ T12] usb 4-1: USB disconnect, device number 34 15:28:01 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e249922cb18f6e2e2aba000400012e0b3836005404b0e0301a4ce8070000005f1655e340b76795008000000000fdff0001013c5811039e1531e33a0ce142a1c188242c1c34f214f316f3f6b61c0001000000000000004974000000000000326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r1, &(0x7f00000012c0)="0c262c927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa030596aecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:28:01 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) semget(0x2, 0x4, 0xb8) 15:28:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$uinput_user_dev(r0, 0x0, 0x2b) 15:28:01 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1de) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1de) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r2, 0x1, 0x0, 0x0, {0x2, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) [ 1116.756913][ T28] audit: type=1800 audit(1600183681.353:105): pid=28044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16374 res=0 [ 1116.780992][T28052] netlink: 18406 bytes leftover after parsing attributes in process `syz-executor.3'. 15:28:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000032001b03"], 0x30}}, 0x0) 15:28:02 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) semget(0x2, 0x4, 0xb8) 15:28:02 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1de) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1de) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r2, 0x1, 0x0, 0x0, {0x2, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) [ 1117.530406][T28052] netlink: 18406 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1118.018682][T28068] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1118.028278][T28068] tc_dump_action: action bad kind 15:28:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 15:28:02 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xf6ffffff, 0x0) 15:28:02 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) semget(0x2, 0x4, 0xb8) 15:28:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x84802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) rt_sigreturn() 15:28:02 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e249922cb18f6e2e2aba000400012e0b3836005404b0e0301a4ce8070000005f1655e340b76795008000000000fdff0001013c5811039e1531e33a0ce142a1c188242c1c34f214f316f3f6b61c0001000000000000004974000000000000326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r1, &(0x7f00000012c0)="0c262c927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa030596aecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:28:02 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000a07fff)) 15:28:03 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) lstat(&(0x7f0000000180)='./file0\x00', 0x0) 15:28:03 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) semget(0x2, 0x4, 0xb8) 15:28:03 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0xa, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:28:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 15:28:03 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) semget(0x2, 0x4, 0xb8) 15:28:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0}) 15:28:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 15:28:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd3, 0x0, 0x0) 15:28:04 executing program 1: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e249922cb18f6e2e2aba000400012e0b3836005404b0e0301a4ce8070000005f1655e340b76795008000000000fdff0001013c5811039e1531e33a0ce142a1c188242c1c34f214f316f3f6b61c0001000000000000004974000000000000326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r1, &(0x7f00000012c0)="0c262c927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa030596aecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 1119.855993][T28116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1119.941476][T28116] bond1 (uninitialized): Released all slaves [ 1119.969309][T28116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1120.025366][T28116] bond1 (uninitialized): Released all slaves [ 1121.043257][ T0] NOHZ: local_softirq_pending 08 15:28:06 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x8000000fb, 0xbf, 0x0, 0x0, 0x400000004000000], 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:28:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 15:28:06 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)) semget(0x2, 0x4, 0xb8) 15:28:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0}) 15:28:06 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x96, 0xed, 0xda, 0x40, 0x52b, 0xd001, 0x7b9b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x64, 0x6f}}]}}]}}, 0x0) 15:28:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000000000001, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000004800)={0x0, 0x0, 0x0}, 0x0) 