@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000500)=""/106) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r1, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x800, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="5510b92bd8110602b6674168db9d2ba067c1c9560071b6fa85965aa96da4459ae8e1a5c71168ba04260f45753f057845dd625709769829952b3a20780b10fa58055757ee567a2cc17f2b72c99eca95c925ee636b43644afb09f80a30daa05bea7640806f90f66f15a0b655133745e4ad871ee325ca3b22e5bfd8894a25b37f24d3d81b25e0135206a79c7e75581b0895ba522963ca1bd9050125a14b032daa2c15b993c98ea54cdc03a5b56a09efabb0d080324d78821048a69166ac8c449b54", 0xc0, 0x2}, {&(0x7f0000000180)="82006b3d8fd5cd76d9c2676c010ca11d0958771a8e0a07615aa1fd82e1735b198531318e2fcfc1121bd7cd69e0435656c6057d54969bfaa800fb2515c6a70a3d0e312d1d4404df2d71bcef25d02546b8229f8d5f27f74b48689c7c6be654bb6bc95d41c87304ff58e3dfda238efab063639fbab510b5a1b7ad0285a8ea6c5e0efb6b418ebdca79a5ae", 0x89, 0x6}], 0x80000, &(0x7f0000000740)=ANY=[@ANYBLOB="626172726965722c646f6e745f686173682c7365636c6162656c2c6d6561737572652c7375626af88d6f5f726f6c653d5e276b657972696e6726776c616e31776c616e31242773656c6612255d637075736574d0212c657569643e", @ANYRESDEC=r2, @ANYBLOB="7f0000000000000061733772652c80f57e60749db1255fe0b3eecc63acdc0a7817c76c18e5bb4cee3d8c88c2cd4a034804ea014ee6ebfeea77224d511b16c3e1eeadac4379bfca41f35d016e4915747b4e50f7fa477a952bcf497ad9789493649610adb103a6725675ff6e7f08b9a6c1f817f012b4b85e7b33d57d22cd1590e77baadf6d63cf686ac6d375b3d81e061b6324bd426207c2d97441d5fd39fbbed7d37773037b73867f8aaa8154292b86e4ce6eb194c8f054ae404075f8074fa253c07ed534280ab77ce52f7a91f507c68e587f37df797b9932ca0efd1faa2019a4431ad74a6e29fbd8677e80c01a8640f0017e19bc6ac2846d7f773e7c9d9c56ff153392ffc222c62d57708be9c3325960e40f3619cf0977fb0c641d893c1b5f74c7a359c2dd56"]) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000003c0)={0xf, @pix_mp={0x9, 0x6, 0x43564548, 0x3, 0x6, [{0x4, 0x3}, {0x9, 0x100000001}, {0x5fe4183f, 0x80000000}, {0x498e, 0xfff}, {0x76, 0x7fff}, {0x80000001, 0x3}, {0x800, 0x100000000}, {0x3, 0x10000}], 0x7fffffff, 0x31, 0x7, 0x1, 0x3}}) 02:33:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04000200071008000100090000000900000000000000", 0x24) fcntl$setsig(r0, 0xa, 0x2e) 02:33:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa8aaaaaaaaaaaaaaaaa08004500002800000000002f9078ac1455212fd694fd45191400ac1423bb830290780000000000000000"], 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x200, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffcf1, 0x0, 0x0, 0xc1) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x420200, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000006c0)=""/110, &(0x7f0000000740)=0x6e) link(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000340)='./file0/file0\x00') [ 593.446931][ T1550] __nla_parse: 2 callbacks suppressed [ 593.446940][ T1550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 593.533092][ T1583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)=@nfc={0x27, 0x1, 0x0, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="801c2dc0b8a6bc6bbd1f2f3f2b257d3a992661be3c1873726fdf7f2a7a04fd69801279e746818486ededdd6ed43a29b92f3e06f6cf526f9cbc42769562b0eec074dfc77a7ffa6607dcd1e73529e579070579d2fa8d90581ad4eca1120c9c15d90f837fc4be71022b2ff751ca0e58acdcb6dfa6c3ef1652cc8fea0e437557649ac95c98ce1135ad9984014751e7d23be133127a05453abb5e8713529eec1b90825e0ab181eb2947368d8716cd6731147a5f6a42303be76bcf79ebaa2818a4fbd2a7fca26fc82f", 0xc6}, {&(0x7f0000000080)="c18e08", 0x3}, {&(0x7f00000000c0)="30c919111ff585d0381b2e5b98763aa7ee6bd76fff95b0a7f7d7a8a0540a947e0c619fef4d7259", 0x27}, {&(0x7f0000001380)="1df70aaa061ba51daabc761af8bbcb1441b3c4f84f2392f7bbf35bb14556dd4e60d1d6f75f9358e33780b411844005dea9cb0479f7262c619650589d220c9fa692064760b30e2eb5985633a6b235533ad171638068eb5e80a45f4d31ec3426f3cf39653d79862667e00c614acc1196f5a0d69af8a5435bd52e2b655390d9e330bc19c37c2df10acf0ffc40223f0f5bd5f287f06f48b1f75f98c62919b6486cdc103c60d7f21b7682808ec6021ba664b0a55feae3329383217b", 0xb9}], 0x5}, 0x3}, {{&(0x7f0000001440)=@in6={0xa, 0x4e23, 0xf4, @local, 0x7fff}, 0x80, &(0x7f0000000140)=[{&(0x7f00000014c0)="fc64766ba2cf9b693c1662d3bf2bb97c7ae76c80bb7473bed391c070a59fb5a30a060f11926711a45b49276ecde4e0f6d4615e6721044ae6f3219e181411bc36cf9bf1e97bd27306faeef682a03b24a9b32fc46f6fd0d8aaf6dc7b176cd64fc12f31b18c21409d10c015b8de483baac8c16bc1079a2c00e487cb24767f6fc736dedcefd6d7e594982f6c7aad6518f3ed57f245230e658bbbb3204dc99f487abd3f817574ca519ff60ec36e4e1671e6d817c6d00d2beefea6e72148d506cc9391dbcc9e4c88eaa05d0925d72613452380bd243dc445654651fa20f0557a1c565b367a5052b86b87f90b", 0xe9}, {&(0x7f00000015c0)="3f70d582fc7e0b6160a710192b6b928c5459f56785ec8252fdb7cb289e3b950d44c3a103838066bdbc8aa2d74a7029dcd8056674da02fabe1fa8900440319c71f190c9fdd9978d25dffa98251fbbb4699e08cc4cc64d4d09903aa945b99b1e4187dd40dd4bd35c80f2c64f9b37c40707a296c1f4e1cf5d1f07e60b809962b4ea160286f6b807d951e12cd51c1c22b5a82bba9435877b89b81244331b8aa475e1", 0xa0}, {&(0x7f0000001680)="8201f21ea29ad034b72a26286e08175d4acaa55217f906c41e149758cd7eb0cdbac21e2a41784448c523705abea6b494f277bd59d6558ba10cd59cb99f09ad7fc8e5169e10af09528cbc89ca3773443258a6b1f3762a83decc786201fcb6c5e868f12b1b27ecb1", 0x67}], 0x3}, 0x200}], 0x2, 0x91) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x5d1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 02:33:08 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000009c0)=0x3f, 0x4) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f0000000040), &(0x7f0000000000)=0x1c5) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xa, 0x30, 0x8d5, 0xc}, &(0x7f0000000540)=0x18) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000003c0)=ANY=[@ANYBLOB="23000000040000007001080000"]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000700)={r3, @in6={{0xa, 0x4e24, 0x1, @loopback, 0x7}}, 0x8, 0x2}, 0x90) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000001c0)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000fff}) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000200)={0x6, 0xffffffffffff4c08}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x7bb) ioctl$FS_IOC_FSSETXATTR(r4, 0xc020660b, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x7fffffff, 0x0, 0x980000}) fcntl$getownex(r5, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000007c0)={{0xa, 0x4, 0xe1, 0x8001, 'syz1\x00', 0x100}, 0x2, 0x4, 0x1, r6, 0x2, 0xe02, 'syz1\x00', &(0x7f0000000300)=['nodev(\xff\'\\keyring\x00', '/dev/input/mice\x00'], 0x21, [], [0x7, 0x9, 0x7, 0x100]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0x10, &(0x7f0000000340)='/dev/input/mice\x00'}, 0x30) getpriority(0x0, r7) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$FOU_CMD_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6108a09}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x18, 0x0, 0x402, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000640)={{&(0x7f0000000a00)=""/4096, 0x1000}, &(0x7f0000000600), 0x1e}, 0x20) openat$cgroup_subtree(r4, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f00000000c0)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10) sendmmsg(r8, &(0x7f0000001380), 0x3fffff1, 0x40) 02:33:08 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f0000000100)}, 0x10) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="04f1418c7e34c39dda41ee854ddcf99708edd3fca0ad1fbd03136bb17a4df47d9b3b7f126960d2d9d31d146bee012621e1aed091962c8059eb1b0ae9ad4ed0f330665daf71da2172f4b8599a0d2da1629a6b4cd00f3776a463956589111cbbc5c2407d604dcc58f87346e562e5f287468ff00e964991534d9e9f754e19e1fb911e8f38968be5ef97242618c25271545ceb5823eb7576bb9edcfbc5fadf463896befa30587a9a0000000000000000000000000000"], 0x3, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000200), 0x0) r2 = msgget(0x3, 0x102) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000400)=[0xee01]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0x3, &(0x7f0000000440)=',:\x00', 0xffffffffffffffff}, 0x30) r8 = getpid() msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x7, r3, r4, r5, r6, 0x0, 0x4}, 0x4, 0x1, 0x7, 0xeb, 0xfff, 0x3, r7, r8}) fcntl$setstatus(r0, 0x4, 0x46000) 02:33:08 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 02:33:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x1d, 0x0, 0xe) 02:33:08 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x8}, 0x28, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="1adc1f123c123f3188b070") r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000100)={0x100c20}) 02:33:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x8, 0x7, 0x9, 0x4, 0x0, 0x1, 0x400, 0xe, 0x4, 0xffffffffffffffe0, 0x8, 0x101, 0x7ff, 0x40, 0x9, 0x3ff, 0x80000000, 0x1, 0x66, 0x5, 0xcb, 0xaf2, 0x9, 0xff, 0x25, 0x3, 0x9, 0x5b48, 0x6, 0x3, 0x0, 0x2, 0x40, 0x3ff, 0x9, 0x80, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x8004, 0xfbb, 0x1000, 0x5, 0x4, 0x3, 0x5}, 0x0, 0x1, 0xffffffffffffff9c, 0x8) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300004085687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000090001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 593.941609][ T1565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:08 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000005e79ea706090a21e947dbd4ecdf1b8a3db210cd98ba85aa903da248861ac4dd672611810e92c26dd4c494ed8044b1d48b3a2eae30a078f"], 0x3f, 0x800) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000000000000d010000707b2248"], 0x10}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xec7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e20, 0x1, @loopback, 0xffffffffffffff7f}}}, 0x84) [ 594.035392][ T1815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.065433][ T1817] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 02:33:08 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x1000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:08 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) setresuid(r0, 0xfffe, 0xffffffffffffffff) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140), 0x4) 02:33:08 executing program 1: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000180)=@builtin='builtin_trusted\x00') keyctl$link(0x8, r0, r0) 02:33:08 executing program 2: r0 = syz_open_dev$adsp(0x0, 0x3, 0x80000040) r1 = geteuid() r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000440)={0xa0, 0x0, 0x3, {{0x0, 0x0, 0x7fffffff, 0x5, 0x7fffffff, 0x80000001, {0x6, 0x4f91, 0x4, 0x727, 0x0, 0x400, 0xffffffffffffffc1, 0x3b, 0x10001, 0x1, 0x8, r1, r3, 0x1894, 0x2}}}}, 0xa0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r2, 0x7) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04002f6465762f63757365008faae37bf3a73eb0a8a2fda253c4e62a31840300000000000000eec436e73a39e9e76db8f89fe63e44dcb2e19dce8b355b0b99ca38a596cb0d05c19280309838a359353a7b2adb5b82da39dc724a1b774af4454b37a6dd2898c18607c2cdbd7a01b59825d6493b8520bd10f854b2a50185d1a874027af6feab401a01d01833294f926bd905bf042897c1d3997076e51502fd826387bd09bb34dfd4bca164f29f670ce36ccea570c128934800328c41024ea950"], 0x67) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r4}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r7) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) 02:33:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000040)=0x68) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f00000013c0), &(0x7f0000001400)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001440)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000001540)=0xe8) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000300)="02ff9c42f18d018d915c4c7a7480e5b2f4b31ce2b4caa358de9e7a15fc3f1048b81ea56c19a778a29e8fd303f78b5b4463bce24e479b08d76119c5e0c9c78e24038994cf017e0014c309d0b1fc192aca40810679490677a65ca9a2c162e34539690f56ba71532918c9c0c819aad0b2c1f0e77843ed12df7d7a253532240a779a3c24bd90f651887c33358d2570dd3d1e5066f74c4ce570966c2370eac441c04e5234bf253d52a1061e88b18346fccfd76e7db5d71205d6c8ac836aa2f43a52ed2b54e41827d0078c07c27249a6cf6ad60a409d9cd342a66d7765419708bf30c75a49d3300f63d86ed30baf545fc4d0962c6da427ff2cd7efc60382fcfeb3dabeb149ef1e4020378b26e44f57bc211450d25bb9eb613c0664d3120910adc21bb288031d1ecde3c39c56595858a45b19777a17836aff4d0cbde397088076edfe4e69c050172bcc4e9da31bf846bd8356b101b554dc728e18587c18f3f93846e98a0f2f31de90eff092d524a03a3b49c4f0a3f1003368b865b343ed44237c14909ef2ade9e49aa8c02b427e94e37e9c54a180559fc56e749613dd0aeddc963793f5299fe59ee7aaed83c5bec7a4e37fe2b4e5974c47686910c8e01ff30e92a343d3f1f0d3903e88eeed83f1556821a976508df5170401869925a299e547bd935df677629f8a3797fbd13cf30cdb1700fad21bd7d64a46f497b00faa4738b2af5220c59b9c12ed1fe66f4049eae75120e2b153ae8f099037738430124e6ddec779d4bdd61b53199aa4b0022b71c0f1c5d19966126b53f7203086e6d90fe17e0547646e932fbe8ad6e71aad07d72c2705588a7d5cede64ae5d16ce91d80e0c5116459b19df8466a731baab4c89367791df9de3e2b12e5a83348ce304f3a9c794c917d0f485d19dbe15a044216f13bafd758f45ad5fc307fa2802245075f5eab0cc1582b1524a1436f88591cadbbeaf6c102d47730192ea45e51492d6780298729b84cc43c51bd9a9281da88a8389ddf446533bb6934c1a31e066812b8237a729943b2754a850e568902cc5a2fbf5624fab2ae5d6eafec70a82d68f5adddd11dd74f4d07dbfc139ce8fab638c12d8d358286c19d7b73af18c3e793f3aaecdf21a40d0e0537c7b6d998c37b47a35bf53c499d84145b72ef96bf081b1644c37a80228d2be239437ab6d08f0391962d6ea54f9b73d113bb2eeb62c6ae1d3003d6e002c409d36c7a2d078271f85139753c01d96137b46a885a8371d8eebcbdd9412a95cf82e15c4adfc96bd09e2889a7dff893c30c9493b25d66e89e3d9b4b976729ad25c2b4abec27fdcd40233e3e4e1de101bdc20e7ff2962f5cc704720fa6f431df4b1103a80ea91e95f1266ecda2bb724c195b3dc470b9760045c4c7cdccb5b26fe358e1a44ece69644a48e7a69ba216c63bc4071510f382ed9ce0d7480b558db7f0db4d430c96965d2bf327bc51c050ff8c35e45422657dadb0dbd62ccfc031785677b2710cb23806b06a8448120e8897f59b031d3cc83d72bd66152cea19889a4015e6b4e5aa869191440e231fda7a7af4a902b9838a6f4e809faed9cfe01df86f600f6e25a84dd2d206f7081755f7c3b317b863750b647b06a20a9fa753047bad1f0dd0bea1f42722db1a2e7eca07fb2e36954caf4100f9f1b778386a26e43ff732a0c4513d334e024c457377bf6d8238a21ea291370cce3a2a41be1e142e465a6f5f06c65c0a4b067ccd067720112bbd8a3d168db6dd66632175a9691c0704c929a49bde4b9bd00488dbb8097b8c0a643d2dddd5cd71ea868f50460546aed81f67da2bb654630b46b98e93330216908b670b6672b1f5e7a7585ba7e6d9e9084c51713512bcf7fe8739830fcaae0496ab11e1e632afd13e6ec222a8c284a8cc496ae5892c92513f3f1895d4820f143b489d8496a05652b4fa86f2ecf43cb2cac7fb84ffcc20726a05b861db660462a3b90ddc831d3e6c3465c5b1e4e739f904d1b94e7f1a4ea328f64e456695e39ca1ffc27a80bf5461fc43381fdda9feec94261170d8c7661290fd834ea6a710767fb3c9455cf23da0fafc1f7c484957c1318c0c0f98cf99b97ec78b63b6fb1fee907d0ed9e86049cee33ac33aa647a2b6e1ad9fe687f55722ad058caa1d8862afcb115ebc57f84433390ea0d373203229b2cc19e81904d29ab10dc4cd9f63e6486c9a2de7ccc2e5b02a0fb9c9348765e162a18f101a109046e60e1525fd62582503638916e2ef88bd3cc34f0750c47c1ee7ee8cb52fb59c131b865569be4ad94be391517ff67dae7fee201660a12a10c7051696e1912c37b37ea7214343ac453c3fffac50a6644acd2345dbe5309b977cb91b6b7ee83555441c9fea0dc3f270d0efa0d5d68a4757c1608e0b7b30801d7edcb7e676602b45e6f241515b3fb82378e13d29caf46237b4922fab5c1d86c408e5e0c2376b04400f7200f427949e401b7448446f84a33414c020d12b0a09ff9a9baf8bde988a5570f0be54f2b8714e9de51742eb95c9f55114647dc515446da1a7fdb1220e942c93368653134b328eb56254ebbb7a5111a1d4db4e82ebb3912da2dbfa34ad29cc30b7a7ddbf415599909fecdfa59dd1edf7aa0884be8f1a6a5def2c0824f42e8a58c1c49f0810cc508782251b6a8afc268699aad79c6e05f9b16b4a6b7c354ae0b9c6a7aeaa94a440a1536c22fd5442221f5bd602c8291c964d889070e162625b48555dc9ebafdfa02e28cafc52b1970793b2dfc192d0489b3d1a59855f021d9996007824e0fd409459c67a3b7c17b67efae179333e507c6aed40ddc2299714d5a1b94b9087c322e968c1f2bc4555a970757437b1d80ecd9845ec2d97c389d3475c0b0e6538c0eea5a19a5e290c9eedeb51b328de329bb65de3c4f7881bb3fbdb864e97b2236c25baec5470430d154b35269055029c5ca3f3bf416e64838b130a8f68603f047d0ba222abb1b5e395f6f7af6a7be18406e30b7a3e3fd2679bf5f39afc37b2a147f1ca356e4de95f1d3962c3666298122943f602549c0e356f5c97d8945e7877ff554d654c9831373e1bfb0bc97f71e331f985a343e37d3c0de488092d70fc002b824199b112a753d0ea20980ca56419af2bfd881db5802b074daa221a084980ddaa947ece6cd97cdcb19d87b717d9c60a0e07996f5d5ccca94f6afca103bc76ea95b8a9ecec2d688de1e2f9e79530c1235b9fa2832d71a47baaed8d145e4575cb7f9e87e5c204220be094a7eb178996b8de6c825880d58937e4d3de9305841debbf2f3f21eec27c7eeab06db5faf4d0aa302da0cd17a8ae12555aa726847c963b9dbe670786dee927bf28caaf3a8b4a0d7da63dd136904d6dea67e76ebf6d99f55581f092812b6831914607ff7afcc7e5b49371331f70f7f449cd9849ba75e345b7f858573f57898680fe6cb3e2e1632b9183f04147cddf600b4cb3b2a63fb238ca8a258f22891b0dfadc3311b12f8c1a95e031c6b9379c815a42e25dacae74e600b280ae391f0a282ed444ccf2a4b885d65cffc93ae90fc7bd6b632f65c16d6a4baf5b06925ab00ecc6ec5d2a4cbe69380e3413a5dce8fcbe92a3856b080dfa0c489c76c7f80223c823ea06cd6f116be66bcb9e16b22073fa47795200ff787d64d3733fc93fcec40b6deb557c643d59955ad701ce3175991538c6ab94682b7f29399ef938a5dfd5883cacfdfd85d8b64d3e3ab959e4a67bc6f1b33d815734b38b31e409cfb432e3a593c1a104df20950523846e71b9cde640c17959fb19e68eda0a1e8e2762d854229705ded4c56d28638773ac7bbc3e39d911066ccf2e75f6fcdb32ea1f62a62d557bbb72e932a46954445c864628a24100195d96ac453777de4cb4e7eaf1954d5e41ea944f5bfd7b7dc03061cbd6e8e67bf0669a34469a40dd33ca898fb72272ac2c934e3a149f267f0eef23e83ce679497d59c36cfa4f768d51a9553e1b09f79eb8137ddbaca300a9e4da67dedab8770e7a459a9b556cfc153e58b25bae7ffb8dc2c2eacfad60196dee6a6915860a63caab27fb8143d2e6b52ff995d494ba53b734d73ffe907a61291361c1d042ed8a84510de2e244e280a025bc86e99c055485116064a62ac2b29a53576c171857b120e37cf20946bddc880915934a9971ac8147acd8f948148991a406eff8a253fda9dd097e16ae3916f45a07ec0a5a5eba2c55bc0a1573df4dc150b84653143974d3c3f29769c2d1f9b1735d84a8fcabbb556099453668c392b1156ff6eeea60d9ea37c6863b9d9048fb0355a467446f50f652bba4b84a8943591c37df066dbd23376767bda225382bdf1167d15c79edc6271cae74e665bbf8d4906e04f8a7d32fabccddee48b2eb030bd1efbe09df7d3b6452b714b4d6ddca61d52afc50ec9afbc233f5b946d67414d4539ed39eb086f72ab70852483fbd0af4e9339f72bd9178e66aba32380c8a86b9c59a39c9d276a5be6e67cb4203b0c8fc7bb3c3490a100fabfe7371641e9827861d9320abe5ec531f0c38f96646a043376f0ae3c4c03286e547e3313124b74dc320ad3f85c887dc2a46caf703ff5476552f0351d0a0d625abef834d614a375a8fb56a780a95f7ef189574f7669a67d72d35d1df3e66e2ec7cdeca945f2ce79d9ccf939769c73e9370f006ab5ba8c603c06eafc160957e48620ccf8ad32e31861e8c064731ac8b02aee2da50f0568e9c603ba7adf9fecaedef74a35aba1ddd8a35998849068de5316186512d4a363e68d33c43ab94e2b5f93bcaecfb6b4f17bafe2c6ebab3736f372865823fcdd5fcf313b38787008539d064747a654c87b63a5c9e4e61aa8ca5203109e895deeb0d346b843d69048259851ff408f320beffc5f7552e0f61c8f59dc26ee9331ed437f615f086a8a6a649a70e4707ba4d392d55732104df888f13f9cbbc87e1d1bb95e05124f27d8273530c3d2839ad4be680049c01b5ecfde6056b371c543968240cd1bde7217180524718d295978e4e2466ffe042c92c78b013743429a7b3dc73b68941a3bf9c49cdb4e8607a6e2d4984cfca5dc85aaa2bbf4f9a9e2e16d50ea27c02d6c6d2696b7b216ed6a18a4413c240400fcdc050aaa5ba205e78c9e9b37db08eafa58077336767df69381c8ccada7f296c28e0aaeff443bc5bf76fa535f49260c725fb651860a696ae801324550601dc148b84e400fe5b60ed12e960caf8709adabaa337198dbc50fd1ef82158c9fe19164b42373881cdbdd7d718bdca0e79519b22518eec0cb4c7d1c828300992e90c59b4c415693d9d645e06994ff9fa34124ea6b0779d19f80a6475febfee5c324fa5fb6ebc5ff929017a94f38ba10caf7c704fd4fef70df5a159aa8dc858005b82ef4107cd576cb566250b9efdc4ee67ae5eeb269decbb3708cc175ae8e883b179a9eed34564c199df3f2b71621cae0b14e9612a2b5b01d4eb7a216b782f35fd0bb8314eecff536a39f44b98f0de8ba97d75e19d0ec78d9236ff191d2916ab0b4d5e333cea3e71fad8cf7fd3783580de4f880bfa41306e4ca5b91b7232d3777aa0fcdd7d3d01a373558988d1038ae3a26207cc298ed2cbec3ad5907da38ea882b6245303a9c50ebf1de74e3c32578732c14559f6d719fe7af988c4c2840ce1b9677e09ed05024b33dd2d53f7f61606860ccfd13bd49a931e01e8d87bd5c7b03490b08d186b04424a39044d1bdd9afb90adc3d364634ea97e49057398143aa0c2a6d1ae5f46b7ecabc80042edac9c8ff6718365f9be739113b3ad2cc5dc26e233eacf53caaf1d00a4f2c543f92c947e7412ae9c6c65b8b7d", 0x1000, 0x1}, {&(0x7f0000001300)="ca29726af4e1811506d1bf7de5ad3ac2c07bae2d9b2cf3f467c3cdf9bc9d715457b89c04f0e15bedaf1c650a6dce99ccd344cf10ddf76a7e35a6b533d9d1cfcf54b3c17d2b626008ff8dad3dff070d55f7a5177df36d8a8330249f703ccf4d5db23a23fd81cd4349cec3ab3af8a31113f27225ba4ca37013cde2845f3daf71cd6b09efa25f4e6db6da", 0x89, 0x7ff}], 0x10, &(0x7f0000001580)={[{@acl='acl'}, {@noquota='noquota'}, {@commit={'commit', 0x3d, 0x3d5}}], [{@smackfsroot={'smackfsroot'}}, {@euid_eq={'euid', 0x3d, r2}}, {@euid_lt={'euid<', r3}}]}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, {{0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000c3c0)=""/56, 0x38}, {&(0x7f000000c400)=""/74, 0x4a}, {&(0x7f000000c480)=""/114, 0x72}, {&(0x7f000000c500)=""/132, 0x84}, {&(0x7f000000c5c0)=""/15, 0xf}], 0x5, 0x0, 0x0, 0x7d48bddc}, 0x100000001}, {{0x0, 0x0, &(0x7f000000c700)=[{&(0x7f000000c680)=""/90, 0x5a}], 0x1, &(0x7f000000c740)=""/16, 0x10, 0x7f}, 0x200}, {{&(0x7f000000c780)=@ethernet, 0x80, &(0x7f000000ca00)=[{&(0x7f000000c800)=""/210, 0xd2}, {&(0x7f000000c900)=""/92, 0x5c}, {&(0x7f000000c980)=""/82, 0x52}], 0x3, &(0x7f000000ca40)=""/40, 0xfffffdbd}, 0x6}, {{&(0x7f000000ca80)=@pppol2tpv3in6, 0x80, &(0x7f000000cd00)=[{&(0x7f000000cb00)=""/255, 0xff}, {&(0x7f000000cc00)}, {&(0x7f000000cc40)=""/180, 0xb4}], 0x3, &(0x7f000000cd40)=""/5, 0x5, 0x2}, 0xffffffff}], 0x5, 0x0, 0x0) [ 594.484610][ T2043] gfs2: invalid mount option: smackfsroot= [ 594.514819][ T2044] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 594.550181][ T2043] gfs2: can't parse mount arguments [ 594.732505][ T2059] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getegid() r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 02:33:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000c, &(0x7f0000000100)="0e", 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0xfff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x52f}, &(0x7f0000000140)=0x8) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000280)) 02:33:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = syz_open_dev$swradio(&(0x7f0000000400)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00062abd7000fddbdf250a000020300003000800080002000000080003000100756e6c300000000000000000004000080007004e220000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x44044) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x5, 0x4) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x28d3}, &(0x7f00000000c0)=0x8) r6 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="68596a2e407bef70beaa70a3bf4aca8100e899eb58d43ca74e6dcfac0f5e3bdddbb8fc57d5e46de3bc443343841c28996d49fa9bb081a349d320e0127d57b72fc4f581fa6d25b3292b6bc263c127d06959004ab708f489993ccd3db53c0c8906c2c8c85658c9ef8a00000000", 0x6c, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', 0xfffffffffffffffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000003c0)=0x1, 0x8) keyctl$unlink(0x9, r6, r7) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5, 0x9}, &(0x7f0000000180)=0x8) 02:33:09 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x2000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:09 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4400, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000100)=""/197, &(0x7f0000000200)=0xc5) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f0000000000)=0x3) 02:33:09 executing program 1: r0 = dup(0xffffffffffffff9c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x8, r1, 0x1, 0x4}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x7, 0x2, @raw_data=[0x8, 0x1ff, 0x270bfeea, 0x3, 0x101, 0xfffffffffffffffb, 0x80000000, 0x4, 0x1, 0x20, 0x4, 0x7, 0x200, 0x7, 0x3, 0x4]}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f00000001c0)=""/25) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x420000080200004, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000200)={@broadcast, @random="dfcfd60b3184", [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "b9d9db23e2f278157b40872d55b401ca8b4dcb48bf299ae7c9f70e55892922d7d7f25be08908e3d28573e87f4ff74059aab04c45d2c13b04f3703e5d05e74f6b"}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000100)="b82e3e484077bd99185c498bf1a9412e6ad7ea9bd1a05a5f9e6f47bb2748ed816a0bf98fd8a505012b84f66ae588403e058d3ebe7e2a54bcd7cd52b8926bc260a38e41ff5620ba52d0456fa50c3e21589f57f51434fcc929f3410a7d0b9b610b67218c61e1579fcbc08477794a6a8e9d3c3a50bbc7e10d8f50769d4aec9254492385a8821b5c939f3b6f19885431e3e774f1423cbe0646", 0x97, r2}, 0x68) [ 595.017153][ T2178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 595.169319][ C0] net_ratelimit: 12 callbacks suppressed [ 595.169399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 595.181506][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:09 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @bcast, @bpq0='bpq0\x00', 0x2, 'syz0\x00', @default, 0x8, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) semget(0x2, 0x4, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg(r4, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xffff, 0xa1f, 0x2, 0xfc0000, 0x3, 0x3f, 0x100, 0x71, 0x40, 0x237, 0xe71a, 0x0, 0x38, 0x1, 0x40000000000000, 0x81, 0x8}, [{0x1, 0x9, 0x9, 0x8, 0x80000001, 0x8b90, 0xfff, 0x3}], "a51f651df12554f6ece5dca7398c2b0b7dc5ccc5bfaa4d67892ea5b0c666966470f75cfc55", [[]]}, 0x19d) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 02:33:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) sync_file_range(0xffffffffffffffff, 0x1, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x20000000) r4 = socket$inet6(0xa, 0x6, 0x0) signalfd(r2, &(0x7f0000000180)={0x7}, 0x8) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)={'syz0', "3a526c92a331b1883d4185de6158764b637c2f1bb82a448cd5609bd3d254c6ebb29b854e2dcaa07a67683b99d845df50871ddb78f0003434a109af0692dde57eda99ce14859f7ea589e32565c2f7b71d4b9f28fe74119054d92aa8ca2fd32f59732f5ebf05a19c5946cc9929ee76d12d09eed0462afafc92c16c5b5d77cc15373194efa5dee09f2086c9a2aa8e6958759297025ce4c13b38c2c2f1e7cb84979d0a78a4347a3c396a7b993c5eef5275f807e78bd40fe6268b97ba23be687947ada44207c6ca0030f5c2fb41fa55b1b63f730c2daccfb18007ae2f01f02ecf271b3c726e926bad65bbbdc30454d42b1147f3b4b23b4554771e1855af454e6a2615d4ee628bca280d1bad3c5a95212626b6ccdee1ad91f9526cdb0e87f4836e9698a303d32430ec260eb5c9a2a551deef28f619bd11b00f22404628ecb21323af6eeec3572b34b7e142c4f27f4c517f6f39c8fd1f7697a1fb1144c5533eed16299b04bf916b3a3217d7fef144d2826c0902754cf1487c53257ce36039bbb3387fafe81e928a0d16a83fe4ccd53f82560ea569ba7a548c1303057c14d816a8756f08f44899dc9c078494787135f1fe8f1e4a0314640fa166c7d4c866629072d0a480aa3aa1fed7c6fbdda357beda56e00fc19702f22fc9099794de2772b9f4b17d4cac9eee59eb5d166c002ef7b4472eccb243e96e0e259e7c72a71a00afdaf11bafc550546b419ddb3ec68f10a4aee3aef828e57fc17a5932e03993441424c6027ab53a6452b6dc0e691182b264735d7b9e2e4bd3afe990494ba3c2e2a66fab4f3acf38cf39e2c8264c6b940c7150e8b998443ace020ffaa947d0075c130745eba98c348fc2a8492a3952c9a3b49664628d1734db49957fbeed3799c417264958bc9efa9b1f131ccd8de51efa1201938906cdc397838a424b4a4894d3681d68d4e83f37cefff30ab88de8a1799b0e6092baa81d460eed2d5b5ebe213b65c42ee8917961d469b13dbf0ea0628f510644fead6e7b81cbf9d459bc49feb535a76c17415686a8d10f69291e5e81d101224c270fe4affbd21a2795d92ef216c238dfccd72ae71ee84a5e08f70be479f0024fe9239651256352672973f8ea4d781ef691533a2fac49c1aa4ef4db7a8d9ac6db067586e2e7330437e3bd991272e1349b78b7109cdd3e5c4e4c060ea817b7d181f242ef8273148d5ae73fa11bda5bdb76fd8d86a6c6992a1c1656832b9c7d3a2dfbb7886de121bcfab60547d9be27222dfc0690eb580b36bc8e74b7da3f16f516714fd65b0c4b2f355d13b5d2d10d35b00177c924efcb3b6c840f3dc8e124e78ca29ce55eae66a1ee1cfd523ce067b137fb967a3988814005045a4f03f4bed1ce305ede6baa50bcd7b9a26fda1d438985f3e7cc01058ee2a2143e891f3e378cb51281fbd0da34e4136ea63336987a7692541c587d8b97d99fbb0e4b64e415515629cfeb8ef7bf4f1232d15d6e74ebc0a6d0945e384ffd2a4d45cdcab7c5a4592db828562d5e7553593f2d1b4d34824c4328b213753bd2911ba3e4eb90c6ba0f014dbba17fab03ddd8c1f4210f58f1a8ed30b89343edb5b26998aeceb2bf893e8a6e2573066741f25cfc4fe9c840c1443ca8b1f2ecc098fecb64c787f93e31849ecb2b51649a429c800731369980aec145504087a594ef145582c8a8c14321f5ef4945b29826fec6e4b3551699dce869d3362ed1752157afcb276ec6f6f177cb14c513cb56831e01fff33cf3141a1a072a8ace597a8abe6d8a649fc169ed1fd6138bc0aa63858fd02dec5dd25c875b9f609e51b9cad0cd3f9da05748acd1a6da084dfc399f8c79c435fd7a2f86c9a8433ae8a231c0f8a8fd0f21d333edbf7a2fbf543e0fdf0449d2830a8ecb7fec6c11716e0eaffeff6ede7d789eaeed4e57ce74530c620f4755f926f5d2d70153ff99dcd877a3c068f561e5d0cdd89aff5a419210c709b9a7401ddcdc91981c2bdd7fcfdea9551f5029eb4051d8ca7763069c4ab12f93d920c5d0e188fddafada73ccfc56dcc82fa3f691e88716da4e51522fb48840c3fbba2249fc9424e4821d1f97f27dcfec7831511bdc3b3680b3171616658bbe9bb297dd5166d06f48841d13a4c81a56fe2461b9da8f73aa16332a10317879602965c6baf4ca9e1a71937723cfd88a54e5992ec0fc553c2a25b3806fe841fd83b0673071bc5b9af393281483ded69fc736c220cd7ec98f4d7d23459b767498c60edc10b47fb6b190ae513049ff23a62040156de6ebe6c193ae0ab7782223f269df8a33e4814d23abd54767c4e92390ab8aeda621f4b5344036bb16a455c2acc4069a7fb70894b72e3b4c86c00111276eff59b6d18d62a9a7485dc0850b37f834d7b495a3822b6e6d25fef9af49c4fdc5a4ceabb1e073c6748ea1b5ea7419b8f85b733280cf52dca8253240fa3f606c1b83b0b16d8be1aa62d6a30c5ba90618f1d554b923ae182b24ffc1745b52be167dab5b4b95a8b52d586886b6a1b270f36cba9966fe39e2c0aa4497e1ec5682b90106be54da10769347dcb4b46c12181e3ced0c97f4a5b0aa53c3019be9431f70cef9d1bee03ce4ca61e9849fdf98a3ea6b1db9e021cc71058361983e4dc50142f141999a7e3fe45673f99b70065c8ae35183c5a53e13d84393ef356657d9c175ac33af57738122a46c58a6ed42cd361fca4a16666b56f22f64c700635ade3e65dd84fe437cc62968eb1bfbc7b67f5550374e03a2885497f1752735cad2f67945a833d6227420fac91c5a7355c7249cd05fd4eb24a5d8d6469d75e1a04fc64c915cb8c46994669f20b443258c828d4f2776d42af1cf496872437e02818b2b87af6d10267da564fff0f69b62c711a504eda956cc201b7731b3075343f9829e084cbb9b5d90f7e7c0f89bf895e911a0dec27cfdc0e09ed7a49a77caf9d44c5f90e80ab41e5db2d1e0e72b06da17b24ecede0b8190ae10460d5312e6069844a7b2f9e88f7f72bbb13f1b1cb68ca970c53f616c5707538f48ddffc70670be40dee7dfc9eab186a1935002694670a54e99d7442514642114cf1c1538946c2acc196dfe568d6be3e434e63fad880c9bdace770574ba95b2c23378b9163c4c45c6d92675914cbbea8d6f152ba07fdfaeecf5e9e3243267baa3c144a59e63c2383eeab4485a4d7b0c195a0c167d598c86f612721097f7387b71291dce5c01cae58e93b4be26cf8bfb7e32f30fbba03f878cc324bc8621a6c9ffd1d26d15f4951211d6a3c99178027d018f3da541a8092e6e9b5600a82ecedd5f4ac3691ecd398f28710dfa452daf2d6c808207711bd6557d527781be5f6e420ccafd04e6ec7b356a70644c8a67cc2557c67365bc989ca84ab49b1eb482f57eac9d72e95fb39879fff27f41682bace26305db24db7cbbddd159fc23cdd582a62b513ea3c56be259e86e09a63ef6d2445df89a7efebd344bc26f03d81c0f6d8daf563a69a146c65961db1169460d5413f2a78aecb3b2ad53a251bd77f856f1f9fd65b3a91ad5e53688ae6b9517d48adb3cc566b0fd45510506750a7f9371b3e7630b8a70de7dbde76434785095953ab4429a9108e957c88065e3e4ec0c2a71145016246837f06a127d0609ccf05c431aeafa9aefc889495c36ada7029e7d9ca855d7d5db1b224858f4ba2cb3b86c976243ff6b78ad435abb1c789883cf701e7e77d4f2c586739c61810502e592e4dc14a70cbaf3a048b48ddb6e5e0ea25688e79c88797bb9ff921f46530156ba1112ed656d950de2f59da919ddb5fb3f280c4ab908a053efd550073d624107d8ec3335780c386aaaa08294a8b74c1527cea5e38a6b4bac65055678f37569ec689b82293eef7156202eef371fa03d7dc14d60e45ccfa651f22471ed3189318662aadd938d4e681cef8a7b34d05ff290a97bf59eab58da9f456a701d1e7473610cfe54981c4a4a38f9eb1897b5dc39ec0a2a48fde8bb54a845369d8f5a8b587539c814ff836541c4e8169e570867e92efe5717e7dc2fa039538bc28847ebf5024f198ab50362ee5234a7a83f6b67cbc4aaf0e8088c61cec77a7728e84fd136bf535a6c9db06ae4ad65c6fa2925a6c1890638addce57979d0e7365ac5637e38ef86a5d38977da2dbb24c22e00ba9c54a98488ef723828d7b3da1b85c51b26d7fb29ee5678cb3b10126ec52ace5ab5e30066472e3fff75111e5726d6ed050c03d77df3f4fda9fed0074501ada12d8e941d6e5d1a2ec6b0d9d109b8a7ee2a9fe2a5a96d30c4ea38f482ceae0142472eacfe5ce45108e5ccf22d88d2e464a3d90530877cbf539645d7d95d7ab5338d214d8f707a8c04ee56b4eb7fc0447973c64680fa5f3e3aa472a7075af2893fe0170251cc2bc21265370f5c9acd4d270573fc0002883353ac43e09d7fa590c9fd526a88730300eec08dd3cdd0f18f0d73e3b76159e4a52ba31d69b71f43f88ecb33be43eac56ebcb3d5d31b9ed0d8782f2e72b1e64a5398d680694159319390730a81d66d224d29614db548dd6d1b22bbe7500d161cea3372a4a184f734d7a23eb3aaa76b486dce4dbd0196850b27acd35d9a75e4435bd54bba69b1670bb3b15c631aa62d05db9085237a8a07d820f3f52ee54e2f814b7f9c5bbebbc6a761c0ccdf9b21ceb5b8e9cc8b8be3571eb53fa5893685ea8f19c9141e369cce0a668c1bf0ef2cff2d604abee2f13cdfb3f3a9a8f70eb52bf3a3cbf360acd4196ef7641ab04407ce5b439a0a4bc49a2bcbe0bbc8119e64fca9be4f61cd54fee615021d86f803a67bf827deac87e32507f0c2ae3d71b37687c89c1d380bc6ccb8e88944eaadd0c28ba1e18ee7f7c6aeeebdd2521924a9f70bfec4f222f599bb323d28e0df195c7109fd3130c777babccc1cbada7b690cd1f0f7d7508b509fe9f086ac868a87abfafeff257794406b1bfb201d26737573fe01d7e51e39316b675d80354c5294e6a1ae921f414fc58b50e8c1d117309453a04b018f536ab3de9e4c35d9db9049d76ad61ff384a8730f98d74b6c7ce7a4dac40f252e8325dc9dfaa982ec10f488899dcc18cf193f253d8ec3a4f86c991fc76c20f32a0a498fea373e8c5520383c157c134521697ccc31b68cc05d2103fc56ee75fe1f2dd2fecd92482d0e27e9750ffa494db2a41b53fbdcd1cb7aa5f78c298b233b4cbe23836140a0bd2350d08b0024f114cc8b73ecf7458cfc62fd0b302ecb21cadc86018efe20a177fcb36a1c767523cd112929315133897f642e54db195ffa3c51de73a7143a625de5b82de6f17fd4f1e598de5f1d70db7f94206a42e905dfa32ac995fdf88b5ef3aee95a32b85dc3709499f30c4d0a3736f8657bc546cdec012af6c1b907e5827b514421b26bc0c3982af1a01ffbbc0b675895c3e056ee86c152662849f707cdaeedab30924b460c7df37b4127732306d12ebf6d8efe6ee028ee1bd3a8d7a499775654cfb3c5f471fc84af2dc319f20f5f804a4e1d8a44fd5fc4bec53a88f85dee812a019e1d24a42de8ecb85ee224b1fe6cb3b020fafa8a6217c7c252f0c9e737579595e6b929b883860ba015c040f49367cb47de412b1794dfc0eb20c111b483617dae5037fc266564e6d2c5292aec8132c5c40881721fe11d72f67d3038488c9ceb2657829558211afd6656cd1c2a240c2329e15c7947710e1da3a42bd55865c47ece3b0474a7c13212c05bace6483146c70d032ac35c8862b68e8cc87f476017d77ed8364fca1d32f16d7c76d3013c55cdad2e835bb89be8b6414009ec42b7ede31d6fdb54edac38e6a69465f327ead46120a4904d1e"}, 0x1004) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f005f000f01ef0f0666b90201004066b80000000066ba008000000f3066b9170a00000f32670f09ff895fe0b899008ed8660fe93b0f0015", 0x38}], 0x1, 0x2a, &(0x7f0000000180), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x10300, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) [ 595.428530][ T2178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:10 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)=ANY=[]) 02:33:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41f00}, 0x48) fstat(r0, &(0x7f0000000000)) 02:33:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000002000006000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800050000000000"], 0x3c}}, 0x0) 02:33:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getegid() r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 02:33:10 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x3f000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200002, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x600000000000000, [0x4000000a], [0xc2]}) 02:33:10 executing program 0: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6003, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/165) 02:33:10 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x100000}) ioctl$PPPOEIOCSFWD(r0, 0x80044dfb, &(0x7f00000000c0)={0x18, 0x0, {0x0, @empty, 'be_0\x00'}}) 02:33:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r2, 0xffffffffffffffff, 0xffffffeffffffffc) r4 = socket$unix(0x1, 0x7, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0xfc94) ioctl$sock_proto_private(r4, 0x89e0, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x3, 0xffff, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x6, 0x219, 0x8, 0x1, 0x100000001, 0x3, 0xff, 0x8, 0x2, 0x7f11, 0xfffffffffffffff7, 0x2, 0x1, 0x80, 0x80, 0xffffffffffffff89, 0x2a6c7d95, 0xe29, 0x6, 0x1, 0x3, 0xfffffffffffffffc, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x44e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r6 = add_key$user(0x0, 0x0, 0x0, 0xfffffffffffffd61, 0xfffffffffffffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$assume_authority(0x10, r6) sendto$inet(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) r7 = creat(0x0, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r8, 0x6de, 0x3f}, 0xc) memfd_create(0x0, 0x0) alarm(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xd8) sendto$inet(r5, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r5, 0x0) [ 596.067055][ T2508] kvm [2503]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000a data 0x0 [ 596.090097][ T2466] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:10 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x2f) semget$private(0x0, 0x2, 0x8) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="1980c789f9e58c00002eaa1df0000084b2030000000000000000007d00bf977a1f0aa51ba72ad356cb03000017502540a30000000000014539"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 596.249926][ T2558] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:10 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)=0xb) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000000)={0x0, @ctrl={0x0, 0x0, @value64}}) 02:33:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f00000000c0)=0xfffffffffffffd82) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa000, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000080)={0x7e, 0x3e2, 0x80000000000003, 0x400}) 02:33:10 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3aa0444f, 0x4c000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000740)={0xf, 0x8, 0xfa00, {r3, 0x5}}, 0x10) r4 = syz_open_dev$mice(&(0x7f0000000600)='/dev/input/mice\x00', 0x0, 0x220000) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000700)={0x34, 0x0, &(0x7f0000000640)}) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getpeername$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) sendfile(r0, r1, &(0x7f0000000240), 0x2000010200000b) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, 0x0) r6 = creat(&(0x7f00000006c0)='./bus\x00', 0x1) fcntl$setstatus(r6, 0x4, 0x8000000000044000) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) io_submit(0x0, 0x0, &(0x7f0000000540)) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 596.368763][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 596.374759][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:10 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80000, 0x0) sendto$llc(r3, &(0x7f00000002c0)="788ca7208dc32ee7a5ec6b1876363a66132382bb226cd0815b600773d161a866f3e3ca09a2f723e7a15ade370fad25d60764e577de3e226bd4fa3657872add60c630fde6c79002ebbdacf45e961c4a8dcded6674ba6a90a0763e1b4815655d0547487ddc56133b57944fe24abda87ffb89f2657afcdb7670cd98d0ed3ed70d70c1257fe510adcbc4e953c87f288aedf8665119efec1aae2f8b585878b6e4ef72e566a1e4c25b6a456733871a0a7973cf60c4a80ff3ae294b5f6b21a2e0d7af1ca9f352491eaf7ac5c72ac42a03c5c58c785733722c90847a5d8e8604d0e8f1d7383671face", 0xe5, 0x840, &(0x7f00000000c0)={0x1a, 0x30f, 0x7, 0x8, 0x10001, 0x3efb8f43, @broadcast}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000001c0)={r5, 0xffffffffffffff20}, 0x8) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000000), 0x10, 0x0}, 0x0) [ 596.544306][ T2490] print_req_error: I/O error, dev loop0, sector 0 flags 801 [ 596.552943][ T2490] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 596.561961][ T2490] print_req_error: I/O error, dev loop0, sector 8 flags 801 [ 596.569696][ T2490] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 596.578074][ T2490] print_req_error: I/O error, dev loop0, sector 16 flags 801 02:33:11 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x40000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) [ 596.587532][ T2490] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 596.596028][ T2490] print_req_error: I/O error, dev loop0, sector 24 flags 801 [ 596.604783][ T2490] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 596.613258][ T2490] print_req_error: I/O error, dev loop0, sector 32 flags 801 [ 596.620841][ T2490] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 596.629306][ T2490] print_req_error: I/O error, dev loop0, sector 40 flags 801 [ 596.636685][ T2490] Buffer I/O error on dev loop0, logical block 5, lost async page write 02:33:11 executing program 3: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000072ff8)={0x7fffffff}, &(0x7f00000000c0), 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=ANY=[]) fcntl$setstatus(r0, 0x4, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = open(&(0x7f00000004c0)='./file0/file0\x00', 0xa800, 0xe6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)={0x0, @aes256, 0x1, "a19babd1a8a19148"}) writev(r3, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0xe000000}, 0x6) dup2(r1, 0xffffffffffffffff) io_setup(0x2, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000480), 0x4) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$ \x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fcdbdf25010000000800050002000000080004005e030000"], 0x24}, 0x1, 0x0, 0x0, 0x3bc6d0a49ed2cd65}, 0x0) 02:33:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000380)=""/224) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', r2}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000004c0)={0x0, 0x4, 0x3000000, &(0x7f0000000480)}) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) [ 596.645235][ T2490] print_req_error: I/O error, dev loop0, sector 48 flags 801 [ 596.652695][ T2490] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 596.661178][ T2490] print_req_error: I/O error, dev loop0, sector 56 flags 801 [ 596.668706][ T2490] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 596.677062][ T2490] print_req_error: I/O error, dev loop0, sector 64 flags 801 [ 596.684590][ T2490] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 596.694498][ T2490] print_req_error: I/O error, dev loop0, sector 72 flags 801 [ 596.701954][ T2490] Buffer I/O error on dev loop0, logical block 9, lost async page write 02:33:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x2}) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000100)=0x80) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 596.848879][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 596.854757][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:11 executing program 0: inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mice(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000300)=&(0x7f00000001c0)) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe59, 0x0, 0x0, 0xffffffffffffffdd) syz_open_dev$sg(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0) socketpair(0x0, 0x3fffffff, 0x4, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) [ 596.928804][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 596.934824][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x410000) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000007c0)=""/11) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02b9019de132be9c5d909d7f6ba9fd95d400f2e66975cf0379ff261f731e717ceaec3ae1b035"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000640)={0xbc, 0xffff, 0x100, 0x0, 0x0, [], [], [], 0x2, 0x2}) socket$l2tp(0x18, 0x1, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000800), 0x4) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) close(0xffffffffffffffff) write(r4, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='.//ile0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x1) sendfile(r4, r5, 0x0, 0x10000) openat$cgroup_ro(r0, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 02:33:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x2}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x181000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{}, {}]}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x8100, 0x0) socket$pptp(0x18, 0x1, 0x2) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x800) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={r3, @empty, @broadcast}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x19b) sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x40000004000, 0x0) bind$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @reserved}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="a5fe", 0x2, 0x8801, 0x0, 0x0) [ 597.194961][ T26] audit: type=1800 audit(1551666791.597:239): pid=2926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17011 res=0 02:33:11 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x18fd5f16, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x2f) [ 597.248975][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 597.255317][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x108) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/239) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000180)={0x5, 0x1, 0xffffffffffffffc0, 0xb3f, 0x13, 0x8001}) r2 = memfd_create(&(0x7f0000001b40)='t\bnu\x00\x00\x00\x7f\x00\x00\x8c\x00\x10\x00\x00\x00\x00\x00\x00N\x1c\xc3\xfe\xc3.