15:28:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0}) 15:28:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000000000001, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000004800)={0x0, 0x0, 0x0}, 0x0) 15:28:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000000000001, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000004800)={0x0, 0x0, 0x0}, 0x0) 15:28:06 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)) semget(0x2, 0x4, 0xb8) 15:28:06 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x41, 0x7e, 0xd0, 0x8, 0xbfd, 0xe, 0x259d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf4, 0xc6, 0x85, 0x0, [], [{{0x9, 0x5, 0x6, 0x2}}]}}]}}]}}, 0x0) 15:28:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 15:28:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000000000001, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000004800)={0x0, 0x0, 0x0}, 0x0) 15:28:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000000000001, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000004800)={0x0, 0x0, 0x0}, 0x0) 15:28:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0}) 15:28:07 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) semget(0x2, 0x4, 0xb8) 15:28:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) [ 1122.974928][T15222] usb 1-1: new high-speed USB device number 25 using dummy_hcd 15:28:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000000000001, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000004800)={0x0, 0x0, 0x0}, 0x0) 15:28:07 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x400000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) [ 1123.232410][T15222] usb 1-1: Using ep0 maxpacket: 8 15:28:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000000000001, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000004800)={0x0, 0x0, 0x0}, 0x0) 15:28:08 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) semget(0x2, 0x4, 0xb8) [ 1123.365936][T15222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1123.376064][T15222] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1123.386056][T15222] usb 1-1: New USB device found, idVendor=0bfd, idProduct=000e, bcdDevice=25.9d [ 1123.395310][T15222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.492116][T15222] usb 1-1: config 0 descriptor?? [ 1123.546014][T15222] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) 15:28:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) [ 1123.738639][T24857] usb 1-1: USB disconnect, device number 25 [ 1124.511793][T15222] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1124.801902][T15222] usb 1-1: Using ep0 maxpacket: 8 [ 1124.933142][T15222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1124.943477][T15222] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1124.953441][T15222] usb 1-1: New USB device found, idVendor=0bfd, idProduct=000e, bcdDevice=25.9d [ 1124.962640][T15222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.061639][T15222] usb 1-1: config 0 descriptor?? [ 1125.116568][T15222] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 1125.370118][ T12] usb 1-1: USB disconnect, device number 26 15:28:10 executing program 2: socket$netlink(0x10, 0x3, 0x0) semget(0x2, 0x4, 0xb8) 15:28:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 15:28:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000000080103000000000200000001000000040004800900010073797a310000000006000240000000000500030001"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 15:28:10 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 15:28:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x123c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2) 15:28:10 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs, 0x6e) 15:28:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x20, 0x3}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0) 15:28:10 executing program 2: semget(0x2, 0x4, 0xb8) 15:28:10 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="440a07116e054d073b", 0x9) 15:28:11 executing program 5: syz_genetlink_get_family_id$netlbl_cipso(0x0) 15:28:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x100f, &(0x7f0000002740)=""/4111}, &(0x7f00000005c0)="2cc73f63f800", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1126.736495][T28235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1126.791919][T28240] veth16: FDB only supports static addresses [ 1126.953987][T28240] veth16: FDB only supports static addresses [ 1126.960243][T28235] veth16: FDB only supports static addresses 15:28:11 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 15:28:11 executing program 2: semget(0x2, 0x0, 0xb8) 15:28:11 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000480)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xff}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = getpgrp(0xffffffffffffffff) tkill(r1, 0x1004000000016) 15:28:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 