\x12\x1e\xcc\xf2\xd8\xd5l\x04~K8\xff\xe1S\xfa\xc1\xbb\x8bx\x9e\v\x83\xf6\xb2q[\xfd\xd8\x8b\x1d7\xcc\xe9\x82\xe8Y\xda\xec\x02sh5\x8d\x90J\xd0v\tu@\x13\x94\xd3\xe2\x8d\xec\x914\xcaKy\xe9K\x9cP\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa1\xff\x96\xec\xf8\xcaJH\xef\xfc\n.}\x0fnvI\x83\xa5\xfc\xd3\xe4(\xa7&\xab\xd2\xd5\x90\x87\xea\xddO\x1f\xff\x00\x00\x00\xdd\xb1\xc6\xae\x0f\xb6\xfcEq\xc3\xe6p\x95\xc7x\x91\x9c\xf4\x10W\xfd\xea\xb3|\xa1\xb0M\x06C\xf1\xb5\xc3\x8a\xaf\x1b\x98\xc9c6\x13\xa6\x94\x14', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x100000000000000, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) [ 597.399467][ T26] audit: type=1804 audit(1551666791.627:240): pid=2926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir799331669/syzkaller.MlUBQn/695/file0" dev="sda1" ino=17011 res=1 02:33:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4400, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@dev, @initdev}, &(0x7f00000000c0)=0xc) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 02:33:12 executing program 2: munmap(&(0x7f000000f000/0x3000)=nil, 0x3000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x204000, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x63) getrandom(&(0x7f0000000180)=""/44, 0xcc, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x810001) r2 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2\xaaP[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdh\xc5\xbd\f\x9d\xce\tby(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f\x00\x00\x00', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, &(0x7f00000001c0), 0x1000) [ 597.610408][ T3045] Dev loop0: unable to read RDB block 0 [ 597.659923][ T3045] loop_reread_partitions: partition scan of loop0 (pàõ|Œö' $äé`Bªå‡TÁÕœÈ) failed (rc=-5) 02:33:12 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000200)=""/44, 0x2c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000280)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x3fffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) unshare(0x0) r2 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c616609643d307830303030303030a12ac08303000000312c6d6173"]) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xbd, 0x279d}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x9bc5, 0x8, 0x5, 0xfffffffffffffe00, 0x7, 0x2000000, 0x0, 0x0, 0x0, 0x3}, 0xb) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) mount$9p_tcp(&(0x7f0000000300)='127.0.0.1\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) 02:33:12 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0xa4ffffff], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$sock_TIOCINQ(r0, 0x80047456, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x7ff, 0x200000) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @broadcast}, {0x306}, 0x26, {0x2, 0x4e22, @multicast1}, 'ip6_vti0\x00'}) 02:33:12 executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0xa, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00') 02:33:12 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/snapshot\x00', 0xfffffffffffffbfb, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x430, 0x230, 0x0, 0x0, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000000), {[{{@arp={@dev={0xac, 0x14, 0x14, 0xf}, @multicast2, 0x0, 0x0, @mac=@random="b7ef2d35488e", {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}, @empty, {[0x9fa36b34e2b60442, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x5, 0x3, 0x7, 0x2f7, 0x7, 0x612cf980, 'bcsh0\x00', 'hsr0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0xff, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}, @mac=@dev={[], 0x10}, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}, 0x0, 0x10001, 0xa4e, 0x1, 0xffff, 0x7f, 'ip6erspan0\x00', 'team0\x00', {}, {0xff}, 0x0, 0x4}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x81, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5ff) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000580)="0adc1f123c12a41d88b070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) write$FUSE_WRITE(r1, &(0x7f00000005c0)={0x18, 0x0, 0x4, {0xffffffffffffffc0}}, 0x18) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:33:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x8) setsockopt$inet6_tcp_int(r3, 0x6, 0x1f, &(0x7f0000000080)=0x81, 0x4) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000180)=0x2) sendfile(r0, r0, 0x0, 0x2000005) dup2(r4, r0) [ 598.107381][ T3340] Invalid argument reading file caps for ./file0 [ 598.153091][ T3336] REISERFS warning (device loop5): sh-2021 reiserfs_fill_super: can not find reiserfs on loop5 02:33:12 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) [ 598.196784][ T3348] Invalid argument reading file caps for ./file0 02:33:12 executing program 0: r0 = socket(0x10, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0xa, 0xffffffffffffffff) setxattr$security_capability(0x0, &(0x7f0000000080)='security.capability\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff92) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x3) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c21b86cb948"], 0xa) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 02:33:12 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) waitid(0x0, r0, 0x0, 0x1000008, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0xfffffffffffffffe, 0x3, 0x1, 0x1000, &(0x7f000002a000/0x1000)=nil}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r5 = accept4$vsock_stream(r4, 0x0, 0x0, 0x800) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)={0x9, 0x0, 0x4, 0x70000, {r6, r7/1000+30000}, {0x5, 0x8, 0x1f, 0xffffffff, 0x3, 0x2, "ce0a97b6"}, 0x9, 0x6, @offset=0x2, 0x4}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) accept(r5, 0x0, &(0x7f0000000200)) syz_open_dev$evdev(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x4, @ipv4={[], [], @multicast1}}], 0x4c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x3ffc0000, 0x8}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 598.473365][ T3456] __nla_parse: 3 callbacks suppressed [ 598.473373][ T3456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x100000000000000f, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = gettid() ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x4, @thr={&(0x7f0000000100)="9f177442756a67997dde374fb68cf5e7bb90156bf0e6c97ec34c08b8e5d443d3fa12928c92f23c7cbb5b5698d9b0909a666a5601203055d73ac0c6d39e9b54f3e92ce5def97710dfe653c6819fcf631347611333bb69b0ae6bcdf1a9b8317a8a5b1f5482b2f3712ea43292cac5ea43907228f0a870f1e380457a90ad59b4e73a1214436e40890ec11c367e3c937ec1706afbacce95730b1ba96a77d299d64ccfa25aaf65ac1ca878fac8", &(0x7f00000001c0)="af3fb11a1aa975d8817ab0dbe0c0a38240179099faa5c95764661b836e24715ea96360953f1baac76b51a5b184dbead6322e4dca5cbf69b3295560771fbc81a79101fb836339"}}, &(0x7f0000044000)) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x4008550d, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x10000, 0x88002) ptrace$setopts(0x4206, r2, 0x908c, 0x4) 02:33:12 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r0 = socket$inet6(0xa, 0x80e, 0xfffffffffffffff8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/242, &(0x7f0000000300)=0xf2) socket$inet6(0xa, 0x2000000000000001, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x801, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x31}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4080}, 0x4040) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x4, @mcast1={0xff, 0x1, [0xc]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) [ 598.549993][ T3418] REISERFS warning (device loop5): reiserfs_fill_super: Cannot allocate commit workqueue 02:33:13 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=@ipv4_newrule={0x70, 0x20, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x30, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10008}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x100000000}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x2f}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x1}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)={{0xcc, 0xad, 0x7f, 0x1c6, 0x37e, 0xfffffffffffffa35, 0x136, 0x6}, "9f41d6d4b4e221181645c657", [[], [], []]}, 0x32c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000580)={'filter\x00'}, &(0x7f0000000600)=0x54) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x20408000) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000640)={0x8001, 0x43b03409, 0x20, 0x4, 0x13, 0x2500, 0x3, 0xfffffffffffffff8, 0x6, 0x20}) 02:33:13 executing program 5: mknod$loop(0x0, 0x10000001, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x8ed8}}, 0x5, 0x3, 0x7fff, 0x1f, 0x7}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={r2, 0x2}, &(0x7f00000004c0)=0x8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0x40) write$P9_RMKDIR(r3, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x80, 0x0, 0x6}}, 0x14) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7e5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={r4, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000200)={r5, 0xd8, "6873b2354ff96ad4da02a7ef723168cea40409bf8ef094efc7cd6c64131380880261924c966503fac031caa9a6ce6dd4474775a99aee232f5b72992afdf9071e25c85c4869e025149b795dc112ac2a399bea8e737925a551f0ad6801bb18261b6f0ec697287de7ad6923a8bbc3cd5a68e5d5db0a5eee7b7e1be6b300ec783b1208168dcdaa6811f98f2303e44cae5ea698593d81756255b57700e7add345bb970f7e20d20d46de270d12833172c1590d5da71f296e3b30479bc9b3c88466d0d8c06042b4e9b3c3aa0fdcb6ec814c770d063d933c81e44d58"}, &(0x7f0000000300)=0xe0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x9e945000, 0x3e0000}], 0x0) [ 598.709384][ T3516] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 600.528775][ C1] net_ratelimit: 8 callbacks suppressed [ 600.528792][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 600.540233][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:15 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0xffffffa4], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x80, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0xa66c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x23a}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e21, 0x3, 0x4e20, 0x1, 0x90272f329e2982c4, 0x0, 0x80, 0x3f, 0x0, r4}, {0x4, 0x10000, 0x4, 0x1000000000393, 0x0, 0x3, 0xfffffffffffffffb, 0x7fffffff}, {0x80000001, 0x5, 0x5, 0x3f}, 0xed1b, 0x6e6bb1, 0x3, 0x1, 0x4}, {{@in=@empty, 0x4d4, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x34ff, 0x1, 0x3, 0x5716860, 0x2, 0x5, 0x2}}, 0xe8) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400001, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x7, 0x100, &(0x7f0000000140)=0x2}) r6 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x10000, 0x100) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000400)={0x0, 0x3, 0x7, 0x7f, 0x7, 0x7, 0xfff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r6) ioctl$int_in(0xffffffffffffffff, 0x8000000002a701, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000280)={r7, 0x3, 0x8, 0x1, 0x8, 0xfffffffffffffe01, 0x10000}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000003c0)) eventfd(0x0) 02:33:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)="0000bc4ffe7f00009d", 0x9}]) 02:33:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100070c10000a00000001400000", 0x58}], 0x1) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0f85403, &(0x7f0000000140)={0x3}) 02:33:15 executing program 5: ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r5 = syz_open_pts(r2, 0x0) ppoll(&(0x7f00000000c0)=[{r5}], 0x3e, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) r6 = open(&(0x7f0000000280)='./file0\x00', 0x410000, 0x4) bind$rxrpc(r6, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r7 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) nanosleep(&(0x7f00000003c0)={r8, r9+30000000}, &(0x7f0000000440)) recvfrom$inet(r7, &(0x7f0000000040)=""/45, 0x2d, 0x10020, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) sendto$inet6(r1, &(0x7f0000000500)="2ff6508a80367565414cb3bddeb37393bd3e2535e472e5e59baedfdd1d0ac1401a2138346b495b5dbff9d149f08a72eb767bc60fc316eb39ff6bac6ee61b9b5218633bff8baa12d376c07df8d83b741b3674a1a12360520fb4be2b77c44edfba8627e1bac6844f65f836b9e8d4486f816b8ddd2d784ccfe122dbd7480699260dfef9022faddd9be5d7cb274f49021610a819377200a5f53e31ba607e9fca0c6288317ac6", 0xa4, 0x0, 0x0, 0x0) r10 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r10, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 02:33:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000100)={0x0, "89c4003a7df068a823bdba716d38ffc82be91787d095ec33432870cc35b5e65f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x3d) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:33:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) ioctl$KDSIGACCEPT(r0, 0x541b, 0x0) 02:33:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9ec2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 601.011392][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 601.017198][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 601.080953][ T3952] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 601.091703][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 601.091771][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x8) 02:33:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={0x0, 0x0, 0x0, 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r2) [ 601.373063][ T3952] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 601.410033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 601.416845][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:15 executing program 0: syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:33:15 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000040)="685cfcf38615494fa20a9888355437f588d8cebe187359250f") [ 601.681958][ T4186] gfs2: not a GFS2 filesystem [ 601.785410][ T4186] gfs2: not a GFS2 filesystem [ 602.608808][ C1] protocol 88fb is buggy, dev hsr_slave_0 02:33:18 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x100000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:18 executing program 3: 02:33:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000003500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 02:33:18 executing program 5: 02:33:18 executing program 0: 02:33:18 executing program 2: 02:33:18 executing program 5: 02:33:18 executing program 0: 02:33:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x5) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x610a101dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) r1 = dup(r0) write$apparmor_current(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:33:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(r0, 0x540e, 0x0) 02:33:18 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, 0x0) 02:33:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000640)) [ 604.185971][ T4302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.440209][ T4329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:18 executing program 2: r0 = socket$inet6(0xa, 0x7, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x61) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) write(r0, &(0x7f0000000940)="e6", 0x1) 02:33:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x7, 0x9) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66b8ea000f00d8eadd5484f88a00f0833600660f71d50066ba4100edb8010000000f01d90f0866b8bd008ee0b94d0200000f32360f07", 0x36}], 0xaaaaaaaaaaaabce, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) shutdown(r0, 0x1) semop(0x0, 0x0, 0x2cb) renameat2(r1, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x4) 02:33:18 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x40, 0xb6db71d364cf2abd) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x1, 0x4) r1 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x4c, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000002c0)={0xe, 0x102, 0x5, {0x8, 0x1f, 0x4, 0xfffffffffffffff7}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1000000400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1006}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @mcast1, 0x81}, {0xa, 0x4e20, 0x3000, @empty}, r3, 0x1ff}}, 0x48) ioctl$VIDIOC_G_SELECTION(r1, 0xc0285628, &(0x7f0000000000)={0x2}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video1\x00', 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) 02:33:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) 02:33:18 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x200000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r0) eventfd(0x3) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x907000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setgid(0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x7f) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0, 0x3}) 02:33:19 executing program 5: r0 = semget$private(0x0, 0x207, 0x20) prctl$PR_SET_FP_MODE(0x2d, 0x1) semctl$SETALL(r0, 0x0, 0x11, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000180)={0x1, 0x17}, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x404001, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000100)={'bridge_slave_1\x00', 0x100}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40006, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) 02:33:19 executing program 2: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) wait4(0x0, 0x0, 0x40000000, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffff, 0x2) ioctl$KDDELIO(r0, 0x4b35, 0x7fffffff) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @remote}, {0x307, @broadcast}, 0x40, {0x2, 0x4e22, @loopback}, 'batadv0\x00'}) r1 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0x400, 0x4) exit_group(0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0xffffffffffffff80, 0x400, 0x0) [ 604.755380][ T4506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:19 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x40}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x2, 0xfe67, 0x7, 0x8, 0x0, [{0x3, 0x8, 0x101, [], 0x8}, {0x1, 0x1, 0x7fffffff, [], 0x1}, {0x8, 0xfffffffffffffff8, 0x42c, [], 0x690}, {0x6ac8, 0xbb4, 0x7}, {0x1, 0x81, 0x5, [], 0x49}, {0x4, 0x1, 0x7, [], 0x10001}, {0x7, 0x10001, 0x6, [], 0x10000}, {0x1ce, 0x8, 0x51, [], 0x81}, {0x0, 0x1, 0x5, [], 0x3}, {0x2, 0x81, 0xe034, [], 0x8}, {0x2, 0x80000000, 0xcfa, [], 0x7f}, {0x360f8711, 0x800, 0x1, [], 0x1}, {0x3f, 0xe6af, 0x80, [], 0x9f0}, {0x7ff, 0x3, 0xfffffffffffffffc, [], 0x8893}, {0x8, 0x3f, 0x20}, {0x5c, 0x80000001, 0x4, [], 0x7}, {0x3, 0xa800000000000, 0x3, [], 0x8a58}, {0x9, 0xffffffffffffff7b, 0x400, [], 0x4}, {0xb7a, 0x6, 0xc06, [], 0x1}, {0x6, 0x7, 0xff, [], 0x5}, {0x6, 0x0, 0x2, [], 0x193}, {0x20, 0x6, 0x4, [], 0x7}, {0x7ff, 0x6, 0x100, [], 0x5}, {0x8, 0x4, 0xfffffffffffffffb, [], 0x1}]}}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 02:33:19 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000004c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0xfffff001}]}) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x6302) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) 02:33:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x85, 0x40281) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400302, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x801c) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x0) 02:33:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x62, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e7, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x4, 0x8}, 0xc) ioprio_set$pid(0x2, 0x0, 0x4) clone(0x801480ff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='logfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x400000000, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) r4 = getpid() getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @local}}, 0x3, 0x3}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8, 0x0, 0x9fdd, 0x4, r5}, &(0x7f0000000380)=0x10) ptrace$cont(0x18, r4, 0xfffffffffffff000, 0x8) 02:33:19 executing program 5: pipe(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x100000, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000001c0)=""/141) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000080)={0x8, 0x1}) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x8, 0xbab, 0xffffffff, 0x0, 0x4, 0x5db, 0x9, 0x6, 0x4, 0x2, 0x5, 0x989}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) connect$vsock_dgram(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) syz_open_pts(r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) [ 605.115771][ T4506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2202, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) timerfd_gettime(r2, &(0x7f0000000040)) 02:33:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2000000080002, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000000000000010000000500000000000500010000001f0000000000000019000080d70500003f000000ffffffffffffff7f0000000002000000ffff000087f106b17251a29c0a00000000000000010000007baa0000070000000af2846fffffffff00000000070000800600000008000000ff7f563de15000000000000001000000040000000000bb0008000000ffffff7f0000000001000080ffff000001000000fcffffff0000008000000000"]) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x81}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r4, 0x41, 0x20}, &(0x7f0000000380)=0xc) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x204400, 0x0) [ 605.319410][ T4713] QAT: Invalid ioctl [ 605.348433][ T4713] QAT: Invalid ioctl [ 605.578734][ C0] net_ratelimit: 13 callbacks suppressed [ 605.578742][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 605.584483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 605.841441][ T4713] QAT: Invalid ioctl [ 605.850974][ T4713] QAT: Invalid ioctl 02:33:20 