15:28:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000000080103000000000200000001000000040004800900010073797a310000000006000240000000000500030001"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 15:28:12 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x1}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 15:28:12 executing program 4: keyctl$KEYCTL_MOVE(0x19, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x0) 15:28:12 executing program 2: semget(0x2, 0x0, 0xb8) 15:28:12 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x0) 15:28:12 executing program 0: syz_genetlink_get_family_id$ethtool(0x0) 15:28:12 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1}) 15:28:13 executing program 2: semget(0x2, 0x0, 0xb8) 15:28:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xa3}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) 15:28:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x22, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000280), 0x400, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000200)=""/163, &(0x7f00000002c0), &(0x7f0000000040), 0x3, r0}, 0x38) 15:28:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x8) sendfile(r0, r1, &(0x7f00000001c0), 0xffff) fcntl$addseals(r1, 0x409, 0x8) lseek(r1, 0x23b, 0x3) write$binfmt_elf64(r1, 0x0, 0x0) 15:28:13 executing program 4: r0 = openat$pfkey(0xffffff9c, &(0x7f0000002ec0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000003000)=0x80000000) 15:28:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000000080103000000000200000001000000040004800900010073797a310000000006000240000000000500030001"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 15:28:13 executing program 2: semget(0x2, 0x4, 0x0) 15:28:14 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, 0x0, 0x18) 15:28:14 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bond\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7fa87e04eecc6a25}) 15:28:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) syz_io_uring_complete(0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) r2 = socket$inet_sctp(0x2, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000100)=@assoc_value={0x0, 0x4}, 0x8) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwrite64(r3, &(0x7f0000000000)='5', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote={0xfe, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1016000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x94, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 15:28:14 executing program 1: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x600001}, 0x18) 15:28:14 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000002600)=[{&(0x7f0000001580)="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", 0x1fa, 0x6}]) 15:28:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r1, 0x401, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x2}]}, 0x1c}}, 0x0) 15:28:15 executing program 1: syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=rdma,', {'port'}, 0x2c, {[{@common=@uname={'uname', 0x3d, 'trans=rdma,'}}]}}) 15:28:15 executing program 4: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000000)=[{0x0, 0x0, 0xfffffffffffeffff}, {&(0x7f0000000400)="58465342c30eeee67d09676b8ea7ebad7f8bacd1ed442a5a1ee170193539eabdb8a5c0a98dd3f93c35d792a49df8e88f42d0772e46fe7f038f45f10da95de59210aa474cf4bd9ac55d0037846dd3609534b11ed6cfbe30407be6a116e569d96b640c7e8c958b36", 0x67}, {&(0x7f0000000100)="7f80c64aee156ea7decbc8e3b0c1da6525b92222ffae1a18b8ac9490189359925086365a54a53d5842cfc3190f021145775fdf4d3aa15384cf355e2b39b1e86600f38f387528cef6cea339701d75a531b7d9dd93bda03df54d8e1d830e5928dff225", 0x62, 0x4}], 0x0, &(0x7f0000001680)=ANY=[]) 15:28:15 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bond\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7fa87e04eecc6a25}) 15:28:15 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000019540)=""/102392, 0x18ff8) write(r2, &(0x7f00000001c0), 0xfffffef3) 15:28:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000000080103000000000200000001000000040004800900010073797a310000000006000240000000000500030001"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 15:28:15 executing program 1: r0 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) write$sequencer(r0, 0x0, 0x0) 15:28:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8}, {}]}]}, {0x4}}}]}]}, 0x60}}, 0x0) 15:28:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ade6afbc949275690a7d9b2abecddcaed514fc70e0e5882204059bd7fe6d6bd9725efd2b9f2fd7ea2cd517b273e6d51e5ae69285680926e0657ac2e806947a43a7", 0x41}], 0x1, 0x0, 0x0, 0x1a0}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) 15:28:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) syz_io_uring_complete(0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) r2 = socket$inet_sctp(0x2, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000100)=@assoc_value={0x0, 0x4}, 0x8) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwrite64(r3, &(0x7f0000000000)='5', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote={0xfe, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1016000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x94, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 15:28:19 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bond\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7fa87e04eecc6a25}) 15:28:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8971, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\x05\xe7DT\xef\x00\x00\x00\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xd8\xd6\xcb\x85\x9a\x06\x97o\xbc\xe3\xf3\xee\xf6N\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\x00\xb8&\xb9.XD\br\xe5\xd7\xda\xe7C\x1b\xbc\xaca\x17\x7f\xf0\xab\x8a\x929\x81!\x0fno\xdb\x9c\x97\xb6\xf8\x9b\xcbn\xdfu\xd7pM\xb6\b\xcb\x9f\x17#n\xa4\xb5\xf1\xb0\xc3\xc4\x9ae\xc8\xe2\xc1R\x9e\xf8%\xa57\xf2g\x82\x87\xb0\x933\\\xe2g\x0f\xc4\xc3p\x01c\xdf\x83\n\x99\xb3\xc1\xbc\xa1\xd2\xe6\xf6\xc0\xc5\x00]\xd2GM\xb7\x9a\xc9\xffM\xa0\xa9\xddk\v\xb7\xe7\f\x9b\xbf=\xf5sz\xa9\xf6\xfe\x00\x19\x7f\xc4H\xb7DBN\x8f:P\x84\x13.I\xc8\xeekcjAmr>-/1\x83S6\xa6\xd8\xbb^\'\xde\x9ck\xbb\xe6\xda\xb8\xaaEn\xc1\x8c\x83.\x81g\x8b\xba\xa1\xbb\xd8\xbdT\xac\x03\x13\xf5\xe8\x04E/\xb5\xc1\a\f%\xaf\xa4\x14\v\xdc\xfd\xbe\xda\xdcJaY\xbdPA18\xda\x7f\r\xb9*\xb1\x05bc~\xe2\x83XC\xab/\xb1n{\x98\x1bt\x99\xe4=\r\xbc\x05\xddT\xbf\xf6\xc6U\xed\x8bfm\xe9\x0f\xd5\xc7\x85\x11\x9ed\xda09u\xc6\xfb!\xc2\xc5\xffp8/ \x0emiD\xe7\xfeYg\xda\x92U\x0e\r\xe9\xf3\x0e5\xb9\x9a\xcb\xc9\xc7__\xfd40ne\xdc\xd3\xac<]\f\xd3\xe2xnsR\x18\xc9\xe7\xb1\xfc\xc5\xebY+K8\xcc\xed\xf1T\t\xca\x9cRqo\xf4$\x80/\x81n\x18\xc0\x9e$S\x89R\xa2\x9d\xc5\x15\x8fYH+O\xfe\xc6\xd98T\x0f\x02\x05\xe0xQ\"\xf3\xecmf\xb7\xb3\xf4\xa9\xc2\x8d\x06<$[\x962\x9c\xb9t\xc4\xc36\xbf\x9a\xb2\x16x\xa8\xe5\n!8') 15:28:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ade6afbc949275690a7d9b2abecddcaed514fc70e0e5882204059bd7fe6d6bd9725efd2b9f2fd7ea2cd517b273e6d51e5ae69285680926e0657ac2e806947a43a7", 0x41}], 0x1, 0x0, 0x0, 0x1a0}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) 15:28:19 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 15:28:19 executing program 3: syz_emit_ethernet(0x246, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "dcc400", 0x210, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @remote, [@fragment, @hopopts={0x0, 0x3a, [], [@generic={0x0, 0x166, "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"}, @pad1, @hao={0xc9, 0x10, @remote}, @generic={0x0, 0x51, "cd5ee86ee3a69b9a3d97c3eac7a80f2d89edf73c58931297443c9fa11dacbd18fb36e11e26b27124adad0b49e67528bb31f1053be0b24e2cd18a86f966f1f085d41ce4a6ae8f158e119da35a82e11abdfc"}]}]}}}}}}}, 0x0) 15:28:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0x0, 0x0, 0x0, 0x0, 0x294, 0x198, 0x198, 0x294, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x174, 0x1bc, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}, @common=@unspec=@conntrack3={{0xc4, 'conntrack\x00'}, {{@ipv4=@empty, [], @ipv4=@dev, [], @ipv4=@local, [], @ipv4=@local}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3ad) 15:28:19 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003200090300000000000000000000000014000100100001000b000100706f6c69636500000800040000000080"], 0x30}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249252e, 0x0) 15:28:19 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x101441, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x40) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045002, &(0x7f0000000000)) 15:28:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ade6afbc949275690a7d9b2abecddcaed514fc70e0e5882204059bd7fe6d6bd9725efd2b9f2fd7ea2cd517b273e6d51e5ae69285680926e0657ac2e806947a43a7", 0x41}], 0x1, 0x0, 0x0, 0x1a0}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) 15:28:19 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bond\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7fa87e04eecc6a25}) [ 1135.349996][T28412] xt_CT: You must specify a L4 protocol and not use inversions on it 15:28:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x204000, 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000080)={r0}, 0x10) 15:28:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="24000000200003041dfffd946f6105008100000a1f00000ec010080008001800d27f1e00", 0x24}], 0x1}, 0x0) 15:28:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) syz_io_uring_complete(0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) r2 = socket$inet_sctp(0x2, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000100)=@assoc_value={0x0, 0x4}, 0x8) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwrite64(r3, &(0x7f0000000000)='5', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote={0xfe, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1016000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x94, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 