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x3fffb, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@empty, @mcast1, @dev={0xfe, 0x80, [], 0x28}, 0x5, 0x3, 0x2, 0x100, 0x8001, 0x800000, r1}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="24000010311043691f001400f407000904000a000710080000000800109f00000096e85c453adbac36b6100000", 0x2d) r3 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000001c0)=0x2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0xf000) 02:33:20 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000000c0)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000100)="b9e6c08b22e6f7609dd40e1e856bf43ac792e860c9263fd66f668c6de6514fab7db2454b9cf781c0d294671abbaeef5d6082ecf76ba56611929c1b4617a809fc9a5953402d393648743f1d23046856398dfd6fe846285c4b0c007dc6dd358011be86286ff2e2c0d44a7a1f920e35f2b20e33b3c44e2eec0356648de0996378207d14a13fc2b2a0d0111e550b41c5c8c354c5f4c1801d3e18c475da50e672acac8b06a9e41b933ab78dd9552aef0378e63e40b946f78a") socket$caif_stream(0x25, 0x1, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 02:33:20 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400, 0x20140) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="defb0749ca9e92c0c97671be583d3617de", 0x11}, {&(0x7f00000000c0)="dace90062212853a857a7d921b78a13ebc3d3dcd154a", 0x16}, {&(0x7f0000000100)="1578e46041e9ac1bfe4ab9ae7338b517a8bc2d9e2407b85a1e", 0x19}], 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x3, 0x280) openat(r1, &(0x7f0000000340)='./file0\x00', 0x200000, 0x70) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56ea54c7bef8915d564c90c24000000000000000000000", 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x1}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, [], 0x17}, 0x7f}], 0x48) sendto$unix(r3, &(0x7f0000000080), 0xfffffffffffffea5, 0x40, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x8000, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000002c0)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) recvfrom(r3, &(0x7f0000003240)=""/4096, 0x1000, 0x3, 0x0, 0x0) write$selinux_attr(r5, &(0x7f0000000180)='system_u:object_r:qemu_device_t:s0\x00', 0x23) 02:33:20 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x3f00000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:20 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000000400000000000000"], 0x14}}], 0x1, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x141080) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@generic={0x5, "7198cb1ca2d2ceada19d562a08c244b6ed0118e62fe60b0d83b0a4cba9f2c3e5d5c4943de481182e4c23207f3834d2586e2c428a2677aac7cf252058cfe3c349a95b512777a98634d436234c20a734928f55e3efbe78dc3a8b118036037be2d902a0c1e1cea258257cbcfad4096676523bca3946319a20d8cb07b4144db2"}, {&(0x7f0000000140)=""/159, 0x9f}, &(0x7f0000000080), 0x10}, 0xa0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007d80), 0x6, 0x0) 02:33:20 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8001) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000000440)='I', 0x1}], 0x1, 0x40000) fallocate(r0, 0x8, 0x2000, 0x8000) r1 = socket$inet(0x2, 0x80001, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) accept$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0xfffffeb8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0xf401) [ 606.122426][ T4822] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0xa0000}) 02:33:20 executing program 1: socketpair(0xa, 0x80b, 0x647, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, [], 0x19}, 0x76e}}, 0x24) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x30010, r0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x204000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000100)={{0x8000, 0x0, 0x80000001, 0x1f5dc000000, 0x0, 0x80000000}, 0x6, 0x7, 0x1327, 0x2, 0x8, "ba8fa337ba301b28d1aef5e63e444203d79cc5c2105cf6f308d7b10ffaa5f0f1386b4af1ac07cdfae80264c1540f2fc6ace7acfea8e189ece764dd647cebd653204faa1f2f8126b3547e81b81301e6a289594199db4007557455f1784779c725b3d82a8cbef677745ef222423104bf71a3bacac95df49a9e8eb360b7bae361fb"}) bind$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x9, 0x1, 0x596, 0x7, @dev={[], 0x1e}}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000200)=0x3, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x200900) lseek(r4, 0x0, 0x4) lseek(r2, 0x0, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x400}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={r5, 0x10001}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) bind(r1, &(0x7f0000000540)=@hci={0x1f, r6, 0x1}, 0x80) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000005c0)={r5, @in6={{0xa, 0x4e23, 0x1, @remote, 0xfffffffffffffff8}}}, 0x84) write$ppp(r2, &(0x7f0000000680)="95207bc84a3b9ee71bacc4f404efd2cddef85000f80677bf0e69fc621af66391a9e165d4", 0x24) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000800)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000840)={r7, 0x3}) fsetxattr$security_selinux(r1, &(0x7f0000000880)='security.selinux\x00', &(0x7f00000008c0)='system_u:object_r:systemd_logind_var_run_t:s0\x00', 0x2e, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000900)=@assoc_value={r5, 0x1}, 0x8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000940)=0x0) prlimit64(r8, 0xf, &(0x7f0000000980)={0x2, 0x5}, &(0x7f00000009c0)) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) r9 = accept4(r2, &(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x80, 0x80000) setsockopt$X25_QBITINCL(r9, 0x106, 0x1, &(0x7f0000000ac0)=0x1, 0x4) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/dsp\x00', 0x202, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r10, 0x80e85411, &(0x7f0000000b40)=""/178) 02:33:20 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x50400) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x5, 0x1}, {0x1000, 0x85e}, 0x3, 0x5}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x8, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8947, &(0x7f0000000100)='l\b\x00') [ 606.447470][ T4738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0xc401, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000180)={{0x3d, 0x8, 0x1, 0x200, 0x20, 0x7f}, 0x674}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000005c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000280)) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/full\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890c, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x3, 0x10000000280}) r4 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000140)=0x2) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f) sendmsg$nl_generic(r5, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0) 02:33:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xe}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f0000000080)}, 0x10) r1 = socket$kcm(0xa, 0x200000002, 0x11) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10100, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000140)=0x1, 0x4) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0), 0x2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000080), 0x301) 02:33:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x990000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @p_u32=0x0}}) 02:33:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x200000000000008b, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, [], 0x0, 0x9}, 0x1f5) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40000000414400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1a}, @loopback, @dev={0xfe, 0x80, [], 0x16}, 0xd918000000000000, 0x1, 0x2, 0x100, 0xb863, 0x40100000, r1}) 02:33:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x400, 0x1, 0x6, 0x3, 0x3, 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x800003ffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e000000120081aee4050cecdb4cb90425485e510befccd77f3e9cf0758ef9000600b0eba06ac400060003000000", 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x80000000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) 02:33:21 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x4000000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x22080, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3, 0x800) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x1, 0xfffffffd, 0xfffffffffffffffe, {0x40000000000002, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @sdr={0x48}}) [ 606.768746][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 606.774632][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:21 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20a00, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000000140), &(0x7f0000000280)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x400000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@dev}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000000)={'erspan0\x00', 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 606.907369][ T5299] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000000c0)={0x3, [0x9, 0x7, 0x6, 0x2, 0x200, 0x1, 0x273, 0x9, 0x54d1500d, 0x6, 0x7, 0x0, 0x1, 0x1, 0xffffffff, 0x0, 0x3, 0x66, 0x4, 0x6, 0xffffffffffffff0a, 0x80000000, 0xfffffffffffffff8, 0x1e6, 0x1, 0x4, 0x844, 0x20, 0x5, 0x6, 0x1, 0x3, 0x8, 0x8, 0x400, 0x3, 0x20000, 0x9, 0x1, 0x200000000000000, 0x86, 0x3, 0x9, 0x0, 0x6, 0x8, 0x9, 0x8], 0xa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) getsockname$unix(r3, &(0x7f0000000180), &(0x7f0000000240)=0x6e) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_rr_get_interval(r4, &(0x7f0000000040)) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:33:21 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x80004002, 0x0) io_setup(0xa, &(0x7f00000002c0)=0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x4068, 0x3b, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 607.248748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 607.254644][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:21 executing program 2: gettid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='^\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000000c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = getpid() r2 = getpgrp(r1) getpriority(0x2, r2) 02:33:21 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000001e3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) [ 607.329016][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 607.334898][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 607.368396][ T5514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0xc401, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000180)={{0x3d, 0x8, 0x1, 0x200, 0x20, 0x7f}, 0x674}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000005c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000280)) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/full\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890c, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x4, 0x0, 0x3, 0x10000000280}) r4 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000140)=0x2) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f) sendmsg$nl_generic(r5, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0) 02:33:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x200000000000008b, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, [], 0x0, 0x9}, 0x1f5) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40000000414400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1a}, @loopback, @dev={0xfe, 0x80, [], 0x16}, 0xd918000000000000, 0x1, 0x2, 0x100, 0xb863, 0x40100000, r1}) 02:33:22 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20003, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x6, @rand_addr="76f6fd0a30df98dee9c8622a7f4f75a8"}}, [0x0, 0xfffffffffffffffc, 0x5, 0x2, 0x7, 0x7, 0x80000001, 0x81, 0xbb68, 0x44b7, 0x92, 0x8, 0x3, 0x6, 0x2]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0x9c9}, 0x8) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockname$inet(r2, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xfffffffffffffffa, 0x10000) readahead(r2, 0x7, 0x8) 02:33:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0), 0x808100000000) io_setup(0x0, &(0x7f0000000140)=0x0) io_cancel(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000240)="547fadc3f20b803115fb51611fa533807d230be8dcd5bda9e70f7382e8d8936ba4916646db043eff4fb960f5d09e08cc24754420a7b60165542db3d9e0f07a269512e8ac83190b1fe1a7e020327ca4180543135bb679801bc286ef6492068ef9672cc0fc1281ee7ed549fbfead4953c7677edd64b3e4826cd5f3bbc89839ba98", 0x80, 0x7, 0x0, 0x2, r0}, &(0x7f0000000300)) [ 607.648753][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 607.654634][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r2, &(0x7f0000000140), 0x2b6, 0x0) [ 607.696622][ T5627] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 02:33:22 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0xa4ffffff00000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:22 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x4) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x402000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x7, [@empty, @dev={[], 0x21}, @local, @remote, @local, @empty, @broadcast]}) [ 607.799380][ T5643] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize [ 607.939889][ T26] audit: type=1804 audit(1551666802.347:241): pid=5639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir535207350/syzkaller.JZAOHT/821/file0/file0" dev="loop3" ino=139 res=1 02:33:22 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) setresuid(r0, r2, r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x16) [ 608.008140][ T26] audit: type=1804 audit(1551666802.387:242): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir535207350/syzkaller.JZAOHT/821/file0/file0" dev="loop3" ino=139 res=1 02:33:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000220001000000000000000000050000000c000a000000000000000000cfc2b6c347c55e18e7c629091c7c62056ac8e6b3869c90ce26a921f80ffae89e6cf54565c51b594fcdf5d20969b91a47619a6fa4e80d8a946814217abb8a2d0349bf4465cb975d81b00da16fa5c07fb2cad27ca7c3110d086cfb4943f4541ab0aed7cf73358ae5ffff00009987e1222f07421ec878262e1c45506281b369309c9de7cc234f9355c2e4209c538f36f9bc5ff294e7921fc48fe8aabeefee470600000000000000000000"], 0x20}}, 0x0) [ 608.083721][ T5713] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:22 executing program 3: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0xffffffffffffffff) prctl$PR_GET_SECCOMP(0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000a00)=0xfffffffffffffcdc) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000009c0)={r0, 0x1, 0x6, @remote}, 0x10) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = getpid() prlimit64(r3, 0xf, 0x0, 0x0) memfd_create(&(0x7f0000000080)=';\x00', 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) creat(&(0x7f0000000000)='./file0\x00', 0xc4) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x40) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r5 = dup2(r4, r4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) bind$packet(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="000027bd7000fbdbed25010000000000000009410000004c00180000000073797a30000000000000000000000800020000000000000000000000000000000000000000ff7f0000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x44010) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}}, 0x44801) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) syz_mount_image$hfsplus(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r5]) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) [ 608.211771][ T5766] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 02:33:22 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4200, r1, 0x1200010000000000, 0x1e) clock_gettime(0x3, &(0x7f00000002c0)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={{r2, r3/1000+30000}, {0x0, 0x7530}}) ptrace(0x4207, r1) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb9\x00a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$eventfd(r4, &(0x7f0000000140), 0x8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proa\x93i\xf6\xb9/neH\x1b\x9e&\xbf\ny\x1es/sync_ports\x00', 0x2, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f00000000c0)={0x24b47f625e0601c2, 'veth1_to_team\x00'}, 0x18) accept4$alg(r5, 0x0, 0x0, 0x80000) gettid() write$cgroup_pid(r4, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={0x0}) dup(r0) 02:33:22 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x10000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x400) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)={r0, 0xfffffffffffffffd, 0x4000000000, "2416c796862125ccf0f69168fd6e329e8dcb303f6406b71c349a6240ea93ce3b81a964e708e120fae5c0e7575be408e34d382bdb2b9ef16047849b4299d6168e06ae9e30c74fda5b90751193b303dceeae0b8580573560717c3c3d7ffa980e36368a1d4a391ba6a8a2802d7d02b96a89b0f3be62e0c408e4273e80fd4d89b7e957774d26b87a81afb2a3dfa34eef0407608f247d9996f0b2f78cc8b1ad52f2cf60beeabe25c9ad0a561263cfd7eb42eb1ebfc1ee5d68e23fc39e60647ac9c4e0c22240ef25f8c8e1a989177915297861fcd6300d909208935c1e347f7c52c4cb3be9842269"}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r2, r4}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={r5}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00\x00\x00\x00\x01\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x1a0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x2ed) [ 608.372707][ T5758] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:22 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002200)=[{{&(0x7f0000000440)=@vsock, 0x0, &(0x7f00000017c0)=[{&(0x7f00000004c0)=""/33}, {&(0x7f00000005c0)=""/99}, {&(0x7f0000000640)=""/138}, {&(0x7f0000000700)=""/46}, {&(0x7f0000000740)=""/4096}], 0x0, &(0x7f0000002280)=""/7}, 0x80}, {{&(0x7f0000001880)=@isdn, 0x0, &(0x7f0000002100)=[{&(0x7f0000001980)=""/27}, {&(0x7f00000019c0)=""/196}, {&(0x7f0000001ac0)=""/195}, {&(0x7f0000001bc0)=""/203}, {&(0x7f0000001cc0)=""/134}, {&(0x7f0000001d80)=""/68}, {&(0x7f0000001e00)=""/160}, {&(0x7f0000001ec0)=""/132}, {&(0x7f0000001f80)=""/86}, {&(0x7f0000002000)=""/200}], 0x0, &(0x7f00000021c0)}, 0x100}], 0x0, 0x800000000000000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000001780)={0x0}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x400, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x300, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x201, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, 0x0, 0x21) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x15899d2cf0cd81d, 0x2, 0x0) syz_mount_image$nfs(&(0x7f0000000200)='nfs\x00', &(0x7f0000000240)='./file0\x00', 0x10000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="32838ba13827616e747dd5e867d157f85c461157539a489cd5264219714dcdf787fac5a404839975b798080c1a7a806ef536862a292d39221028e3006503cd7a2ae5c76d226e30538958246a49e80fe32b68a4282048acab2b260bca5441e684e898125babd9e249d0ebad91f758fd8a4c165665257f60d7b190", 0x7a, 0x100}], 0x440, &(0x7f0000000340)='nodevwlan1vmnet0,,posix_acl_access}@\x00') clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r6 = syz_open_dev$usbmon(&(0x7f0000001840)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, {0x7, 0x0, 0x0, 0x6, 0x401, 0x401}, 0xff, 0xfffffffffffffff7}, 0xe) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f00000003c0)={@bcast, @null, @bcast, 0x67, 0x5, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000001900)='trusted.overlay.origin\x00', &(0x7f0000001940)='y\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x2fcc, 0x2, 0x7, 0xfffffffffffffffb, r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r5+10000000}, 0x0, 0x0) 02:33:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x7, {{0xa, 0x4e23, 0x8001, @ipv4={[], [], @empty}, 0x2}}}, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x20002, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x40, 0x3, 0x1}}, 0x14) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000a0a0501ff0080fffdffff010a0009000c4a030084ffffff7d0a00b60c000d000002ba177137162047321be06395fe1e59c5723e96194e6ace7f48196b12156f3d089e1c9b602c699d0a3afd"], 0x2c}}, 0x0) 02:33:22 executing program 2: r0 = syz_open_dev$video(0x0, 0x49, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@empty, r2}, 0x14) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000280)) close(r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000001c0)={{0x101, 0x2511}, 'port0\x00', 0x44, 0x804, 0x0, 0x1e, 0x1f, 0x8, 0x51, 0x0, 0x6, 0xff}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000000c0)) mq_open(&(0x7f0000000000)='::proc)\x00', 0x0, 0x8, &(0x7f0000000040)={0x1, 0x5, 0x95, 0x2, 0x80, 0x7, 0x0, 0x5c6}) 02:33:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1d) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001340)={0x14, r1, 0x301, 0x0, 0x0, {0x6}}, 0xfffffd79}}, 0x0) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x5, 0x20, 0x20, 0x9}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x5, 0x20}, &(0x7f0000000100)=0xc) 02:33:23 executing program 1: mount(0x0, 0x0, 0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', 'em0vboxnet1\x00'}, &(0x7f00000001c0)=""/167, 0xa7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000440)="6ad5c1067a01607d87e431545784fee394da9ee8ea37987c3cbfde9a622b52bd4b4e420184d2ff6e", 0x28}], 0x1) stat(0x0, 0x0) [ 610.928734][ C1] net_ratelimit: 8 callbacks suppressed [ 610.928740][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 610.940100][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:25 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x2], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x50) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1ff) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@broadcast}, &(0x7f0000000080)=0xc) 02:33:25 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa7, 0x62000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000180)={{0x0, 0x2}, {0x5, 0xe09a}, 0xc46, 0x2, 0xcc2}) r1 = socket$inet6(0x10, 0x100000003, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x9e9, @mcast2, 0x2}, {0xa, 0x4e22, 0x9, @empty, 0x1}, 0x4, [0x7, 0x100000000, 0x96, 0x1, 0x8, 0x6, 0x0, 0x81]}, 0x5c) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000040)=@rose) 02:33:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xc2400, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 02:33:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x80000) 02:33:25 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x80fb}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x2) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x401, 0x101000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000100)) recvfrom$llc(r0, &(0x7f0000000280)=""/209, 0xd1, 0xebd05d3b62c33b5, &(0x7f0000000380)={0x1a, 0x337, 0x10000, 0x1, 0x9, 0x4, @random="0a39afbc3c3f"}, 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0), 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x80, 0x0) mq_getsetattr(r2, &(0x7f0000000440)={0x0, 0x7, 0xd2e, 0x9, 0x9, 0x7, 0x4797, 0x6}, &(0x7f0000000480)) ioctl$void(r1, 0xc0045c79) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f00000004c0)=0x80000000, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000500)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000540)=0x5f, 0x4) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000580)=0xffff) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$int_in(r0, 0x5452, &(0x7f00000005c0)=0x9) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x86}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc0}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8014) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000800)={0x4, &(0x7f00000007c0)=[{0x7, 0xe48, 0x100000000, 0xffffffffffff8000}, {0x1f, 0x4, 0x101, 0x3}, {0x0, 0x3, 0x8, 0x4}, {0x2, 0x38, 0x7fffffff, 0xfffffffffffffff7}]}) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x7c, 0x40) write$smack_current(r2, &(0x7f0000000880)='TIPCv2\x00', 0x7) pwrite64(r2, &(0x7f00000008c0)="d6b3e5bdf5ace125909211db846f00bda68a6f04c2ec66dd88ae5da26465416b9978d6fdc85c26414070c51c2df120a35ff881f9e9796cad3d56d7408d803ec0671cdee0cebbca62db2ca50ca6598b1fdd4cf5dbf2f536c2dd6c298af6ac6fec0ace7200be0ca45d889dee7559f1e311eeeb9cd5fba6e7d299b348e6044b63636673cf7b3bec5f34c618ebdba5c6cafa9d7368ebae56164d6c87cc1c0143e0b41514b6d1f3f0f6446ba602cb9fb4967a5615e4cac8b860c2690492a82078355a7dec0a3f21c38fe752123383dcbbd9762fe92ebb56a01c6574e6ecf9a3cfde7f", 0xe0, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f00000009c0)={0x0, 0x80000001}, 0x2) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000a00)=0x2) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000a40)) prctl$PR_GET_KEEPCAPS(0x7) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ac0)={&(0x7f0000000a80)='./file0\x00', 0x0, 0x10}, 0x10) 02:33:25 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20000, 0x80010) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)=0x9) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 02:33:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000180)}, 0x10) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="100000000500000000", 0x9}]) 02:33:25 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x80080) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x200, 0x4100) r4 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x200240) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x202000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x200000, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x400000, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x0, 0x2) r11 = syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x1, 0x2) r12 = syz_open_procfs(0x0, &(0x7f0000000400)='children\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="040025bd7000fbdbdf25020000000c00020005000000000000003400070100000000", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00020003000000000000000c00080002000000000000002c00070008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0c0003002dd80000000000000c000300080000000000000008000100000000000c0002000000000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r13 = socket$netlink(0x10, 0x3, 0x15) writev(r13, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) [ 611.226216][ T6352] __nla_parse: 1 callbacks suppressed [ 611.227483][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:25 executing program 1: socketpair(0x1, 0x800, 0x7fffffff, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8947, &(0x7f0000000040)='l0\x00') socketpair(0x19, 0x200000001, 0x8e9, &(0x7f0000000000)) 02:33:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004600002800000000002f9078ac141400ac1423bb0e009078ffff000000000000000000002000000095cdbb7bce6d2a3c9b7b6d2f7e8547d4f8b0f98e61d39b14530cb0ee6cabed20ce"], &(0x7f0000000100)) 02:33:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) ioctl$IMGETCOUNT(r1, 0x80044942, &(0x7f0000000100)) [ 611.408735][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 611.414697][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 611.488857][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 611.494703][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 611.510904][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:26 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x3f00], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x6, 0x7, 0x6, 0x0, 0x1, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0), &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r0, &(0x7f00000003c0)="8895594e9296875b2d32fdb47e86dc7db28c4a6f794c7474894ac4d9ff01d10a2bdd6cebefc880400b3b03a9a9a01ca34bb4edd43d9773fe777ba6fe1d1d482dbf4d0d84cf5affa5487bc1813b7859b1df732bc7251bceacfc360f72ee2f3cbe38f44d1f78a563473f1b1a0e7a5072454e230077a8d1440635d1ac214d60efb96b6bb121e0e32907d4b2d8e9f30c7ebf9d683bee7a0910ca71e52174bc32e43e086b946e"}, 0xfffffffffffffdb4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x401, 0x8, 0x7e9, 0x2f, r0, 0x100000001}, 0x2c) r1 = socket$key(0xf, 0x3, 0x2) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="e6749b95901dd9b7f2b91ba964c527fb9137e8f9209e97cd28333f2f3ee9ea3b15e00878dd1b47d4ab87c2378736c63e15ddbf97142b091a951fad0a442a8a44b1feaf04e9046140a33e5a3725deabd09344e57c288859124454069d1142fbabed8c4dbb2a2ec3ae28c45bcc30c30bfe3e21a9f8b7aa818f9b8af02e", 0x7c}, {&(0x7f0000000000)="9f7e98a0e9575f08ecbc3638ddc28ae4e37d541e273465e3e56dceda", 0x1c}, {&(0x7f0000000180)}], 0x3) set_tid_address(&(0x7f0000000040)) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x34000, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030e000000000000000000000005000900800000000a0000000000000000000000000000000000000000000000000000000000000002000100269c7fe1000000fd0000b5000005000500000000000a00000000000000ff020000000000000000000000000d0100000000000000e4f979d39f7020f2f7d63fb99f83775c14c4788f3a82e0f8261cf3d17a3de556fb03a8725e8748b1daf07fed4e0d876e17bb4962843edb1fe9cd865668fe4cc934681aaeb9d8d1"], 0x75}}, 0x0) 02:33:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) fchmod(r0, 0x0) 02:33:26 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r0, 0x0, 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback, r2}, 0xc) r3 = gettid() perf_event_open(0xfffffffffffffffe, r3, 0x0, r0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0xff, 0x0, 0x7ff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x18) getpid() ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x3f) 02:33:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000002c0)={0x4, 0x7, 0x9, 0xffffffffffffffff, 'syz0\x00', 0xffff}) r2 = socket$inet6(0xa, 0xa, 0x52) openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x100, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, &(0x7f0000000200)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000580)=0xc) fcntl$setownex(r0, 0xf, 0x0) timer_delete(r3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x32000, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7ff, 0x800) openat$cgroup(r4, &(0x7f0000000100)='\x01\x00', 0x200002, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x163882) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780)='/dev/autofs\x00', 0x10084843, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1f, 0x8000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006000)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000340)="fa082bb524cf374d", 0x8}], 0x1, 0x0) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f00000005c0)=""/246) clock_gettime(0xfffffffffffffffb, &(0x7f0000000400)) getresgid(&(0x7f0000000000), &(0x7f0000000740), &(0x7f00000007c0)) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="d97ad0886d01fa7ba4cd8040b14ee5a9a029cb", 0x13}], 0x1, 0xf) perf_event_open(&(0x7f00000006c0)={0x4, 0x70, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x6, 0xffffffffffff1619, 0x0, 0x400, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x9, 0x0, 0xffffffffffffffc0, 0x7, @perf_config_ext={0x19a, 0x6}, 0x8340, 0xffffffffffffffa2, 0x100000001, 0x5, 0x0, 0x100, 0x4}, 0x0, 0xa, r6, 0x3) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, {0x1, 0x0, 0x100e, 0x8, 0x3, 0x4, 0x1, 0x7}}) ioctl$EVIOCGREP(r7, 0x4010744d, &(0x7f0000001000)=""/174) getsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000440)=0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="5acb32260554c2ae01a7c6b914ede4ef5639f3b8e24ddc26de23b7aec6458c2edd42b61ecc5cda5641bbf1615c493a7af0d7d92d9dd85bafff4ef4deb1f003fb3e8151551e622cb18a47cee0e85c2a9089c49d040633c601417a0e7f09874006f5378b002004558bff7723982184c5ab9fe8e79bcf096cb3442feb0ca00bc8379f465d7f6b87a1db80776cf05cdeba8be653e94d594742abad61c51cc6fda16f43f1c646bbdd9fa8bd34ebbaeb6a02ab3bca95161711eec71d7004a2b78d01f3317a23979d8a2e2084eba52dfbd27c558229f6a0995d029a1f1ab701e1ffd46712", 0xe1) 02:33:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000100)) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 02:33:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000000c0)=""/69) ioctl(r0, 0x2000001400008912, &(0x7f00000001c0)="0ad91f123c123f3188b070") syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x80fe, 0x8, 0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x21, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = getpgrp(0x0) waitid(0x0, r2, 0x0, 0x0, &(0x7f0000000200)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000180)={0x3, @default, r3}) [ 611.810546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 611.816727][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\xaa\xf4bC\xeac\xa5r\xb7H\xc7\'[\xa5%4q\xe6\x8a\xea\x98\xb4\xffM\xd5 \xe6g\x9d\n\x965\x95\xe4\x80\x80\xd2l\xabk\xe7\xc2pn\x06X\xc28\x99\x1c\xf97\x95U%\xf9\xe1\xf7Xh\x93\xe2\x9e\xfd\xea\x04\\Z\xbed\xf4\x9f#C\xc8\xf1T\xa4\x8e\x8d.\xd1\xc1+\x81\xe7d\x1a@\xa73\xc9\xdb\xf1\xbb\xc7B\t\x00+\x91\xfc}\x02\xc6\xa5\xa6\xc4\f\x9bT\xc2\xcbN_\xe3\x99lz,\x8baZo\x82,\x82b\xe7\xec-\xae:)\xf7Z \x92N\xad\xc2\x01\xaa\x8c\x7fn:\xc3\xb5\xc0kkX\xb2\x85\x03\xa9\xb2(\x97lo\x99\xfd\xc0Q\x15\xa5{\xdc\x80G\xad\xa6a\xb8\x00i\xbf\xad\x1b\xc6j\xef\x0e \xce\x94\xc5^\xc2%\xbd\x97\xee\x16\xb9\xaf\xda\xb3\xbe\x11\x00') getdents64(r0, &(0x7f0000000000)=""/26, 0x1a) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x0, 0x0, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, 0x0, 0x0, 0x1}, 0x20) r4 = creat(&(0x7f0000000640)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000980), 0x4) unlink(&(0x7f0000000940)='./file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x5450, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f00000009c0)}) ioctl(r1, 0x655, &(0x7f0000000700)="96eb215995d759818b84b517a8ebe2a21bc365cf9ee637829d95c742f44270db8a5b8c4c8478fa77db9dab03bb37ed63f722fa671ecb7de0b1cbcd212468eb09c15ce2c97b3984269f45e78c5ac2cca41603083fb53afa40dc149876517127546bd796abda41c3f8c20bb1d23b1cef255628343edf5ac2599019f0cf") r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="00022bbd7000fedbdf250300000028000200040004000800020001000000921801000300000008000100c581000008000200ffffffff68000100080003000000000044000400200001000a0067240000000fff020000000000000000000000000001bc070000200002000a004e2200000006fe8000000000000000000000000000aa0200000010000100750040000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) [ 611.878987][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x6, 0x7, 0x6, 0x0, 0x1, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0), &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r0, &(0x7f00000003c0)="8895594e9296875b2d32fdb47e86dc7db28c4a6f794c7474894ac4d9ff01d10a2bdd6cebefc880400b3b03a9a9a01ca34bb4edd43d9773fe777ba6fe1d1d482dbf4d0d84cf5affa5487bc1813b7859b1df732bc7251bceacfc360f72ee2f3cbe38f44d1f78a563473f1b1a0e7a5072454e230077a8d1440635d1ac214d60efb96b6bb121e0e32907d4b2d8e9f30c7ebf9d683bee7a0910ca71e52174bc32e43e086b946e"}, 0xfffffffffffffdb4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x401, 0x8, 0x7e9, 0x2f, r0, 0x100000001}, 0x2c) r1 = socket$key(0xf, 0x3, 0x2) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="e6749b95901dd9b7f2b91ba964c527fb9137e8f9209e97cd28333f2f3ee9ea3b15e00878dd1b47d4ab87c2378736c63e15ddbf97142b091a951fad0a442a8a44b1feaf04e9046140a33e5a3725deabd09344e57c288859124454069d1142fbabed8c4dbb2a2ec3ae28c45bcc30c30bfe3e21a9f8b7aa818f9b8af02e", 0x7c}, {&(0x7f0000000000)="9f7e98a0e9575f08ecbc3638ddc28ae4e37d541e273465e3e56dceda", 0x1c}, {&(0x7f0000000180)}], 0x3) set_tid_address(&(0x7f0000000040)) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x34000, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030e000000000000000000000005000900800000000a0000000000000000000000000000000000000000000000000000000000000002000100269c7fe1000000fd0000b5000005000500000000000a00000000000000ff020000000000000000000000000d0100000000000000e4f979d39f7020f2f7d63fb99f83775c14c4788f3a82e0f8261cf3d17a3de556fb03a8725e8748b1daf07fed4e0d876e17bb4962843edb1fe9cd865668fe4cc934681aaeb9d8d1"], 0x75}}, 0x0) 02:33:26 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) fchdir(r3) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080), 0x80000000) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000680)={0x2, 0x4e21, @multicast1}, 0x10) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000003c0)="20247f26ae4f602f6373e8f64e0f956f49c3d5ffbf86386fc0166c8f2d4eadd5052c7fac9a96f80a625c55093485dbf069de5f2db49945287e3c10ac3e12314f5bf5e35f02d85c3e45f5686608e9b2ba16a43d4c29cef9a6", 0x58, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={r5, 0x7}, &(0x7f0000000440)={'enc=', 'raw', ' hash=', {'xcbc-aes-ce\x00'}}, &(0x7f0000000500)="58dfffa4d968f527d00806364a8cb44e59de2be9db5c04eda91de2df5a611fa35375c30fd09030327938eb9ab39ad00a2bfc5133dfefb63b11143dd7e8c3d366013ac1b4b144b78d2738959a2530af75d169f073f0d8823b82f2dea44b18b88e98d182a4936329c732306cc931aac0a02fc6a50bcc314144ddc47371295d4e9d204edca430386b6fe9b247ed771a289f7c0ee7184d8dcbe2f9a8c7f457b05347c06400ef888568ad02e5184d95c78549f9b8b527a2a26959c8197c3fd133ac5bb284ca7ffc79a3d32f758dd71dd823775ec1766bd70edeb3fb6e", &(0x7f0000000600)=""/120) r6 = syz_open_dev$vcsn(0x0, 0x800, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0xa, &(0x7f0000000100)='wlan1]\\,/\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x1000000202) [ 611.981227][ T6711] dccp_invalid_packet: pskb_may_pull failed [ 612.046691][ T6717] dccp_invalid_packet: pskb_may_pull failed 02:33:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x0, 0x20000000209, 0x0, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'vlan0\x00', 0x200}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008}) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket(0x11, 0x802, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r5, 0xffffffffffffffff}, &(0x7f0000000200)=0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x888, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) [ 612.198304][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:26 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r1) 02:33:26 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x4000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:26 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$update(0x2, r0, &(0x7f0000000680)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c21782d4501b9dfbf48a9f3ea14cb792a7876f17297a8c870d7a2d46a36a2cd3e33e21894d91caa64b131dbf5c53066c1ac83ceba29ceab25127e8", 0xf9) r2 = dup3(r1, r1, 0x80000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d04", 0x79, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r0, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 02:33:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x2) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) 02:33:26 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000180)=@v2={0x0, 0x0, 0xf, 0x5, 0x4e, "1cc0c88106d138db9f99fc264c152b61d4df782aff89c162bd7d12a8a62f5ebfc87434994429be6cb5330e208332167c8d369f53cd4f0836ce116b73985be1dbf60cce175a7fb2d29ceb61a78b8d"}, 0x58, 0x2) 02:33:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() accept(r0, &(0x7f00000000c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000140)=0x80) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x1ff, 0x5) 02:33:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2008000) sendfile(r0, r1, 0x0, 0x80000000000c) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./bus\x00', 0x6, 0x0) [ 612.772289][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0xfffffffffffff427, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, r0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2000000000000000}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x80000) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f0000000040)) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000340)={0x4, "99957db5d7c1a22f675eb67bbee8014aa45ccda87f7f14f6807676bd52522262", 0xd807bd006fa954a, 0x1f, 0x2, 0x4}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IPT_SO_GET_INFO(r4, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000140)) close(r4) r6 = getegid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r6, r7, r8) close(r3) 02:33:27 executing program 0: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000380)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7ff) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000040)=""/39) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) bind$rxrpc(r1, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e21, @local}}) [ 613.108553][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) munmap(&(0x7f00001c0000/0x2000)=nil, 0x2000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r4 = dup2(r3, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r5 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x40000000}) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x34, 0x24, 0x9, 0x12, 0xb, 0x8, 0x5, 0x161}) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180), &(0x7f0000000200)=0xfffffffffffffd86) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x2, 0x4c, [], 0x6, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/76}, &(0x7f00000007c0)=0xffffffffffffff87) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r3, &(0x7f0000000240)="3440792164e3b31be80c2f5094ac7a2951b0244e746a053d411f9adb4f5c273e65367b9b89f4d34796661cd7635a857e1aaa3f1c174ff3528fe3a20ae6eb095aceb259f797959bc9aa878cb271b4edefc1419c87f1f0f35f93744d16846d8c213e3810da0c40f9187510433502e2ab5fa3d5bd9433c5f1662dfb871d25c64c7e30f38a3a96a5259ffd57830695a04dd2d5e7a9efb19633dcbb8a5fe6f699a5291a0f7ccdfa994246b67ae021523da1b545f61e5c67c7a8f2b0d48428", 0xbc, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=0x0) mq_notify(r3, &(0x7f00000003c0)={0x0, 0xe, 0x4, @tid=r6}) ioctl$int_out(r3, 0x0, &(0x7f00000006c0)) futex(&(0x7f0000000180), 0x8c, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x8000}, {r5}, {r3, 0x200}, {r5, 0x24d0}], 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x3063}, 0x8) mq_timedsend(r4, &(0x7f0000000600)="b3eaddbd268653831f050c6c99ff5455741ae7e04e548641b4a0ebf55e4ba74455a2996adde572137b644c81ccf558ea483a0c6eda15c3cd626da99f9584aab452a23341537010ac342875b8088fb86ec187f7f2d6b31422428c44391f62aee87efdccb02a6df41c701e20117ea8db38174f9e130dc8190a1fe1fa2b6b479234f4fbe5bbee08622c7518f0ed8d499fcb0fd8", 0x92, 0x18000000000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x40, 0x0) fcntl$addseals(r3, 0x409, 0x9) creat(&(0x7f0000000240)='./file0\x00', 0xfffffffffbffffff) r7 = inotify_init() getitimer(0x4001, &(0x7f0000000700)) inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x80000005) 02:33:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x1f) prctl$PR_SET_UNALIGN(0x6, 0x1) r2 = socket(0x1000000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x100, 0x414800) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f00000001c0)={0x80000000, 0x8, 0x3f, 0xffc1, 0x1, 0x8}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) shutdown(r1, 0x1) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="dc7f207ed7858f663d254253ef62e76f8f366a51dbc8f5deea76", 0x1a}, {&(0x7f0000000100)="e147b9c360d6df135b43d62a9603ec982267e2b9a79f68e1485d15dc08744cd026dac2558a1cb602b2cd6df795c632832b591e4a6c245fefbd51a915e0cc9637afef89c5493353a9a41643182fc83fe5f5706afbf3f34f6813f628d192273590d034015ee3dc4996d5ebc99e87dbbc1334dba2f4829c355c217b963bf758f73674b1448e47b1242c29eda7219acaff2cc8507c659feabf10d8ae988e00d894d3d3ba1a66e62053d60f8c3bcdc7426ac047cb7f450c29e415206d5581", 0xbc}, {&(0x7f00000002c0)="79f69af6dc355bd8d2a2a41a6159d59a2ccd22ccf8a2fa9f35a812d967f2fffa83be1f78d835edb8cbae3f47b8c1e89d1e4b5ec8571578a78f16d7d1b19a8bccff1850f0350bcd5673345dcc386b02117ad489339b667b9945e3f92a0dad3399b3db17a9529531fbf42dccd51053e312f7d4e112b0b8823eb069d198ead8469200a450c109532e8042b8388b2d3b80127dc409b2566a5f365be859513e", 0x9d}], 0x3, 0x0) 02:33:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0x2000) sysinfo(&(0x7f0000000040)=""/64) 02:33:27 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x1000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:27 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x452) write$cgroup_type(r0, &(0x7f00000002c0)='threaded\x00', 0x9) 02:33:27 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x1}, 0x8) read$alg(r0, 0x0, 0xfffffffffffffed6) 02:33:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x3, 0x7) shutdown(r0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000001d4, 0x0, 0x0) [ 613.730853][ T7764] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:28 executing program 3: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xf, 0x0, {{0x0, 0x2, 0x3}, 0x100000}}, 0x18) epoll_create(0x7ff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0x0, 0x7ff, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x9, 0x1, 0x9, 0x0, 0x200, 0xfffffffffffeffff, 0x401, 0x0, 0x5041477e, 0x3, 0x4, 0xffffffff80000001, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x101, 0x0, 0x7fff, 0x3f, 0x0, 0x7fff, 0x0, 0x80000001, 0x0, 0x40, 0x5, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0xe5}) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000380)={0xa0f54c28901e6b0d, @vbi={0x100000000, 0x6, 0x10001, 0x30314752, [0x3, 0x9], [0x800, 0x80000000]}}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xf9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) flock(r0, 0x3) 02:33:28 executing program 2: socket$inet6(0xa, 0x3, 0x6) r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x3f, @mcast1, 0x2bb}, {0xa, 0x4e24, 0xb9, @remote, 0x3}, 0x8, [0x7, 0x10000, 0x3e00000000, 0x43, 0x0, 0x1, 0x2, 0x960]}, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 02:33:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000000c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setregid(r2, r2) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='veth0\x00') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3800000}}, 0x30) 02:33:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x20080, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={@bcast, @null, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r3) clone(0x200000041ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$getsig(0x2, 0x0, 0xffffffffff600003, &(0x7f0000000000)) write$P9_RREADLINK(r1, &(0x7f0000000300)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 02:33:28 executing program 5: r0 = userfaultfd(0x0) madvise(&(0x7f0000010000/0x3000)=nil, 0x3000, 0xf) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r2 = getpgrp(0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0x7}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000011000/0x1000)=nil, 0x1000}) [ 613.994887][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x9, 0x400000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x11, 0xe, 0x2, 0x12, 0x7, 0x2, 0x1, 0x47}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x420000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000002c0)={{0x11, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e24, 0x1, 'lblc\x00', 0x20, 0x401, 0x42}, {@rand_addr=0x5, 0x4e20, 0x4, 0x10001, 0x0, 0x6}}, 0x44) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) mkdir(&(0x7f0000000180)='./file0\x00', 0x2) fanotify_init(0x46, 0x803) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) bind$llc(r2, &(0x7f0000000100)={0x1a, 0x30a, 0x2, 0x1000, 0x0, 0x20000000000000, @dev={[], 0x11}}, 0x10) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000380)={@bcast, @default, 0x2, 0x64}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3f}) read(r3, &(0x7f0000000000)=""/19, 0x13) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffff, 0x10000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000003c0)={@remote, 0x1ff, 0x2, 0xff, 0x4, 0x6ce82aef, 0x3c95}, &(0x7f0000000400)=0x20) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000340)={0x7ff, 0x6}) 02:33:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x3f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/4096) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 02:33:28 executing program 5: mkdir(&(0x7f0000000280)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x100000, &(0x7f0000000300)=ANY=[@ANYBLOB='xino=on,nfs_export=on,default_permissions,redirect_dir=./control,xino=on,nfs_export=on,index=off,xino=auto,xino=auto,xino=on,dont_hash,subj_user=&#,context=sysadm_u,fowner=', @ANYRESDEC=r0, @ANYBLOB="9f09"]) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2e2d636f6e74726f6c00f85b15d5393b723516972905ef72cd5d03595fc12210d53908d0efd53c61c9862ef21e30bf62b51cba72e0736bc0c79da8d7448d9a0425f33ee9c668370b84fbe25bd61cbcbb2548c49e1b6b652e572c796226ef038185b10a070c138ad124aee809a81100c02fe88943843161a4b55084b13a816d1cb75cd64bd6aa684f4244d07a0ef831c053f8ed9ccf42813140788d5a95e6c62d7968c9dbbcc726353dde9e"], &(0x7f00000002c0)='./control\x00', 0x0, 0x12000, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x1f, 0x562}) 02:33:28 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x2000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:28 executing program 5: setuid(0xee01) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0xffff, 0x0, 0x8, 0x1ff, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) 02:33:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r3) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 614.719577][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:29 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000005e00)='/dev/video36\x00', 0x2, 0x0) ioctl(r0, 0x80, &(0x7f0000005e40)="f70723b27fd14a7d3f94b9d5cf08adc942c2ffcf498ae72f74a821e830913c45f5ec2605a33697035e01a5e6c5edb8279eb100d5e01c65d7de0986b32dce2edcf4040eb50d9b223e688fefcf337427d6f6b463a7202a52363315af45661e") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000005d80)='/dev/amidi#\x00', 0x0, 0x22902) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000005dc0)={0x7, 0x5, 0x5}) sched_rr_get_interval(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f00000002c0)=""/191, 0xbf}, &(0x7f0000000380), 0x4}, 0x20) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x1, @rand_addr=0x1f}}, 0x1e) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) sendmmsg(r2, &(0x7f0000005c00)=[{{&(0x7f0000000400)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000480)="c6e9cc4a1f404748bd09b9a7f610bde5a1e51c5800e720eebd91d0365ac440d00fbd2c2b36f4e714dff874a5094837962302ba003cf3c57ecd122d4973919fbe84e74145a5ff3f3e018931b840124329c94060162558c02560dc0d3a3cb74b41acda53299c20060245c250875ce364893d83afa9e27990e0609870130fcab44ae7f2a8c4db95a0d59c67f9946e5864ad7ef87ab4458347ae8683fa92cabe", 0x9e}, {&(0x7f0000000540)="2521b9b8544b630a71c33a56872eb14ad597117165c9d57969655cc2aa4e9040fd8bfa55c5496d34a20bdc5ce0b0a71ca4a367db02378a7812276e586b7aa61d89766864d719b83552587969e756a2e54fb0dea5201614427ed3f1ef57c420fb93e044fa58d5b1360bad96bc7415b005b8e9c6cdde5fc021f3f67272a54f049d62cdba774c45e846d20a78c6709c1181a948f82a4e45d84aebc5ca183da604ce8e05cc7a107df819338ec68f", 0xac}, {&(0x7f0000000600)="cc321bdbf88016e99096bb2dad6ddf193a1d23720ef93ad2d5185e4ceba689e32c8421e5294171c70c99f0d1c9141befb77803c226a7834336caf7a76ff724058840fe859c37dd8367ecc6c47b82469c98484dad9aa98f989f09bdff109e731f9da33e15669b4fa29032dee94d37b0d1945d8062b1c70018123acf8cf9c97a106fc5f32c2ac166bd7379a8504ae18d16fa9b595779872ad7a8c146105d9e7918ec192d96d825ed08de3a4cbf2b83f635e1fe8aa1f5360b37c97a135452d87628e2f6bcdd3deb27d8d1", 0xc9}, {&(0x7f0000000700)="98cc03b87bd8c019433df08bc73c755161def511389b065e08b03c8b17db26d16212d48562c1d5737549b48e4f63087aea1fd7e00f785c8f7f5f4ee6ab11ba5bca66f451b3987c3b1b40c9d4f24a3db23d6a5280fe5676245a2ee8f864a64fb8102b7698a158b057da115651bf803efa1a01ab3ef2717940b5ec25515663146b380eb6a9edca86a484dc75de0d99a406d6beac10ddf95e72055bceef74ad44fab65be01ffaf0cdda366c9e9464e0b93accb1c1ed55", 0xb5}], 0x4, &(0x7f00000007c0)=[{0x18, 0x111, 0x3f, "1789"}, {0xc0, 0x11b, 0x9, "8e0b0f75509fdbc136b05aa25310cf37af253d0dd2e6eb2489f779a275a3475935400b790ffb07be0b85a12fd6d6fea068b6256ef012a387595c7add2fb5964873205c1f409c1b7ac8689deeabcdbcdb84129aae036b36216871dd705490b9b8b5b9d413a07b948b5ef60c2354f8d1af40d373f0bd56e8551185f258a877cfdf17fa0a9c5e4a197b00eac8e8bcb0578d6fefe3cc10ed719f172ecb6e1f1529ac3cf841ea51dba61fe9a03c844b5638"}], 0xd8}, 0x2}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f00000008c0)="3f84e52aa3c2c4d882db09a67e249bc50675c9c65273b6d7e62d006b6c6c402ea407d3f92fa13f3f0ca41bd6f71ca733aa2d55b2824ee7a1786659062d0a5f86de2aa82abdd67bb29ca2019c26069f4efeeeeb318999ef4b27535c22ea486a59d5ba18a263af42574cc97c2338823ac61929578bc3daf72bca9e8bdbc1c307d71ebf70bbcf9f78b0d87c199a1bd40945cdd6222e7996235f6ebcb677ba244651712ae3ff096b36f4712bc845dc90242946ac2a2f7f14afee97b85eb495b19fc327702077a7d148d722c930cefb410f2de3d84a0d4043d39893d3cab5a2880906c8273d3a1e", 0xe5}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="a8249f6a1c6e", 0x6}, {&(0x7f0000002a00)="48158dc339c6de19534ad88c85a159340070460e3c84042c29ab5741f772bc0bc88dffed576ef75587afa01ba7144a0133c993f99b08dcafea8311b4fcf368bbedcb07560e2e9d2f7a2f925ba4ce278b409f5203f0bcdda994cacf4b50e26723d68d28783983888b5b394105670bf6d206d7c7d7524ee3184ff3eff51051c8ac733df11ff9c09d92a23c07e431c29540370ffff570250b15d2e9127021a5520ae07a56ed930c9a8fe7fd7e0e6190040dcce9ea0cb48e9b4fb453b4d67a6d3e62194631", 0xc3}, {&(0x7f0000002b00)="0098005b760f098be3d8df0f41235b5279d7c1313d2e78adc2edf858a14e03e1858bd146bc67214effa381d1e7cd96315e2e4f21b4bc5925195c8d9bd371ec436d69e13e28dfb221851595ce47748be0924a8cbef9dfd76180d93091f66a7328f9", 0x61}, {&(0x7f0000002b80)="0f4f0be38233af2d2477c01d5e38abd9be09ef88b9e07945eda4e2a87dbced9b9d919a5638857468c664741edfa20ca7864156767087ecc56705689ddf9325ab868caac32103ea03198d95", 0x4b}, {&(0x7f0000002c00)="35198f9578c9359bd40e37694605ce", 0xf}, {&(0x7f0000002c40)="427c32656f34e07c52267361489d065900c293eb0826bfcc8901b7cc28ac96108efc7ed205af59021098fe1eed365ef6d7a7952d52a74fab2c742499a74f573d0de634404629dd9b15949310b79b97bdbd3e71fcfce1a72745f03839eae29c3789516db8ca517a007448e6a9e6e52cbf34eb1fc2cdcf9db01b193a0669b43e5c65fd4c4452aac498f3784623dc337b6a2633fed52e737d6e73555e8cdb8d48bfd354d2fbd4f4f1f4a812a388ba71e02759989723803dcfba73a19b9b56feeab3e8f0f8334d1a479f50da08e950a25c57b70b4c3319809b022cff2a523832ece4340be3afaa71f833d3a3896dca083e7dec7efe67cfea90eaf070fc8cd153bed63536a9c3cb69656707d37222b5b906c0653e6f9b215dffe7d260551191c3cc98b4a491bb7648c611cf79bd9576bc76665cdfdee5f6dc3c817a4a1b87aa4870a0fb3fb28c00587f16827ec207b2f74346331d38fcecb966cfba0f5531a25ad79ea1ee01073d34f0a71cb515444fbccbafa8aaf7c0c2aacbd0ee07558039cde2abce967c24d09ab887bdd0a7d5551d08f332df6b8ba66bf0f67ed0da47bcdc8ff27a30bee1ae0e83be92cea8d8639dbe86ed4c0195e9cd4d9343acf428148cb79d8e7be697c7010eb68809d2f9caa61f9e6f4116128fdbb61a103c1d765332e08436692dd148ae4ee277b8dfbc9cc4f1e5c40c6c6388db02ee9e47cc83fc5b544dccf861819b7e17b561b18d5ac47c2d7cdf24bf63a444ae530cea7bf0dea254a352ff94a82196c6c54c477e35b39e6b52da0b1b0142630d2d1638169d289b68fdf206a200e8e0df560f0fc6e896df62ff357408e828d467b680c884918961a785c26683a731cc35b8f62e719ecea8b3d76134da092dfd0179a8d4823ef0e5cd5aac267dfc701baddc69ec2643b698c3ba5264c3cecc1f45e5fbe1694f25ad5b15d9661fb2b48407068a12e091e254994c31eb2cbbc25635c9afca0892ba00d448d85b05cbe664cdc1db2955da0d404cec88ae3eb46664b229cfc2103bad0902849cbb8568bc5374aa935760faaacf9d07b7343f5b45c51dc238d544bb4ae584c53a970741587acfab0141d086f5dc82aee6641be2be6a398b56fc4de358ae2f156dd8570d7eebe3ff2d15d4cc923bfa0baf9e32ae29bc99f2c47699b7679f839f5ebdbbc6733b97e1d1a0a5e0a56618557bf16e71ea79cad0c60b9c973b55b59736df37d3518d3c6e89f2eb3a4b90220cc33202a40530b408184b3f02619a41687cf2f05052f30ed1f3666af8fa674c29398a0b73d8ad9d27268473d08b2638bff905f0c4274b36c864bee81c4668f38e3311630c6b1a53c116df4382ecbaf23a3b33f26aefb3fd517fc40f584f86b07df3cf1cc776b235bbc931a98fa7f0eb1a8205d20e4f1fec70f977976659b6fc346407472cd4ad49f37a6d9e1dd639c117377616ee69c984af90e0ada858096c71123b2df10ea50d1257f56ae413ac791129cdfbe3e4cd21c19429f61789784d9e5684eae7e93506f43b4b8c27fe73c03175dc707b5c789f10aaa333367c598548abca2144a1762935289d24a13cfab4e44ddd720af0012e2c815466601368d195bcf542db1700e0495904e3cadda033740c57da233bcbf5014f9781f3a1cced1b7497f433b46021250a0903929462653e30dc8af454b803ad37ec6c0aafee266e3302ee19998e01b691e84f727eeeedb5f5b6b994d9a1d34af0877e122aa091536f153d2067f02da6260102ff3e1ce05ca371cc8ce3238e9ea7ef7460276baa3e7e46d49f2e9404e85163c7bc13b5cbd69b84b9fbb1dbb4d4055aff81717086f3036431d9449f923379997368a92d5244cd17071455db67e93cadcf77245f9902bf6782614896f6f184a564a3208cfde95adceca73a5edf994b9c4536f69b7a7766b538b641793ad7e6ef5e7e1b001ebfdfb30c79be71212a77f824197ebea89a4869bf3174298d8529cf38be0f437e3f6d1403c0c7fbff0e5f2dd07505d7abe3133f0504dfd4bdb978e94ee893246c4bd92f5d676e4b41f2c5afeaa9f9adb7e02f9e4e756e1f88c9b9d483a85f65865c4d6bd640a6d5fd8ba97c229a02a0fbb0e8f75bbec58eaaeb96308adfad6c090d4660668f1476c1200c90fafd678a451ae7afe4a539804bb4231bbf00875f2aa4446f0bfcea645d68a63a800e250643ffe7ff902515059dcab449ddeb3b63abc126f5cf218c42f012f889f1c3ee5aaa4513e9de7ec68a96301be53c776810791c089276d1813406f0691b0bbe591dc161f1a108c05584515906eab91c70b8b3b2ee7ca3a280c629cbb89498b787877230fb0da41a1fcc847920e1dc37c6f8cfd168444da3fe95eb22ae1fe6c1365de1d4c358fbecf5cdef3b59eb54cfe8c50821c083bb627c7fe5685dab1fcb41186d1815fa73ffde97816a90ea5126a3ae9205bea2a93e769c4c0a1e1f35971131fa42519047ee41871f56908c47ff3a36150708c31a9689ba8ffa8317232bac9a877da53a931aef359bcb2a10238e60ccc875f672a3395d3d2e83a190256fefadcd5ea73288a48aec1bef51f6adfefc12bc38b5a19469c7e94f8d51325c078ccdb71bd763163712bae81713fb882fdfcfb74eb6e075c1a255283e20904663e2124ff862dc31a466861d585430d81e7325f35de6ab9cb99c095857b4056c2a8cf6abb6161f55e74112f9a3642bfc42e4d9cc40470221faf687b6c026ef5901975ffb8f39eaa6953af4866fc713c3074e34463cb0b0ff364ad5673bd89f214a6b633d6ed6f83afcdcb657cb57bc2a3bcb60d84ccc22743270ffc2f963b403d0e54c49db6f7ed31d68042275d956de45da8f70685655510fea40967e8361024dd7e61928470ec7fa6b477407e3d100b75019e561ac03a201653128617b14b91c3b18adf81445e71159e607e757253884d576091bca7e722f7a8878c56b7491b09ef7c2a430115f59f771d4e5bedc11097395dafd7b3df32aadd4daf4a70df9f0ba25e99ffd9b85af42ee0a4b5ae090cdc30db793676dd81c08c3efc493d43efd25b724db5c76d1b2be39d40ca091f1a78d38b7d1ace541e2293224f12c56eeea9c8f1fe0292680e8848db8d1a66367c211107b0321afbb27ca41e5f08bd2d11d250f9538deb87155ba9c2e6d2591bb92021e152ceb7a9bbac205810f5ff073b2c33e90d359703c94fef579e2db40eccac9b41eb11fbc22d1b35426d095c01814a2bc6333c1524247dcda7cef69d830ea12df08daac0271437950afd1b3029d42d0bd31fb5c20028099e79cb84bcd3a5dcacd1e6b9bbd835eaea5f025068cbc4ab5d0b95bac116cb3b799df0852b373cce6b3ffcb684aa8e914876b57fce207bea3fb1280380e57e360499f0405ca9b59bc839be011a1d4e2ec7171abdb7f4f807a916b5ec5f012630824b241ba40d33b10e1f0da7cf1e0989b0ec7263ffc997d7545538f35c21d539c124938ecb586ceba54ded5c09fe7233dadccd861ecc749d46009dee0525321aee7993a2064f04542186c7be47a720d5e13f3e27392bb4888aed42b4b4161ddcdbca8e63b5b32588c8f7ed7d67b6b331bb4b5a0d23541832ac444579bc5515cc63ac3ede358c76649e9f814e4c0888d1c4415548e8b239c4d504edfd3e6ff4dfad01c078edd3d68a2a80afd1dd05272805ce0006c4f9e1faa13a88de96edbec62d01bca7be5d197d9263810b0fd2057f44d18636954004bb300dc46da2f441331888e4f29fc9958d7885cbf83db0fbd1588aa1b19bee7d772697bb025f8b32dc8f358c9d0140425f683ad35dc371f8cec81e91eb54cf07233d38620ecdc4bd80a70f3850250050d134f43cecc28edca277607f146e5a540f4a3f3dc71454e2a1147f926b8f2ba8a568cf3714cb96f5ce59dab2c0e5f6215fd67f3c9f2b52d31473220947365394981408081118d238b0ff2aed53c2a46cfe8ab6fa7fd5763efc0d3865c0339f75394a6c8650656ed1b9dac2a4fbfb575ed75de21d6cd551642294bb23be64a1d26ba637c3a596ea0c2537ce07cf7018f00a7327c646e59645167f93ebb40591967d4c8c5c8490c408e4088a1b08a93fa74533d5af962f244fd31713c823b9a3f132abcda88484b73be64e15a4251c63f69150983b9e0855ca9a4b141f6e9531cb2a590d5176ea95762d3b9185f568d5ebaf5afde594749ebd726cb893bd12918d626329eee6b94c65f5f75c8f0680a0fa90826d07bdd240b4e14c77b0cbbe13f61c38f84047d45273b9b83f3d4a50873341bc2ebb9615e1c788098df666ce29a72f7ee4270bbd34dc93f0e595f900de3ae8ed4cfb5442ee0c09d592a9a8ac3f80023c6812f47e57aa09d8cabe849ca83ccb49d84a8b85a789b0337e64ab3b0fbb805e25a05513f6274561c2d26cda293a6d48f8ec87bbb4b6d7efc621bd82a5a1b90250a52dfd98d80061d9a11f081dc442c181f608d9a6807c90475850852f9435d4c513ebaea80614246c6cb0d5e368c63799bad6e47996d8f81e8e81f8f2fe1122007a18933f8dc0585b1ad468873c6c64e1dbf864995b933ee839444282437e02ebf8f5668a0df243f2ff28fd274ccd70279781eb0a7f7e8eec4f2ed0162e63265e65357ece120d7bee394cba3b9b1cb3f40a9fd3173f02ff44cc4e9aa2d69b8c8f7c8f181eb09f969b794b25d54cd457e0e2e4c06ab573a33945bb0961af6fed1a39bde31f90736a44a70802f03eda417a3f27496108be896b364da0354da58a80ed16227b65d39ae63f5a915c6f820f9ac4dbb7f71a9a776b0a18b07eb14e65410a0559f465b602cd19f451ef943c7ffcd08a942c94d538d799d4ae8d570eaf57e26b77ab606b3f353353a7e3f6f227f231e93d12da9acf482ac162b85f1efe0b3f51c0f0aede96ffde0eaaf90d6148e8475fbee8560d64341f10760f0488e8b1666cbc6d8d641d49e0e273e9d78753a2822829b65d15161c16a8ccee59f88b28ac1c4916e0cd9423016b82c6b78efb61ec6d9b39686d218b5cce8e7555e42a056ae52549347aa4753a3514764231997213e11dc5812d582a488bdcb347a00e36c7ac212660bcd0223fc65bf40221ccf4d80c0e9800dceb2b00652c091c77c281c21389cd1ac0fdb6a596c4e38709c436170307f9f37f61814d0d74488bee7636967200849b1b801d641ae6eb67ae8b50a54cf355fe4b48ac75c623e1f1d0a482f15ee24e366daff75c368ceb4890e6f9d36802f16b93d9a3e07e5363645527c85755ef64583c6da1a504ea9d159807ea92fb0687d88e94c8ad50a44ca20fc1fe0644f886f8b7d70553173e3a41c61aeeba30133cea1dab759a7602181fac5c679e30c02fca718172dcec9c35b48182360f9095dfffd8dc12a50a5e80d7d98f757a8f9d1909b0b84c6fb545cae1bad5f5fdcf8e80dc6352edb98cc767f4551d92778a7b2bc7c510475345b31970b7c795c8a2a6a0a4ef992f411fec8a672880222a46da10a57ccb1467ba90c725d06bdd21952ac8d00a05b9f54039ab7f139940b52f11c8898a0adacc72d2c12cd3cf591b56ecc6083e44c5c86d8c965b54c8c51e886c93d9689fffb488c662bc435ad3aa3abfeafcbfc8e6350c6bda80c311d40ff5d378d4f67a090e71dac2f573efeca40f5cfa0edfa777ca5573abeb7ae911ffecef7c3ddb5bbebd0f404879120ca278aa619d6c218f70ea01948538e11dfd5a21eb73a82942eec94259f91a37ae8e50db43aaca99c9bc443fa4eb44b29cc197c09134ae86d8aa214ff36bf220b1d6c52977e3266df4c75cd5b44a43ca7c3c62b", 0x1000}], 0x9, &(0x7f0000003d00)=[{0x108, 0x107, 0x8, "7f79fba9130c840dde126f020240d01fbe073b201c9877e3912aa8ad3d69409628a7c9fc580327dc6f827e2f63fe6bb4fe5d6b256ee6f33848f4fff19b67bdd1885bd31d2f492e5d1a45366a9261a612b1a87054c8d4d72d860848c24518eb82849a0c11d206d70c483a054d081d2da8ed51ce73407caabea667e7d09eff2d4450928d707efc6e83687c71672ca56a16baa766ea493f8058eed0b92b140db5a66db9e6ef342ddc78687c174e0f132291da4fdf16ae8a80b1c28dba766eced262feaf1656d23571771dd236d2ca5ce4e320005e4303fabd7383b6eb12edcba835cad2fcc9e5869c3435f760ad59c957bc41ec81bc"}, {0x78, 0x117, 0x3f, "06eb9267c85f72729907f47b9c245964b4bbf95d07ac10b49c250be138c55e89e9431e01457e1b9605a5bb7a4e954be7d98d7f4fc3cee89f3360367ed38b111a18145e39640e7cad2966248dcb681bad0eaaafd37acfecc680619079919c2a6d23"}, {0xa0, 0x1ff, 0x1, "7485a73f7ab3dc5ea4bd8fb6ae5a7a7b3365bf6b201fce7d4b1a46bbea6a56f067d85be57e8d07950f3115449f933e73a60c4c5dd4b7a9c265a44b5691f479c30233bfa16db872c3657763c5a3b43bd8573e15f38a155e557d3f26de813316da037f3eaf738d5f84d918adba537ff9b323e2eb405313a3e8b8eaff5c424dab8357c6ead1cac1a96452ef"}, {0x80, 0x102, 0x4, "7628d6b0c923a8e5d49832048e73e6c035867f99f407c7f389a03cb5fdde9da006114158b95038e94fdb8779a9b2b65d9b0b58c904038f48d07984556df3f6fad1e742004f7e7fd603d918304ec1dbda89dd35cccc48fda2276435570f2d88a559e78654faa493d092"}], 0x2a0}, 0x410}, {{&(0x7f0000003fc0)=@ethernet={0x6}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004040)="b21b4ea3977edbb9ce263cbe19adc52f7990d1e5da071306c53f1a375752282779c2ab7915c7bc64b054677fd6013a51244f7ca126a88ed7496ded0d9ca9e0fb479c40d17374907e0ba07db1cec1e1e3c5a90d883307c01dfce426f77c81615b2a960caf2e70fce3ed558a15e7f9e90f6eca48d68a9293fbd688a32a70500252f1", 0x81}, {&(0x7f0000004100)="05f89d21cccf076fd868d47236c7667f25b256618cb1635c436604668c22fc1607bbf11111dafdc653fd21991ddefbe3090bffcb3c0723fc3ca730ae7484b2268091f5fd39fbf0f52943dc11aee078b6aced4cb027b3fec0b4d979363a5442a2e84fa865d33d783f4bbd990cca26e5ad05f83bf11fb0740957da5a568e4a2d0cad6bc93c5d6f76b7bea298a30f326b1171801d0e1904a40f492bc8dd43d7ca35f356b43c6de9cce69f72ff37d229962548018e3cc640cef81b006e5edd32831661f9cb5f97c486349788345480efdbba8550d2343b9b562c0b", 0x27e}, {&(0x7f0000004200)="4984142da802840b3843a01062d271c834867b8a3c", 0x15}, {&(0x7f0000004240)="14029a29a9256c901bbb28", 0xb}, {&(0x7f0000004280)="55f8a022df341eea130585b1b11a9177bb02992f94ab2413402cb14bbaf1948308d4a1b28fe48f594007e6cbd16fa46740ca29be", 0x34}, {&(0x7f00000042c0)="4db1447b091f4ff6adf3b7b63c636549e72b87755e557de729f547ed5ac444a70b9f53971756a08d5cb770580d8896f2b868ed1cfa89c9228144b02dc7c6197c01ba78a96b", 0x45}, {&(0x7f0000004340)="5db28c2908ff5091d1840d0cebe53865776fcccca540ef3c130f8b9a0903525472cf9b8df0077e28797a89b81e60a86bc022fc3a0f10311bf7812cbf77827eac9dfb33d096d34bca884b9a89a462d34998b0805b00eddce5610ae76fcf9273386009a15b785970d9d078b5a51b69ee34bc084a4b527bf7638afaea8ae0ff9152f89ab6607b82702ae37691df975c4ec51b0c9f668e2f7bdefee65ba1c583258f21f5c7a316e0626c06f705d5bfd4eef854a005b8c7a90b65f0b56b9ef27b00e0a04a2d20b3d47c4a2f5d1f0fc3dfa9e28aa8ca405967d4b64c391c9723375b75854bc116f5ca9cac7c7ed51afe977c", 0xef}, {&(0x7f0000004440)="4321bb69cbfcf71ff50f181191841392568a2b8d1a169e9ad857a54e3602ee29ef934c053bf8c180f891bf1165ca5a74a9c8bc9b6a331824be6b12c0af40a023f64f8bb0bc58a2b0b4defbc148f81325f63ab24f5cefb5034c52a5248776e88e1be344a02a2624dfd9e4b7b00f3e12d50ef0d1b8ab7f7e051919dbe104f3556e22a5ff87a39ca2adbb8d70515d45e9f9753318391b6a62c1cc1321064892e03560f62f749e71994153c462aebe48917ba363ecc2c6041353674a7d800875", 0xbe}, {&(0x7f0000004500)="63f942ecaba91b408aeaec7df07d60d94959d80cded7b9e9f11a7db735e5ac5f30badc7da2b7c079da38e06cde388349ec", 0x31}, {&(0x7f0000004540)="beca51bfce493ec9d33188e4f1aba0efafeda83021d4ef2bff5cb860f5b0a0f9253dff06c0e188b6f9c4debc15207cd367c8e315e176f545e3f6a6df2bf6b14e232349f657e73cf98ebfa262048c014275d26bbcd6c2b34d0cf7107b03d722a374c08fccaf68c4e3ca3cc453bd00cccc5ea92dadb77f9c13e52974b724e39531fcab31ebc4", 0x85}], 0xa, &(0x7f00000046c0)=[{0x28, 0x1ff, 0x10001, "ad7eb01d162b66daed18bc1d68e63385444955"}, {0x28, 0x11f, 0x5, "05f7c97a3f27bc33cbf72636f757f911d6a451"}, {0x108, 0x101, 0x5, "b8687e03b1a9bc691cbc235fc15cf4d92139f9c7ab2cc4513b96d8c243caf1abd0b0cf9b0ddbb32b076018489f103786a688ead7e9d71c9b6d84a425f384516ecdebc9f92bfbd20d0df5a7f27eeff5c3e880a06271279fbc06e9daa99df83be1685744f2fe70e99dc703c5e7f3d9c120d8d08cc1e73992cb689b5d40e0198e43b27eda81b958cf28aebef3a886ba6e3e0731cb3a32376ca21f9a94b69ee4c1f949f75d934e7e4a1be36af882845306b59f020f180803291f8df27ca3c3aad62fb970fb58a75e4e9bf50ce44d75b3e2cd6ed699b94088c469d752cdcb0a629b3610d0435e20e6d5a1380a1638e226681d16"}, {0xa8, 0x109, 