15:28:22 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="240000001e0025eaa87865f51ef6bce90a013b0200bff20182a9000c0800080006000000", 0x418) 15:28:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 15:28:22 executing program 4: r0 = open(&(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0xffffffff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @private}, 0x10) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000000)) r2 = openat$mice(0xffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x248201) splice(r1, &(0x7f0000000180)=0x5, r2, &(0x7f0000000200)=0x2, 0x9, 0x4) r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) sendfile(r3, r3, 0x0, 0x80001d00c0d3) connect$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2}}, 0x10) 15:28:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ade6afbc949275690a7d9b2abecddcaed514fc70e0e5882204059bd7fe6d6bd9725efd2b9f2fd7ea2cd517b273e6d51e5ae69285680926e0657ac2e806947a43a7", 0x41}], 0x1, 0x0, 0x0, 0x1a0}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) 15:28:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 15:28:22 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x271db50df53970d3, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r3, 0x0) 15:28:22 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/131, 0x2e, 0x83, 0x8}, 0x20) 15:28:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}, 0x1, 0x32a8}, 0x0) [ 1138.595865][T28467] BPF:[1] FUNC_PROTO (anon) [ 1138.601187][T28467] BPF:return=0 args=( [ 1138.605237][T28467] BPF:1 (anon) [ 1138.608655][T28467] BPF:) [ 1138.611715][T28467] BPF: [ 1138.614537][T28467] BPF:Invalid arg#1 [ 1138.618386][T28467] BPF: [ 1138.618386][T28467] [ 1138.669891][T28468] BPF:[1] FUNC_PROTO (anon) [ 1138.674810][T28468] BPF:return=0 args=( [ 1138.678849][T28468] BPF:1 (anon) [ 1138.682929][T28468] BPF:) [ 1138.685751][T28468] BPF: [ 1138.688564][T28468] BPF:Invalid arg#1 [ 1138.692494][T28468] BPF: [ 1138.692494][T28468] 15:28:23 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x17, 0x59, 0xbf, 0x40, 0x18cd, 0xcafe, 0x6927, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@acm={0x4}]}]}}]}}]}}, 0x0) 15:28:23 executing program 4: r0 = open(&(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0xffffffff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @private}, 0x10) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000000)) r2 = openat$mice(0xffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x248201) splice(r1, &(0x7f0000000180)=0x5, r2, &(0x7f0000000200)=0x2, 0x9, 0x4) r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) sendfile(r3, r3, 0x0, 0x80001d00c0d3) connect$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2}}, 0x10) [ 1139.491224][ T8693] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1140.175764][ T8693] usb 4-1: New USB device found, idVendor=18cd, idProduct=cafe, bcdDevice=69.27 [ 1140.185124][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.199677][ T8693] usb 4-1: config 0 descriptor?? [ 1140.520938][ T8693] usb 4-1: string descriptor 0 read error: -71 [ 1140.550441][ T8693] usb 4-1: USB disconnect, device number 35 15:28:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) syz_io_uring_complete(0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) r2 = socket$inet_sctp(0x2, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000100)=@assoc_value={0x0, 0x4}, 0x8) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwrite64(r3, &(0x7f0000000000)='5', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote={0xfe, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1016000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x94, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 15:28:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x40) name_to_handle_at(r0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x8}, 0x0, 0x1400) 15:28:25 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000001940)={{{@in=@local, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@dev}}, 0xe8) 15:28:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="dc7afea08184959734c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a45983021e94740e06994342c64dd8165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137012dc71c80e3c54701709c67a1ec8cb09597ca22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:28:25 executing program 4: r0 = open(&(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0xffffffff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @private}, 0x10) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000000)) r2 = openat$mice(0xffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x248201) splice(r1, &(0x7f0000000180)=0x5, r2, &(0x7f0000000200)=0x2, 0x9, 0x4) r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) sendfile(r3, r3, 0x0, 0x80001d00c0d3) connect$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2}}, 0x10) [ 1141.319405][ T8693] usb 4-1: new high-speed USB device number 36 using dummy_hcd 15:28:26 executing program 1: syz_usb_connect(0x0, 0x52, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x10, 0x6d, 0x81, 0x10, 0x17cc, 0xbaff, 0x4855, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x0, 0xb1, 0x7a, 0xf8}}]}}]}}, 0x0) [ 1141.680758][ T8693] usb 4-1: New USB device found, idVendor=18cd, idProduct=cafe, bcdDevice=69.27 [ 1141.690184][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.799463][ T8693] usb 4-1: config 0 descriptor?? 