0x5, "1882a83674092c0701a85cfd48262e27149e17e2e40ed7a1a9b1316006be6adfec32ad511f0a326ffac365dfbb9e58a5d565d0393eb1e530923c50529ca0a26c0c02bff5ce37038e3bd69ae39f80d70b70710559e42f41fa5c243ebeb8b610e87c68dc72b365e07aabcaffab9adda3c49bb776f3174e03a323b84d663f7ec33ec22bb92dfe1054d5ae07c8188932ed1c0e2a575816e3"}, {0x78, 0x10e, 0x7, "24c95ba9993e64ea2b30e2d866c75c999a76806d77f20ed51aa86ffb1e83ab4d0e64fb494c9995a9ef43ffb57842b13b73fbabe7d0bd79135e5c335f9111c778a024386630da66e615bd18aa67de98e1997a72277f014d94961c21b2a1ffe238c4f061c27c033f"}], 0x278}, 0x3}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004940)="5be172bebc23e8ceba326951bcd730cf4a31cc4c59a700d3b55630e17d1cead1b9da4a696e87f065f43f0dbaf2a72dd9e96b05831fccc4eb275cb78f7959d36e643239b64cc749da328c9f420cae7b9b424e62bdc26333f3a4198e5b7bdc16d2447042fdacad2c8ca6701c3b4273a0e68e8c6246a4e7ea117ed6e354c758c6634ef9b260b5e9e83eaccaa2359d2e58e0a160992443dfdd32ba457206b37f8de513be1e911adfc65b53d09edf4fa2063693b261d5ce3600d48a920cc321489341e7251b221d25579028d6ca1d139ff11c8c89ee994f97faccb72c5b0d500470ff5a92766e62a6a0194d2abac902734e807e3c", 0xf2}], 0x1, &(0x7f0000004a80)=[{0x108, 0x11f, 0x4, "17617f1257172ef7f96dbb6df0599d31112b2fb87b902c09cd5e5ea124a6822cff3b22f361415b79c007344be7f43355105b39b1e6114bcae046c509e00f0052891b1e9376bc35bf5058f380f0ecf10d68aec079cf4b828f8ae7693bd59039593046cc9905dca4d67a9419e6bb0204f1c16108de1c27500b50d7d99b18754c5fc6a0f78a177c4ecf2880f469c5d2660def8098b977241446ae42b6753ac951a6b97d5485da3957f9032bbdc4670a4eef31d2f7fb597226537b39bdf267a1ed09a67923d2da238cd7f84b41e486556ca1531a3272fa0597f0ee535001bc0047e3e1047d56566d31afea34a8b829395a042cb5d24cd2d1fb"}, {0x70, 0x104, 0xff, "7e4d7989521185bf425a07cab86244b0f728019b16e36f3b1ff7e1eb048402cea44217d8c38c9bde26d74149dee95cd9a109081e5906e19e9f15e562665ad412a8ce480232fe6ce028fdcdd171c2ce8c5b2ebe4496158741a489724bce63"}, {0x100, 0x11f, 0xe3, "cc6cba32d4b8f8b104b775dc4f5a30e8f94411675ec6427f077402e151e2e66dbc753ed8065ea2d9c8d829059fc43c48e193aab0b489baf032107c17b3647ce187787e53e5547e07d397ab7b90eddd7f2488ffe3438ebead5dd9f52e50504a600de359fa702bbfa30747d54f1e0208031bb1a7d03a268b82a9e25d60e00825e45a8811b2a3b69eb4369d3cf87996479499a825a19a05e0242cd2a17862c182957f21041b5ed4a708d59beeefd48462d54eb92a71e10183db11146d74f31d51669f0fce051f99ebe396d69cdc5557be804222564814cfe312ed96649ed2cb4b7189b15d696f9578d88ebae6c98824"}], 0x278}, 0x10000}, {{&(0x7f0000004d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xf20}}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004d80)="b4c9366d4d84b5182c15393b9cf3f5c6c249d547fa3015e6631c55cd7a6e64c3d59b9d3df2f5bc9c4cd80b331b6859c5d32654f5f148d47789322822f0202968daaee33f9f9ac27b3fc6ee7e7ddd00bc7234041a5e5daabe94df0ab6cf73631b41ec2b2a4b8d42ee0bcf781dd4c2d38bcec0ab1edbe4546fa2aedc13aa158b8e2b079042eeb7d4d054501a5f34528498115b5156f79aa7bd0d407ef05342a30cd030a1090b2a0b52131e7cd996f67f20b2975052314a98eb12046fef2fd7d3df5872480d391c76a04e5d", 0xca}, {&(0x7f0000004e80)="a33b9080e7947eae333cf526fc002f2a7116292d1f75a99be2d3856e67ce14917a0228fb60459f0053632ad13d8e4728cd891931883723f7c82f37290fc1856b03da9515822c02921e2dfda2aa011a825a8effe684507cd1e9fc82a096f10dc62b721c39b2ebf76ddaef00adb336d1759a6fcec8b47737db5e044ab6623886c5cae80192df4da77ce87b5525f07a78386e0f113889e868963fe4223ce7c55f35d646fac7bc7d1808cbb2caedee1207dc811fad81fc11fc693bf138c89c1e08d34e1dd3637b26924bf2d286", 0xcb}], 0x2}, 0x9}, {{&(0x7f0000004fc0)=@in6={0xa, 0x4e23, 0x800, @mcast2, 0xfffffffffffffffc}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005040)="b981b9bb2352c22af911d4c6c9baf02d62439637ac6ece4746cc700e6b2fcac03ed22fa7b450fef4dab2d014d34cc42b1b9a1a0d08ecc60974cd671b25f6dbb77b9ef8a468988d9a3211eb72dd14883bad23c0015b4300fa115c71967b7524659f45c91a98bda69162bbfc706c667136f64c5a6a3ece8c324591454d390a4bd489ccfa09c56c0704a0958c4faafa9089fbdb5dc1fa86431c20e43854437df5b38c97d8e8949dcbc94d9a2c3100a86b5f2b166b2d", 0xb4}, {&(0x7f0000005100)="0ed1e298ab25483f92b540cd9a9a1b9664f96f0ec467fea3f8212d6f3547f2d3d6f202443eb37b6af1bf0f28fdb7f88146bac52d0d6d124c66a2081eec736d9bf98d9ab7259a8910d976b3a8f223ba2d74f3f5c5938ecf82f0d2", 0x5a}, {&(0x7f0000005180)="46f1136e49d5f629366c68cc410c5821c5d8765f8a358445dfbf80e51f7324b43fc6ac4f4bd24d78d2e08d421b6fddbe1ad91d67137ff7736d38145891119578c41b2fddec645b845df018f72adcfa93e1b3b649084a78e836cad2f5116be805ab18a53a1010ef39669263716520be70946cee02dbe17418d2a8711ae91b47fc32c0cc4da3a0e9ef7a7b381e", 0x8c}, {&(0x7f0000005240)="e6db2b0f7a3f18ac678c6c8cb739f79bb37ea920f8cbdfb9592fa2536c7aae71f92d1b56ab8aa2cc952ec6df309f7c6b40b6d3ce815c674afec415b1daca97c7de040fa74a0dcd61488869dea37885d911ff49d7ceee36ada8639202c6dedb772efdabf7836123d99c48d771d538ac8aeeedeb77ab8dfbc1775e7cbe95f7ae0f6339c8ee246ab211e762ff0986d4155b76f529539cf2d62756cb57e30b260b2a201b3539e8a9c6ae", 0xa8}, {&(0x7f0000005300)="a07177aa7756ff63a2c79f641fba26e5edceda4accb8ca874629eec12a253e4d1e7b3ac014a702affbfd167859e317008a11c741139d55a90d80ede025c2852bbe7f0c802ec75d5a7563cf43fc990fae60edb9e1bfb095bf5bfe5e8e12c60403b7e6429125042adb2621d7b0af28ddb0d22cfc03123371243b82b3c85025c0a0d949b9d418b0c8b94e9c3dd0f0069f799a68fd9a8531acbed76e17e9b7f4f9549e", 0xa1}, {&(0x7f00000053c0)="59c265472cc72f4621a5c67e1c6a3a506d6eaeca1225691a68ad51cef12edd4909acff58b9c966", 0x27}, {&(0x7f0000005400)="e5886927150646250a8450701a9cbf29760274e0c266e457560d9ee027aff1c463ccf0c995fc12126e776f0e611fe4956817bd861445f79d8db62fc68261ec49ccb97a17251f9d9b112dd895bd64f7ae8aa9d6bf5c1ed713aaddf58fffe4ea6192a61a5f8893e2da80780f86329abd38a398e6aa84ecf5536301f958533a59f7a3126edaeee93e48a07bc189e3c7b66ad22307f1fe4e5984cbc59d4763ba1370b61dfae1c23d2506b7e0242e6c5099e5f3b0a6e498e408bd4c165f4b92a301b7b823123e697845ac1cb7bb2a7db1e9c3ae119383834596b8f1780b7b0e00d9317031736fd15d0d34ee75c26be0dcaeae1253365661d504ec17cec2de042274", 0xff}, {&(0x7f0000005500)="3b6bdc4f4336c75503446c328ffec5c4b909a38147fdf8d806add8649b843e28dc3e778a45e866fd58acae88f8792d4270684e6f0d115b46465d450ec847286bde9b618b73f448853991ea5cfd35203d8eb3c3b00e8a8689d866907fdc562a483ece6e6c8211dc9902604210cc4c609b2dee75e30ad703d414025d5af1898f87a40cb5ae0c11889ceaa21f017d01984484e585663f3eac424261ed0282dd50c0f2e13ccb", 0xa4}], 0x8, &(0x7f0000005640)=[{0xe8, 0x10a, 0x7310, "e527b6b3de3aa7c533b0e67dc16d25ab825e675a964c2cb76687e277a21ebe983fa207921a8b6d7a4bf8720efe4c6542f52c784c776a0a20c7de342717b500f761371014969a1c8f048b5fe480325973097510535076a65548343829eef440f4ff0cf015f140155c382f775f2cb6a329b2f3bbd0471d968f5994d8dcd59166d04caa3092c587f3d02dbef84aadaab9bcddbcdb6e6baf78aebc19151999bbe46a37724c024ea08bb95be2bd8964a4b909d5190fd6faf30250a853589f28013552c3d81e7a7a290f33d530195064c2eb87f5794e73e27621"}, {0xb0, 0x10e, 0x0, "c8b7636c030c4b49ba125caa052201516b85d800c6e4b10c8727804f0013dfb10201a0ee70f2ef72f8d73421c984b265a0c53a10d565fed749cc2845591bfee55f60b3e98685ae099a50519107fde1e01dc91bfd5224e41e1c7900fd9bbfc6c0f11594da241d917efb2f09daf225fd1918354302eab575f83b05c918176131568b6f9fe319a80d01584b67576d85a11bc3ac3f6ff2fe20e7410b"}, {0x60, 0x10c, 0x6, "551e70c1c9c64c4ca7ef73053a1ff3fea563a17e3f122ea10f80bda8f58a9e4d70d2ec460cbe5085750a28a1ffc84f46bbd21bb720a6769308260006cef11583d2589dd4e77b34de9f8b7a"}, {0x88, 0x101, 0x7fffffff, "89b9b332f99951bf95d12785ea8818c57ee86f44c5a1951f02484dc801426b8649c51f5b14ad88da44eb687fa33adb54c5f5eebb8224bb4b0461e3fe3d3f4f0d25c6a905d35bb539b4c7976bc6ee8e5eedd9ddf4662d86824a02d3eb0387474e1f36d6f7473b8d22602a0800d40235de0f5a3c"}, {0x80, 0x6, 0x1, "4e539465abb2d74db3cdf66febc81e665c75fc72efc399bf98b022bbcb9a7f30ef78fb6926efad27a8aedd37ade93ef792f5405848f2f16659f1e4305676e54ef5f1dd014c9e51ab154fb68d1b34682ddd249261fa838932b848db14f3c61a207e35ac45c66a0a349115ba905b180b"}, {0xc0, 0x13d, 0xa9d, "c351c60270d8256bbc9bfd1bf8e0c6a64d2034736f0fb574c02b4449d641039e325e3accda7c38ee976ea2d40723e4fff5ebee7f29312dbc5ed437edb927f6937a7cc72a417e5b4236c52e7116d46e58a072e8b131fa4daa291c2be9d95b208fdb6ca62b8a4100f53ee5b606df364d4259aaca3cf9f999a712fa60f0edb1e0895c5e5e5a4fa853e5d373ce128f5777672687b62e2f643ded7908074550c7f5af299d42cc0ac27f1ff8640b4251"}, {0x58, 0x3a, 0x400, "72c9db8ad2ce5c140cf63df307b8b2576f85bf557407644925fbb8f4729c6bc44a93b977d1aa6068e2eeaa785cb4e0be28e8be2d9cd31c79ca9c04b24b0c25f83e5529825a"}, {0x98, 0x110, 0xfffffffffffffe01, "ea8e518a227bf8f910f8b6b77513455ebb4161bc7620d9d5ee2fb43018053f120d9c17361c4dc2eeb7d445f57b7c013ede2974efbf438a7688f3148030ff1fd1e2a7908b8e0e71c7581c52a47ca831b95eede17ac4d7e1e259261aaaca4c0d3ffb44b0d36274e50ec3dbebf12cd61ff787337f0821a2d48c1fc92551a78174ebfe63df93288c354f"}, {0xe0, 0x10a, 0x8, "50cfa7848ced31bb028a1a76a241a0730b3f55549d027b373237490169fb37f746d990d7e977a185b95e5eafa59cd2db5ed4033b2366320695eb8a84381022275ae356b7de8aa66bcbc05039bbba7e81953706d66555dd6e121c4d91e0e4b459acccc3947434c3f46073b5d4d6750212c051cbe7cc93ab751bd66c6e45b9410537d8186dd6fa5c9708638b63fbecd676cae954456b36e9b23e63d14e1b27016232579a826f337d3f4f2a0d91bbce3a417f3aeec35ea4be25ec74f29e5804fd0841bd3bd2c28e9c8d2bcae865cd"}, {0x28, 0x111, 0x2, "cc952a5f3f0c3884451af1d700a6444890b568291a6e"}], 0x5b8}, 0x7f}], 0x6, 0x4fffffe) [ 614.999779][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r0, 0xfffffffffffffffc) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000640)={{0x0, 0x5, 0x1, 0x1f4, 0xb4, 0x8, 0x3e3}, "11c4e6c3e9cf07da30c26c0a89e3d745d237bf89d85545c70e74a38d6adf832c527b3a6ccc76a64d8e9908fb569fa301555efa636aaeb7f149e5d4c32b8245f984f36107493375c46324f82dd5a79d7064a8e579cdcd9d62dde67edeea2badca6b1a622051fd960797eba45c", [[], [], [], [], [], [], [], [], [], []]}, 0xa8c) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0x5, 0xb5, 0x0, 0x3, 0x4, 0x4, 0x9, 0x5, 0xf917, 0x5}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x2000) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffd, 0x2, 0x0, 0x100000009b4b62b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) time(&(0x7f00000048c0)) socket$nl_generic(0x10, 0x3, 0x10) 02:33:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x37) ptrace$cont(0x18, r3, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f2b0e"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:33:30 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x800, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0044308, &(0x7f0000000000)) r1 = msgget$private(0x0, 0x540) msgrcv(r1, &(0x7f0000000040)={0x0, ""/71}, 0x4f, 0x2, 0x800) 02:33:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r3) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0xd19e, 0x10001, 0x8, 0x8, 0xffffffffffffff9c, 0x3}, 0x2c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x70, r0, 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="83", 0x1, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x70}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) recvfrom$netrom(r3, &(0x7f0000000040)=""/3, 0x3, 0x40, &(0x7f00000000c0)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x2a}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x1, @local, 0xffffffffffffffff}], 0x74) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @loopback}, 0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000001c0)=""/58, &(0x7f0000000200)=0x3a) 02:33:30 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x3f000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:30 executing program 0: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20000000) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x580, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x40000009, 0x4) recvmsg(r1, &(0x7f0000000340)={0x0, 0x1b8, 0x0, 0x0, &(0x7f00000000c0)=""/36, 0x24}, 0x2000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) 02:33:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x4c, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200082, 0x0) fcntl$setpipe(r0, 0x407, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x5, 0x3cf, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000003700)={0x2, 0x8}) 02:33:30 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0x81, 0x4) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) fstatfs(r1, &(0x7f0000000100)=""/117) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000000000b, 0x20000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_FSGETXATTR(r2, 0x550b, 0x0) 02:33:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r3) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 615.968727][ C0] net_ratelimit: 14 callbacks suppressed [ 615.968733][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 615.980246][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0xd19e, 0x10001, 0x8, 0x8, 0xffffffffffffff9c, 0x3}, 0x2c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x70, r0, 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="83", 0x1, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x70}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) recvfrom$netrom(r3, &(0x7f0000000040)=""/3, 0x3, 0x40, &(0x7f00000000c0)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x2a}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x1, @local, 0xffffffffffffffff}], 0x74) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @loopback}, 0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000001c0)=""/58, &(0x7f0000000200)=0x3a) 02:33:30 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x101000) syz_init_net_socket$llc(0x1a, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x108fff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000003c0)) r1 = gettid() mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000002c0)) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000480)={@rand_addr=0x100000000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') read$eventfd(r2, &(0x7f0000000080), 0x10294) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x0, &(0x7f0000000140)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r1) shmctl$SHM_LOCK(0x0, 0xb) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x80000001, 0xfffffffffffffffd, 0x9, 0x9, 0x4b79]}, &(0x7f0000000080)=0xe) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000300)={@pptp={0x18, 0x2, {0x3, @local}}, {&(0x7f0000000100)=""/113, 0x71}, &(0x7f0000000180), 0x24}, 0xa0) read$alg(r2, &(0x7f00000001c0)=""/101, 0x65) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 02:33:30 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c00071e0300010067ba00002500000700190000000000000000000020000000000000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000000140), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x1e4, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='veth1\x00') [ 616.254677][ T8478] __nla_parse: 1 callbacks suppressed [ 616.254685][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet(0x2, 0x80000, 0xfffffffffffffffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={0x0, 0x0, &(0x7f0000013ff1)={&(0x7f0000000080)={0x14, 0x18, 0x301, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x9, 0xfffffffffffffff8, 0xffffffff, 0x7}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2, 0x4, 0x101, 0x0, 0xfffffffffffffc0e}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000002d40)={0x0, 0x4, 0x3, [0x3f, 0x4, 0x0]}, &(0x7f0000002d80)=0xe) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000006ac0), &(0x7f0000006b00)=0x8) close(r1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0x3) epoll_wait(0xffffffffffffffff, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x6, 0xd63) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) accept(0xffffffffffffffff, 0x0, 0x0) 02:33:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0xd19e, 0x10001, 0x8, 0x8, 0xffffffffffffff9c, 0x3}, 0x2c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x70, r0, 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="83", 0x1, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x70}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) recvfrom$netrom(r3, &(0x7f0000000040)=""/3, 0x3, 0x40, &(0x7f00000000c0)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x2a}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x1, @local, 0xffffffffffffffff}], 0x74) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @loopback}, 0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000001c0)=""/58, &(0x7f0000000200)=0x3a) 02:33:30 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0xfffffffffffffff9, 0x401, 0x7eb, 0x7fffffff, 0x17, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='setgroups\x00') 02:33:30 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20040, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x84000, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2001, 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000140)={0x1, 0x2, [{r3, 0x0, 0x1008000}, {r4, 0x0, 0xfffffffffffff000, 0xfffff000}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00'}, 0x45c) 02:33:31 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x40000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:31 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) sched_setaffinity(r0, 0xfffffffffffffe0c, &(0x7f0000000400)=0x8000009) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x200) getpgrp(0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f00000001c0), 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) fcntl$setflags(r3, 0x2, 0x0) r6 = dup(r1) io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x64962315) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='veth1\x00', 0x39e) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000000c0)={r1, 0x1, 0x1000000000000}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ftruncate(r4, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 02:33:31 executing program 0: pipe(&(0x7f0000bbc000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x200007fe, 0x0, 0x0) sendfile(r2, r3, &(0x7f00000002c0), 0x9) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)={0x0, @aes256, 0x1, "a19babd1a8a19148"}) writev(r3, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) dup2(r1, r0) io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)='n', 0x1}]) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x6d3) 02:33:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x200002, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@rc, &(0x7f0000000080)=0x80, 0x80000) accept$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$TIOCOUTQ(r0, 0x80045439, &(0x7f0000000040)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) [ 616.876927][ T8953] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r3) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:31 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') flock(r0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xc9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r3, &(0x7f0000000100)=0x4) r4 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140)=0x5e, 0x9f) preadv(r2, &(0x7f0000000480), 0x100000000000021c, 0x0) r5 = semget$private(0x0, 0x2, 0x102) semctl$GETVAL(r5, 0x0, 0xc, &(0x7f0000000180)=""/151) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240)=0x6, 0x4) 02:33:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x1, 0x1ff, 0x4, 0x1000}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f00000002c0)="2400000021002551075c0165ff0ffc020200000300100f0000e1000c08000e008000a000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464000000000000000085ea2b85d32b3583d87124da3b0861e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801f1cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1ac968ce510c7a70723741b34981d1b182deb7904", 0xfe2b) 02:33:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x30000000000000, 0x4, 0x3f}, {0x101, 0x1, 0x100, 0x1ff}, {0x4c5, 0xffffffffffffffff, 0x7, 0x6}]}) close(r0) 02:33:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffcbe) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fchown(r1, 0x0, 0x0) 02:33:31 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) move_pages(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000300)=[0x0, 0x0, 0x9], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) [ 617.168757][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 617.174620][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r3) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) [ 617.331344][ T8954] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:31 executing program 3: syz_emit_ethernet(0xfffffffffffffd75, &(0x7f00000015c0)={@link_local, @broadcast, [{[], {0x8100, 0x5, 0xc8e, 0x3}}], {@ipx={0x8137, {0xffff, 0x0, 0x9, 0x0, {@current, @random="4060c96f1b5c", 0x1ff}, {@broadcast, @current, 0x9}, "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"}}}}, 0x0) 02:33:32 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xa4ffffff], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:32 executing program 2: r0 = dup(0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000002680)={@pppoe={0x18, 0x0, {0x2, @remote, 'ip6erspan0\x00'}}, {&(0x7f00000025c0)=""/151, 0x97}, &(0x7f0000000540), 0x12}, 0xa0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) sendto$x25(r2, &(0x7f0000000200)="adce6dc42a83ac050bece1a2b52bb2366472d2ea4b3acd754bff48dfa8cf44ebcef12ac040c547ae653c419fb4d672a5a9966ee36f3d0862958aa9a6e9b2bce6f5e231275bcb276cc615b8d938fb35a79c0d341baf29853db7d1e52584d7a1598fee53fec403454ea5128d3871772ac8df4b8bc7ca8c8ae689a65b07ba6269897cca1982de92f64778654a1b85d5adcca580634a7e28d0ce646d32df29209a427af16057f54699612d4daa33db5d6ad5d95e8414a5fb187bb111a805cad251a5e9a14466bdc2c620eca6af3c29cba62624225e9119c0a04f5304551eb10f88f90f7e969ddf2e9a9cd41084112e9227cb3837851f449559", 0xf7, 0x48000, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='tunl0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) fsetxattr$security_selinux(r3, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:sulogin_exec_t:s0\x00', 0x24, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$notify(r3, 0x402, 0x800000000000000d) fcntl$notify(r3, 0x402, 0x0) 02:33:32 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg(r0, &(0x7f0000001800)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000080)="bcd255ea06a4d91a34caec8d60442a8c303f534cb88ea10a33f784e21fb1288576fce309617f7dba791c37ced2d0c20822dc58ddb03e76e62788f98e84e8aad53dded97b9316f4f73ac0f8f535e7e8bd11fc5b95ebf4a537277038bc629c9da1206eb3b8a96c0f95fa84f070d5dbe95425855197494ebee0bf6a5543f75a672722a93e3084a5e010165b2bedaaa52026c430", 