15:28:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="dc7afea08184959734c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a45983021e94740e06994342c64dd8165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137012dc71c80e3c54701709c67a1ec8cb09597ca22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:28:26 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1142.079645][ T8693] usb 4-1: string descriptor 0 read error: -71 [ 1142.113553][ T8693] usb 4-1: USB disconnect, device number 36 15:28:26 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x91, &(0x7f0000000100), &(0x7f00000000c0)=0x4) [ 1142.494215][ C1] ===================================================== [ 1142.501241][ C1] BUG: KMSAN: uninit-value in update_stack_state+0x974/0xb40 [ 1142.508607][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1142.516739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.526779][ C1] Call Trace: [ 1142.530065][ C1] [ 1142.532924][ C1] dump_stack+0x21c/0x280 [ 1142.537251][ C1] kmsan_report+0xf7/0x1e0 [ 1142.541668][ C1] __msan_warning+0x58/0xa0 [ 1142.546164][ C1] update_stack_state+0x974/0xb40 [ 1142.551195][ C1] unwind_next_frame+0x8c6/0xed0 [ 1142.556127][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1142.561952][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 1142.568159][ C1] arch_stack_walk+0x338/0x3d0 [ 1142.572918][ C1] ? stack_trace_save+0x1a0/0x1a0 [ 1142.577938][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 1142.584084][ C1] stack_trace_save+0x117/0x1a0 [ 1142.588937][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1142.594697][ C1] ? __irq_exit_rcu+0x226/0x270 [ 1142.599539][ C1] ? irq_exit_rcu+0xe/0x10 [ 1142.603951][ C1] ? sysvec_call_function_single+0x107/0x130 [ 1142.609921][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 1142.615804][ C1] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1142.621947][ C1] ? kmsan_memcpy_metadata+0xb/0x10 [ 1142.627131][ C1] ? __msan_memcpy+0x43/0x50 [ 1142.631748][ C1] ? pskb_carve+0x869/0x2ff0 [ 1142.636345][ C1] ? pskb_extract+0x116/0x4c0 [ 1142.641055][ C1] ? rds_tcp_data_recv+0x990/0x1920 [ 1142.646251][ C1] ? tcp_read_sock+0xb52/0x26e0 [ 1142.651101][ C1] ? rds_tcp_data_ready+0x29d/0x6c0 [ 1142.656289][ C1] ? tcp_rcv_established+0x43e4/0x4480 [ 1142.661771][ C1] ? tcp_v4_do_rcv+0x80c/0xff0 [ 1142.666528][ C1] ? tcp_v4_rcv+0x57d0/0x5c10 [ 1142.671194][ C1] ? ip_protocol_deliver_rcu+0x572/0xc50 [ 1142.676812][ C1] ? ip_local_deliver+0x727/0x8d0 [ 1142.681822][ C1] ? ip_rcv+0x795/0x810 [ 1142.685998][ C1] ? __netif_receive_skb+0x265/0x670 [ 1142.691276][ C1] ? process_backlog+0x50d/0xba0 [ 1142.696220][ C1] ? napi_poll+0x43b/0xfd0 [ 1142.700627][ C1] ? net_rx_action+0x35c/0xd40 [ 1142.705385][ C1] ? __do_softirq+0x2ea/0x7f5 [ 1142.710090][ C1] ? asm_call_on_stack+0xf/0x20 [ 1142.714976][ C1] ? do_softirq_own_stack+0x7c/0xa0 [ 1142.720165][ C1] ? __irq_exit_rcu+0x226/0x270 [ 1142.725022][ C1] ? irq_exit_rcu+0xe/0x10 [ 1142.729456][ C1] ? sysvec_call_function_single+0x107/0x130 [ 1142.735445][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 1142.741587][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 1142.747472][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1142.752667][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1142.757854][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1142.763405][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1142.768597][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1142.774425][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1142.780522][ C1] ? __kmalloc_node_track_caller+0x22c/0x12e0 [ 1142.786587][ C1] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1142.792579][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 1142.797659][ C1] __msan_memcpy+0x43/0x50 [ 1142.802070][ C1] pskb_carve+0x869/0x2ff0 [ 1142.806496][ C1] pskb_extract+0x116/0x4c0 [ 1142.811037][ C1] rds_tcp_data_recv+0x990/0x1920 [ 1142.816076][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1142.822350][ C1] ? __mod_timer+0x2ad7/0x31e0 [ 1142.827134][ C1] tcp_read_sock+0xb52/0x26e0 [ 1142.831807][ C1] ? rds_tcp_recv_exit+0x50/0x50 [ 1142.836756][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1142.841959][ C1] rds_tcp_data_ready+0x29d/0x6c0 [ 1142.846990][ C1] ? sock_no_sendpage_locked+0x2b0/0x2b0 [ 1142.852626][ C1] ? rds_tcp_recv_path+0x2f0/0x2f0 [ 1142.857840][ C1] tcp_rcv_established+0x43e4/0x4480 [ 1142.863139][ C1] tcp_v4_do_rcv+0x80c/0xff0 [ 1142.867744][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 1142.872262][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1142.877478][ C1] ? tcp_v4_rcv+0x1801/0x5c10 [ 1142.882155][ C1] ? tcp_filter+0xf0/0xf0 [ 1142.886487][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1142.891954][ C1] ip_local_deliver+0x727/0x8d0 [ 1142.896808][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 1142.901824][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 1142.907450][ C1] ip_rcv+0x795/0x810 [ 1142.911446][ C1] ? ip_rcv_core+0x1490/0x1490 [ 1142.916207][ C1] __netif_receive_skb+0x265/0x670 [ 1142.921311][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1142.926844][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 1142.932473][ C1] process_backlog+0x50d/0xba0 [ 1142.937231][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1142.943034][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1142.948324][ C1] napi_poll+0x43b/0xfd0 [ 1142.952565][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1142.957759][ C1] net_rx_action+0x35c/0xd40 [ 1142.962353][ C1] ? net_tx_action+0xdc0/0xdc0 [ 1142.967109][ C1] __do_softirq+0x2ea/0x7f5 [ 1142.971628][ C1] asm_call_on_stack+0xf/0x20 [ 1142.976285][ C1] [ 1142.979220][ C1] do_softirq_own_stack+0x7c/0xa0 [ 1142.984236][ C1] __irq_exit_rcu+0x226/0x270 [ 1142.988905][ C1] irq_exit_rcu+0xe/0x10 [ 1142.993141][ C1] sysvec_call_function_single+0x107/0x130 [ 1142.998941][ C1] asm_sysvec_call_function_single+0x12/0x20 [ 1143.004970][ C1] RIP: 0010:finish_lock_switch+0x2b/0x40 [ 1143.010598][ C1] Code: 48 89 e5 53 48 89 fb e8 c3 d8 b9 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 12 48 89 df e8 4d d2 b9 00 c6 00 00 c6 03 00 fb 5b <5d> c3 e8 fe d7 b9 00 eb e7 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 [ 1143.030276][ C1] RSP: 0018:ffff88812dfabcf8 EFLAGS: 00000282 [ 1143.036332][ C1] RAX: ffff88821fdb2340 RBX: ffff8881020b3d00 RCX: 000000021fd13340 [ 1143.044308][ C1] RDX: ffff88821fd13340 RSI: 00000000000004a0 RDI: ffff88812fd94340 [ 1143.052279][ C1] RBP: ffff88812dfabcf8 R08: ffffea000000000f R09: ffff88812fffa000 [ 1143.060240][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88812dfa09d8 [ 1143.068212][ C1] R13: ffff88812dfa0000 R14: 0000000000000001 R15: ffff88812fd94340 [ 1143.076262][ C1] finish_task_switch+0xd2/0x2f0 [ 1143.081199][ C1] __schedule+0x4ae/0x520 [ 1143.085527][ C1] schedule+0x260/0x330 [ 1143.089677][ C1] smpboot_thread_fn+0x7c6/0xa90 [ 1143.094647][ C1] kthread+0x551/0x590 [ 1143.098706][ C1] ? cpu_report_death+0x1a0/0x1a0 [ 1143.103724][ C1] ? kthread_blkcg+0x110/0x110 [ 1143.108487][ C1] ret_from_fork+0x1f/0x30 [ 1143.112894][ C1] [ 1143.115208][ C1] Local variable ----heads@__run_timers created at: [ 1143.121784][ C1] __run_timers+0x61/0xd30 [ 1143.126188][ C1] __run_timers+0x61/0xd30 [ 1143.130585][ C1] ===================================================== [ 1143.137501][ C1] Disabling lock debugging due to kernel taint [ 1143.143668][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 1143.150250][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1143.159778][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.169817][ C1] Call Trace: [ 1143.173090][ C1] [ 1143.175934][ C1] dump_stack+0x21c/0x280 [ 1143.180258][ C1] panic+0x4d7/0xef7 [ 1143.184155][ C1] ? add_taint+0x17c/0x210 [ 1143.188568][ C1] kmsan_report+0x1df/0x1e0 [ 1143.193072][ C1] __msan_warning+0x58/0xa0 [ 1143.197567][ C1] update_stack_state+0x974/0xb40 [ 1143.202596][ C1] unwind_next_frame+0x8c6/0xed0 [ 1143.207526][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1143.213334][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 1143.219476][ C1] arch_stack_walk+0x338/0x3d0 [ 1143.224229][ C1] ? stack_trace_save+0x1a0/0x1a0 [ 1143.229252][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 1143.235393][ C1] stack_trace_save+0x117/0x1a0 [ 1143.240238][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 1143.245945][ C1] ? __irq_exit_rcu+0x226/0x270 [ 1143.250799][ C1] ? irq_exit_rcu+0xe/0x10 [ 1143.255209][ C1] ? sysvec_call_function_single+0x107/0x130 [ 1143.261176][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 1143.267063][ C1] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1143.273205][ C1] ? kmsan_memcpy_metadata+0xb/0x10 [ 1143.278389][ C1] ? __msan_memcpy+0x43/0x50 [ 1143.282968][ C1] ? pskb_carve+0x869/0x2ff0 [ 1143.287546][ C1] ? pskb_extract+0x116/0x4c0 [ 1143.292216][ C1] ? rds_tcp_data_recv+0x990/0x1920 [ 1143.297402][ C1] ? tcp_read_sock+0xb52/0x26e0 [ 1143.302241][ C1] ? rds_tcp_data_ready+0x29d/0x6c0 [ 1143.307428][ C1] ? tcp_rcv_established+0x43e4/0x4480 [ 1143.312877][ C1] ? tcp_v4_do_rcv+0x80c/0xff0 [ 1143.317630][ C1] ? tcp_v4_rcv+0x57d0/0x5c10 [ 1143.322297][ C1] ? ip_protocol_deliver_rcu+0x572/0xc50 [ 1143.327914][ C1] ? ip_local_deliver+0x727/0x8d0 [ 1143.332925][ C1] ? ip_rcv+0x795/0x810 [ 1143.337085][ C1] ? __netif_receive_skb+0x265/0x670 [ 1143.342362][ C1] ? process_backlog+0x50d/0xba0 [ 1143.347288][ C1] ? napi_poll+0x43b/0xfd0 [ 1143.351698][ C1] ? net_rx_action+0x35c/0xd40 [ 1143.356474][ C1] ? __do_softirq+0x2ea/0x7f5 [ 1143.361138][ C1] ? asm_call_on_stack+0xf/0x20 [ 1143.365979][ C1] ? do_softirq_own_stack+0x7c/0xa0 [ 1143.371170][ C1] ? __irq_exit_rcu+0x226/0x270 [ 1143.376005][ C1] ? irq_exit_rcu+0xe/0x10 [ 1143.380410][ C1] ? sysvec_call_function_single+0x107/0x130 [ 1143.386395][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 1143.392536][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 1143.398418][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1143.403605][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1143.408798][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1143.414339][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1143.419527][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1143.425325][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1143.431384][ C1] ? __kmalloc_node_track_caller+0x22c/0x12e0 [ 1143.437457][ C1] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1143.443465][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 1143.448494][ C1] __msan_memcpy+0x43/0x50 [ 1143.452904][ C1] pskb_carve+0x869/0x2ff0 [ 1143.457331][ C1] pskb_extract+0x116/0x4c0 [ 1143.461832][ C1] rds_tcp_data_recv+0x990/0x1920 [ 1143.466847][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1143.472994][ C1] ? __mod_timer+0x2ad7/0x31e0 [ 1143.477766][ C1] tcp_read_sock+0xb52/0x26e0 [ 1143.482445][ C1] ? rds_tcp_recv_exit+0x50/0x50 [ 1143.487373][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1143.492589][ C1] rds_tcp_data_ready+0x29d/0x6c0 [ 1143.497602][ C1] ? sock_no_sendpage_locked+0x2b0/0x2b0 [ 1143.503229][ C1] ? rds_tcp_recv_path+0x2f0/0x2f0 [ 1143.508327][ C1] tcp_rcv_established+0x43e4/0x4480 [ 1143.513635][ C1] tcp_v4_do_rcv+0x80c/0xff0 [ 1143.518224][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 1143.522735][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1143.527942][ C1] ? tcp_v4_rcv+0x1801/0x5c10 [ 1143.532633][ C1] ? tcp_filter+0xf0/0xf0 [ 1143.536954][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 1143.542411][ C1] ip_local_deliver+0x727/0x8d0 [ 1143.547257][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 1143.552266][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 1143.557883][ C1] ip_rcv+0x795/0x810 [ 1143.561860][ C1] ? ip_rcv_core+0x1490/0x1490 [ 1143.566619][ C1] __netif_receive_skb+0x265/0x670 [ 1143.571721][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 1143.577271][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 1143.582901][ C1] process_backlog+0x50d/0xba0 [ 1143.587658][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1143.593460][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 1143.598736][ C1] napi_poll+0x43b/0xfd0 [ 1143.602979][ C1] ? kmsan_get_metadata+0x116/0x180 [ 1143.608175][ C1] net_rx_action+0x35c/0xd40 [ 1143.612767][ C1] ? net_tx_action+0xdc0/0xdc0 [ 1143.617521][ C1] __do_softirq+0x2ea/0x7f5 [ 1143.622029][ C1] asm_call_on_stack+0xf/0x20 [ 1143.626686][ C1] [ 1143.629635][ C1] do_softirq_own_stack+0x7c/0xa0 [ 1143.634654][ C1] __irq_exit_rcu+0x226/0x270 [ 1143.639339][ C1] irq_exit_rcu+0xe/0x10 [ 1143.643576][ C1] sysvec_call_function_single+0x107/0x130 [ 1143.649388][ C1] asm_sysvec_call_function_single+0x12/0x20 [ 1143.655357][ C1] RIP: 0010:finish_lock_switch+0x2b/0x40 [ 1143.660982][ C1] Code: 48 89 e5 53 48 89 fb e8 c3 d8 b9 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 12 48 89 df e8 4d d2 b9 00 c6 00 00 c6 03 00 fb 5b <5d> c3 e8 fe d7 b9 00 eb e7 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 [ 1143.680573][ C1] RSP: 0018:ffff88812dfabcf8 EFLAGS: 00000282 [ 1143.686627][ C1] RAX: ffff88821fdb2340 RBX: ffff8881020b3d00 RCX: 000000021fd13340 [ 1143.694588][ C1] RDX: ffff88821fd13340 RSI: 00000000000004a0 RDI: ffff88812fd94340 [ 1143.702549][ C1] RBP: ffff88812dfabcf8 R08: ffffea000000000f R09: ffff88812fffa000 [ 1143.710508][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88812dfa09d8 [ 1143.718467][ C1] R13: ffff88812dfa0000 R14: 0000000000000001 R15: ffff88812fd94340 [ 1143.726443][ C1] finish_task_switch+0xd2/0x2f0 [ 1143.731390][ C1] __schedule+0x4ae/0x520 [ 1143.735717][ C1] schedule+0x260/0x330 [ 1143.739869][ C1] smpboot_thread_fn+0x7c6/0xa90 [ 1143.744807][ C1] kthread+0x551/0x590 [ 1143.748870][ C1] ? cpu_report_death+0x1a0/0x1a0 [ 1143.753891][ C1] ? kthread_blkcg+0x110/0x110 [ 1143.758649][ C1] ret_from_fork+0x1f/0x30 [ 1143.764359][ C1] Kernel Offset: disabled [ 1143.768679][ C1] Rebooting in 86400 seconds..