0x92}, {&(0x7f0000000140)="aeacebd33abb7632a96e4d4b0ad4060c952d111e345c0535ddd09fc960f759874d017bc644441100fb1e8e352f9a05b24b96486550311a9e0845f20a0093bf046f164a6d10caac3ae2e1929682e3c9c33d4defa58f448083c7557660adf8b4539df9a5ef04f0d63702fc41473ec92d34f528e7abc1bfd72e4c1d389c438683b83480cd1e427ffa288382921b1f0f86c0e06498bf969fa40d71e85b9b254249288379b494cdba6d1ca235e17c09a5a352d3895cca781d74004b12d1b60b0e11e569917cde904823b2eb1ccb7955505ed3fb3bc64640a6969f", 0xd8}, {&(0x7f0000000240)="d2eb6c61e849be2a6b96ff27af6fca486db20b837c73a70b98cdb54e2a6ff387dbb1c9628622daa3ffcad3d603a52880f42e528273421fa33dce5cedefd2b2106bd9530109680b6ce89c32374946bac53bf8802aa9da721096664f7de168a329d90f34db05793d06564b711a3312b6f8d9a59f8bd18c29aa9842834bd390b94c04e63e44b2428e57d2dc9a521f614c87664102182de7433bd2d371cf0944837740cd9e0e51d254ec58382069bc86d65c", 0xb0}, {&(0x7f0000000300)="253c0b9a6de54bab175e7b844aa115d99f0a6ec2f50df68f7fcb0f29746c1ee7a4fdd886579fc7cf2567fee7cec4e450e2a49bcc4b46c28904ba5adecfa40cf614b5be83c547cb1da967dd784c0bcca208ed75056ebeca23c648c70252ad", 0x5e}, {&(0x7f0000000380)="e166043846a264d1f77178ed24c58fbbc1f259ce93925c3937d4443066b42c5d787a191564f8bf09bdec63397c50c33e76197a4714768bbe898d73d27e1e92fd6e19fe05f0d90c0813339adf4a8d8fc97867ba317aeba947d74890c6d3183fb980e589536281381bc054397b2850d878397d77fde554b9b6f442de0456d8ed4adae054ac8c2ee2d030ef0015e85d9a89662e620a7f16e472cb28d3b9a7dad3505ae71ab93c8952be720178e05ddd6b62945356087eaff7e5fa3f0e1acc84df9ddc585d68855176124720858a22", 0xcd}, {&(0x7f0000000480)="42f77e765b8f9d062763402e0d8e1185d8cd83770c0599b851d8927a122b90af48368ca208c6c5452cea6f946b1a5363e8520ec5055d6f31383023", 0x3b}, {&(0x7f00000004c0)="ff1e515a1a9806001080742d53f4f6ca69e28e4b4f2447b1065d8549a6fb3c74c612c60af7f8a5ac1c72f5dab8dc8fccaf9739b2e0c087bb0c2a3b663d46beeb807b462d43699bf000bc77de7b079155100b3d1f7353ff2f3ad3b6cad06c789c7ac5dc5b89891e35573cc1e8d42eaa7bd24cba5921b5cb4141a888a75249deaadaf7b3e54c3d49bf652c16eab53b0e68874363d83ef870cf93c6da6f51adc8dbb6d8ca98ed7004aea486d129fa5286fd683defbefdef4b02fbcb76b38c12010ac992e06aaf2f451fa4967393a8ebcb247e002286325049cd5fa74babdb80fcab9c63572db9dbb02d6f563e2734dc2770", 0xf0}, {&(0x7f00000005c0)="e3a471eeb4de23c1b03411aa45b95ed1ab471bbb94dd3a4062a590bc6094fcf7d8b1ba60d526777f5cfc18d847ac0e7e5a9695e6d1b5c0b763184b0732887cd14ad03ec3c255844f6e26c3a932d59d0d3e219e8bab8155f23db9ebfbb3b861e14a658a0cffc1f82eefcba0cc2111d1fe97ed07e55b6971a8fbfb3620a5f9f33ff670ed81dd3f15282422507e6eb9496534a0352c56ffcb35fb7ad16871a84911b1eb3d1656c7795fb1c900c99e3200ab1e0ab9e31a166b0f6b3624", 0xbb}, {&(0x7f0000000680)="37be53ec50f23dc964db0aa422a35f75a2ba66bbe24304b8f00d54b8e3ebee55a37234173c5d27f0d48674a9914966ade42f8590b2662e402acf1f64825bd0fcf74b72e6f66503ebe158b70891b993d3e42011ec2221e59ad863d0cb019689e396b62f14cd6c32a6245bc6ecc8f58e9cd6f3754e0d4afddc4ddbbf8b09a6eacc85db01d2a39b808906984add2a7697e2d1b25ded", 0x94}, {&(0x7f0000000740)="08826ebf0292ddfc95beef1b0426fbfadcb98616db31dbfbd10abbfce36c8b1d80362682e4c16a35039f1d4dbc34b8ecb8efba4ef637aae6b7c0fd37ee15999e5034efe001b21d2e06f2fb46f528f139813b31734238bce8ecee77551b872d17123e57dbb85b55d9a96f1f1e7109e91eedcc35dfd7aec040cd719247dd0a854a798b4db0384f9e76ab2ffbdb1c872384ad40975f9e968ec6e60888bf7260fbc35306be3bb0b8fad1a911bd6e7d0181faf51a9a21cc2c5e11a8c68f39e3eba40a89bd0a520a8e8e22d0c2a21d0037241cb0108cf0e3cc0c5f1bc301665f5aed10c81ab804b2b8ec738fbe5d26c598daa9a527f8b74088b5434d23b295dd82d00bd7c82ecd26059bc6649db557cfdb8de3acca33a3d0acd8975a67693737bfbbd9351d1c2ba6979270f7c8e26db64341b195ff92229abc08174382fab4e3a2066dac7052d39afe6a3363880bcd75b2d8ef22a0a216a4aae4f3cb13311ce480d3738e7479ea5f3eec754ace39dcdf2886ef0f412e227b857c66aaa7070d255765538f96c73115f853ba330d6703345fe8c45fa2af6f01b7bd57bf11649b1149de234fe33c12310607360ff7ba74fc89b7c33db3b7873b79562cd1552fc827611c97650485d0459233f34867197b89d5296e6e65c7af75aded03c48b295e00433cdd0cbd6545d3cebb61028ef818a2bd82dde44e8f6195fb1e9a58be43edd82cc61ad475475d399b58b13b9996998b4385bcec2f80365fdf986fab84aea17af0c027bc109afea46636bb2d11967e04a3f262fd91e308f39c262e47eb3d307a00411dff71bf1d2c41a7d59c1f83cd577e238f7445ba30fe10954c0515e6f8a67a3be072915fa5a882a679b1bb2f3543e07bb02d148a541c3b39bd8006ca1d496a46072536c312e4e5bb8006c8f5c342dd431e424ae5be68bfde0a7b31445519cefd38f94f82b1211ee5c349bb5759c402825f5f80567e4aeeeff425864cd5fb29a0ca02948e70e29152ff9cf073a1d1107f09649be35d7e06d20164dbaef6860f1fa2fabc1500fe13239933c06646e524c8e91da41d04db6294a2698b4d6a799e81d5e4a38a3f198fccc8ab152cc1ef5926bb356e96138998ad0177cad27984304d0f79f7818ac4ed0269324ea2afd99f0d713848007dcbb0c5517e2e77f6d8f1b4bb7db59595c1e00fb5eda41103c955aae645f828ffa5e185f5f94eb46150288afa58a212e1359ad7fae9ba6db5d3335de7aaa5343051801901e11bf266f5feb9b0cd494031ebaeab3186627381608a1cdb06b7585ecfedfdff03007cd865484bf08f941e7fbcd2f3429386ffb907f1be20d89c65275b0511b1d77bd73cda977610d3d86ab6bc366439c25f632cfe8218b00b30b609f65ff8fda7a3fd99f937630fa02cccf855d1c1060ecbdee3566ed47f45a92b16b8bc6ae3ab985c788fc34817cc59b64f0ae399a49a23ff49f33062be899b2ac5b970bc9d1ddbdd54220bf18bc0bb3edba5bd8bf66891465b4eae9fbc7541a6f638b2f1c6f45caca2f3157c192f9d8dd44c8711c8e077471ab45ace99090c172b90e07a68733092e92f906f7f5b8c55629afe92c08e8fe740a4d6e57629d8d871c0ce09837e985ce7a6945b19f745a4d897873c4712779af70ae861b641b05234cd11ddf21cc493ed82a2a81b4dc5d5859f76c2991f86ced45789d7bf3549c41c8f511ff857797fa53342d230b138410ea9027fc36c06b01b1c5547a3255e2c87f1f5f4e43f8d7cac9744893de6ce429befb2e0ffc59c6640773d56a65985ea35b834dc3d375221f8b253a7cdcec85b4d359e7fb49f03f2207b1123a79823d8013dfad8be2ae6f9fa7394fa6452170c0d570c6f588e917daf64a2155527a318bde278beefd11688cc6a6d5199788a42a50a5c4c25865ba292c6bbff99be4da16936e02a7b532de1c0b83530b33c944c31bb5da8267da0f28143564ca5edf1a0defa48ff0a8a61086c71f2e55f6eab629d5fc2373cd120473587b3069362f8c270895dd9bb76896e72e8bea3de6cd7451314ddc6ca962ec75c422d89ed1375c57b66246bbbe7d3e81efce1832f62482afab7674c09b2c52e53d9912a7dd6e569938ec20360de5e6da619d50615ec669018359c267a46b20fdd37b31f90f53f2c1288ecb1e3004174cc88c22de53a7804a608ab7670c4360c28e970737f6933efb653474f562f773fccb8f122f78002d99438a2339a1d8e13f77c8b4406950921036d500917fb8b2a76e7c8b1b581f39b6d8fa47eccbbb0fade3b3fec9643a4a0fa61743ff8bde2d332550ed2cbf3759cac4dcf85c49e5277d5f11bf3ba4f665905a177fbc5015bf4158c34e20c612ccd469c863e679bd1bc561a10ae5aa014a29b5050892c987ec33b4b03cd3531efcc0ef89b25ba32bda322cdb757adea8302d6f38f453afb2818f7ecb2ace47a68d85f79f9e4fa4acf138df4e257ad083ab9ebc8c0eacaa10fadd5e834aa22c27bbe001bcb0a16d87855778e7a8c48c53f9a5d29138e433edaa0917fdfcf6c56cac4cc884a86d06ace16cb556082632eff9493f827a4cee943dc3f6bbca125b8ab4198b8d20abb5de0925b2100944855ac8aca8a2d867327993aaa3b05c92ad4d8a411b54d4fcfb462cba1b43d6e0b3a6b2854a26ce1b51fdca8ac31e20cbb5e9ef1d698e029dffbaf034e4379b66aefcb77daa6258eafab974cea69ec7f46d25b74b11111cf89567f0b59b7a28a09af7aeab0be5a76107e239e27c46baa27e5e2baacf79c7610873b1189f64a9d8b83d35903ef221678e7137e5c57fe6a934137b5be339cb5c3daedaa5b4d39589ad61a47d3a878036f5b523c847fda41c5596ad818ae00fdbbebe9443488eec80c1a85eb485df48680a047eb3e353259f81f0b52af3af0dd25710636e2be08cde3e21b452af0f4066ea452ec12acd98fe4ab59f94bfa443057931896b5d09639780b213ed05bbc33e91aca87ac31271581aee6c5c067b1a7cd263776715e5b96bf6a01ea2dfe66314f11292e5464e122a9833e12300018dca5ec2b05921da56276ef4e55441de73759563b7cbb406670366dc860af7cdac0ab3ebe8fc976adf21550f45ee1011b29cb1581f6f32269570bfd4be879543d2731c07801d966b102eecb86dd1b21379533f35b6d6798c81690012080a7d374e6b5cb5ee86f784bb8b9fa9b3d56352e62b71fcf0337903045b9c6a461e359e6e09e4118a956952e35e1dafb062869382d963aae2490375524f9fce794e3e383afb83e4469b9f68cdf447c22e2463e802bd94e89fd23956aed474cbb7bbf24d5ee503db8dfe0f40487971f6445c20ce50fd26640ed7eea7bb8fcf3c922599c65d20c616f411627bd6fdbc04843eed3f6f5e6a7c6c8f6512dc8ec8a2ecd737884379b1d27f584b4e74551a818d20a58a4e6c5e8c86b704fbfcb1a2130e60d1727a39539e8979dbbd4aec6e3f793eadc034ee8457869cacf40d8c6edf505132f50eadd2de123aa309075927725a08ae635f3460e692533bb736c608cbd5c76fc4a1690e3f6aab1e04e33065b78fa27cc6124924d1849525bf7918b156e4c4e6805b8b9372b28bad91a39f433b1551f3ed0f65fc2df406dc240551ac494a7fdc5e048b4d14b381adbd5e1a7cd56ea8406fafc96ccbca0c1b76020207b31e016e3f44305c6f8e54b5ced04c462938e233727454aa3793d5fba36cae002f77df3c30aa1fabbab75756db387d382de11804e22e673534dae774880b68fe613f87edfb01b66eddea987ff1e10ab07cf59be677ef3dcee093aa25d44ccf0aba264cd4f88fc79de7f7e3c068937d63c600142ca4b10bd5fc194c8c5d1565daca8b7fa9c84d0741fbceac72665ff42c8d722047a609ffc065c35888c533af8d18956a0a2c2dadf7213fc42d91dea5bafe202795d34a46ccc60b1ea175084a0cebb2877018c0d6250dce1bfff4e0ce27f74504e6a91d0cd3a2d1e4a24312537401b2ba95c6502b7d8c3b8a71ec42e21a0a2b0c9355a133b103eb2d0e3f265e3c84dfdbdf9edafc7f5b52c190d701a1abbb888154545ac62d5ca2f757ca2a6cb69c377e80a18c686624cd0d38def18a5db091fe72bf0a0dba8e03badcb92ac83bb17c2f503fddb24b7bd06a40427c432b1c95a36fe0a896af0eb023ef2ed655c66828f7d9356cf3194ceea2fa6e4dceb55f06471b35e5a62bacbfe69b7bf862aa05fb99da79d57722da1d7bb8635ac17a5f0978af0916b783be7b23bf5ee518971964a9a89b2fcbd23fce0e96fd1a4e311a494ae458888c3a8dd844b02a4380c8c95ef19a101c9dd5463fe6dbfc616689861a6057b507552dbbaa7b000d814fad78488809e556efeae5ed74fdb99c39d5ce0a511df4fac1021fdf7731a8b25bbdefd18ad144bebf732baf0921f16f8c15bc374c91f1d7ffcdf3e0788109ffb30890707f01bfdfee38dfd840990b697da7dbee3b5b801778865a2b99313e20add3a8306e5c774a57127e0fb1782ad3a79d9a59bc9efff93a8e0587fbe052447406492df3d2b41105062d5375f2cf7b1c8f0f4a6c7a5d9a072abd12da56571c5dfe2d2e4277b5459160d2f416b1c3e920809b1df07c08d10abbfdb181f3b3cc4932b9e6e763b0bf85857e56fb25a06995959ca54b2197c8eeac65d9e3e2e3bc150857571e3374102664327198ad5397a746c8ed7ba64b2be299fe92bc33e1523c3104f5c438a4cc5940ec682cd15ff1bddd2f98902e03e51755be3e663a215929426b38148d3ba2f1e241e40d09105e7d49de07776e1b8b7b757e3a408e3a4b7c67d833b76562c80d0d9c1fe07d61d817aa4da567281ecca3910ab48a93ab5edd7f6a8683f1bbab84f4c1d49d8574103aa7fea4c3b3fdbb0b5b0d9b1de09e89002c7d76394b69ec7895d0c718c2e1f3f02f9eca82483d7a4e51a924bb301d3c21b8b67dcb0df6b5f02be7ba4ba947d16a0e802ba10171b3001f749dd0cfec9c24d1fcca7e2059cb2c768c57f1d46006f765c85d56d81c576e8445923619fbf63ffdce848e808e8ad22b8b18c45230a271640eae6254192a4bd314190d1495b631ad3252c7f57bc25ebca76a4b1f9ea2dc9b3a7da4cd4f5c4007cc10277bc67898c731d9412b5dcfb75713ccd563447f9a339ba62c6d05b7dd7fca86a4274c911746a8dfa1877aa960c1a565164cefa0c4f282489b6c6cc7e5c8a8171fedfeb1858ff2c5af4c7f0ea7997e7fa2343fd534ab89cb9478fc7cbda4d439164647dfce2a7989761872ad3e26fa06cd0f501a9ecc53ba082b2359ba6c86595822b2a4fc90a00dcc32181ba31e39f9bdb6998ad40da6f1d94b157f4c4a5780eb89d9f5a5024efe78184bc8d57e2f2605fba38439cf3bb9596e29944921fe88384418e40d3093bc300af9116d8be7bb85058518853f482afedc1a95a59f4e656f2b6e8e909e9241162799aa9b2ed72adad10dc636dccb32ded0d6867e4c6e395e0eebe7d5867221e1658cd4e1be5eb745c7e55c0e257c7cfae8f43c7c2d3107afb91f6977e19aa9e9a08d3c1c0ff16323f7bef3e7d0242475ecb36d335f546198f7af2bd1c9f856713028b608d230d4f87fefbc8ea52892f3b331866465d7d4b9d39d59279fd39e48c02bee6eff98e1423694b5299c31e0e79193fe22bc514a95075acc8277000b1f7af33067567c76c6ba0aca5f4a461725eafecbacbdd2b49d591566fa3e842ae384f6aa740e2ef5166f9a14ada3b702a275d34723e3194d06a474b3a0a7357504b35a922a29f9074b2a4819139c0b16046d85377306b0a2eb9231b6c14", 0x1000}], 0xa}, 0x4) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0xfffffffffffffffe, 0x3e) 02:33:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000340)=0x0) getpgid(r4) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000300)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000680)=0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x10008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x276, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @perf_bp={&(0x7f0000001080)}, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r6, 0xc0206416, &(0x7f0000000280)={0x9, 0xffffffffffffffff, 0x4, 0x8000, 0x10, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x800000000000004) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @ipv4={[], [], @rand_addr=0x2}, 0x8000}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00001fefe4)={0xa, 0x4e22, 0x2, @mcast1}, 0x1ca) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ppp\x00', 0x80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x4000, 0x0) pipe(&(0x7f00000005c0)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000980)={{{@in=@empty, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000a80)=0xe8) getresgid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000b80)) stat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000700)) getegid() getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xffffffffffffff8c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000e40)={0x0}, &(0x7f0000000180)=0xc) getpgid(r10) geteuid() 02:33:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000001, 0x2900) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x5, 0x0, 0x4, {0x0, 0x1, 0x40, 0xc0}}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x5afd60ad, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x1000000002715, 0x0, &(0x7f000033bffc)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) [ 617.648751][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 617.654779][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 617.695202][ T9309] QAT: Invalid ioctl 02:33:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x140, 0x4]}) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0x100) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7fffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x0, 0x8cbb, 0x108, 0x8, 0x0, 0xdfc, 0x9, 0x9, 0x492c, 0x6, 0x7, 0xe0, 0x7, 0x5, 0x8, 0x10000, 0x1, 0x1, 0x8001, 0xff, 0x8, 0x7, 0xffffffff, 0xb2d, 0x5, 0x0, 0x2040000, 0xfffffffffffff000, 0x101, 0x7, 0x40, 0x100000000, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x30, 0x2, 0x6, 0x7, 0x6, 0x80000001, 0x7ff}, r3, 0xc, r4, 0x2) fsetxattr$security_ima(r3, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x5, 0x0, 0x14, 0x101, 0xb1, "8f6423caa4ad597ae02ce6d4f110eb52da2893d623b0cb5d37455bb362584a6fb80dfcb5474b5ed3c1ce17ce6fa26fadb455c78edec175931742ed45c28f06ca195f77e853d9020fa2d7817947ed848884d7f61f87c42f8f04e1b3301bf127c9d958cdadac426b84017cac74468e2fb94d8ddd6022ecebf913d68feb517d997341e38a9afa3159bba918f7129377159eb4e1f0da7a5b7b36d470c7fdc75170b0eb6e9c328a059e0ce41757751b3b53f892"}, 0xbb, 0x2) [ 617.728795][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 617.734625][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 617.743686][ T9309] QAT: Invalid ioctl 02:33:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl(r0, 0xfff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_open_procfs(r2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000540)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80001, 0x0) r5 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x9}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$void(r3, 0x5451) ioctl$KDDELIO(r3, 0x4b35, 0x80) r6 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0xb0, "a52e08f9d3c4f59d08769902a8d544a72b8d9805b046331addf6811cc03d9b62fe5ddaa52931e1cf3a7f98f5934dbced20d120d67971042beb15c13f280fbd72ac40bb3ce7daeff2878228324276e353fe23ca11129ce6c9fd89177988119bca533f117c42b1485eddad131774e6ccc8ed91d645a08a9ee1ea076825cb384ca0e09ff7ffec158508e15588d1898784a12561254997b4887d4f98d8976a6d00bace9b6f0c58e283155300d37d81b17d4b"}, &(0x7f0000000040)=0xb8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={r7, 0xfc7}, 0x8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) setresuid(0x0, r8, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, 0x0) r9 = inotify_init1(0x800) fcntl$setown(r9, 0x8, 0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r10, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7c, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$KDSETMODE(r4, 0x4b3a, 0x8) 02:33:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) open(&(0x7f0000000040)='./file0\x00', 0x100, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x202040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x202}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x7}], 0x20}, 0xfc) [ 617.824990][ T9309] QAT: Invalid ioctl [ 617.906457][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 617.970704][ T9476] ptrace attach of "/root/syz-executor.3"[7235] was attempted by "/root/syz-executor.3"[9476] 02:33:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xfffffcf2) recvmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000300)=""/231, 0xe7}], 0x2}}], 0x1, 0x0, 0x0) [ 618.048734][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 618.054593][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x800000000008000, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(r3, r0, 0x0, 0x10000000000443) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x19, 0x6fd, 0x8, 0xb, 0x4, 0x81}) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000140)=""/148) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 618.123020][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r3) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) 02:33:32 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x80000, 0x0) getpeername$netlink(r0, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0ad21f123c12a41d88b070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r3, 0x20, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x227f, 0x713000) 02:33:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x848008}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x421, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) lstat(0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000200)) 02:33:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) r2 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x5, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) connect$inet6(r1, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000001580)={0x1, 0x0, {0x8, 0x0, 0x0, 0x3, 0x0, 0x4}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) msgget(0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8001, 0x4) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001600)='./file0\x00', 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:33:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0xfffffffffffffffd) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) getsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r3, r1) fstat(r3, &(0x7f0000000080)) 02:33:32 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xffffffa4], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:32 executing program 0: set_mempolicy(0x1, 0xfffffffffffffffd, 0x4f6a) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x408080, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40, @bcast, @rose={'rose', 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) 02:33:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'ipddp0\x00'}}) 02:33:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x600, 0x0) ioctl$KDENABIO(r3, 0x4b36) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000001}) [ 618.727759][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 618.767319][ T9832] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 02:33:33 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x181500, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x12f, 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x980000, 0xff, 0x0, [], 0x0}) 02:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 02:33:33 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) [ 619.043120][T10308] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r3) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) 02:33:33 executing program 1: r0 = dup(0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055", 0x5f, 0x1a0}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f2) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004071b3d7d602f9bcce6e73f8804dfdbefea605f4d66475a19e8c02d6884a88f4c4acd386306d1b6a8f09aca65d9511a5fd174619a04f66551182b1a4f65ff193b3c2c95640a27"]) setsockopt$inet_dccp_buf(r2, 0x21, 0x2, &(0x7f0000000240)="bce8697550abd4ff71c6659bc6119c06d0abd0fc091f906657205e5abeab9a90b21799d2574043002bdb390b44afa4a36c64b0503ed90dd5d0836afd5efd02a93f85dc282506aa4c7525429af83395133937396ab716b041378a7c978564ea069520bfd0ff27b2df5a51b24339b7044d4ac62302240edad7bf97125d2da54ac0b463b9b8cfd644bb779357925c8dfa0e0e4c821f4964e1b684a20f3b3b233492b9948eba4519380b9ef41bec00eba325a40ff11ef74b8a4a30ad3f0bbe60d657223277242327d3244cfa62a5c1da49e8e0746a08f65db620ef43d1245a7e0d286a", 0xe1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000000000000000000200000000000000000000000ffffffff0000000000000000000000000012c301a8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001900000009000000000000000000106cf4aa4ac99e8d000000006c6f00060000000000000000000000010100000000000000000000001000000000000100895fc5d400000012a85f001a4b00feffffffffff04000000aaaaaaaaaa000003cae1e50000007000000070000000a00000004155444954000000060000000000007f0000000000000000000000000080000008000000000000000000000000000000"]}, 0x1a8) r5 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/160) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendfile(r6, r6, 0x0, 0x8000fffffffe) 02:33:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001800)={&(0x7f0000000180)={0x27, 0x1, 0x1, 0x4, 0x1, 0x0, "66ca520b86f0c2f6fc7a61497bd65f7e65af3df758fe4dd6c5d11ccf0782d5e881417ae6d1f8ff2493e38f290957e372c8c3820361af6adf03d7952b27dff2", 0x20}, 0x60, &(0x7f0000001780)=[{&(0x7f0000000500)="fa0889a94096f9caa24c772bf8c2fe6e1c03bcf7e541429ba6f26a079e9a76b30cb90324bbb39e4661c4471ea2572e4f398953b5e0c3cffe758861655e9e61242e8cfde6093e839898bd0136904710814cebf1345bdcf688eeda723418a800f70c89358746b8b2749fb34b82e8effdadfb246e835e638519dc77efc27443893110b44f8d8fc940e34a4bded4a4581eec1b82ed5849321363c771851dc4e2748f193f22ee71f2e02ce070c4fc5bf1ef75e81592a822127e3ce87dc1d1b8f01a5209e8932d0b6bf406b5c1d80fc2cf9930a3df", 0xd2}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000200)="11b693783656e245735657960aa488f8ddf7326e05fe9ffd47108e682521900b5d80468eacfaa558d7abe3256794f65b1f92b0eef2065e5c2d6e828deed25f1d03a49d48c1059e283c3e1b36297776e4e9c17b091bf6647af8e8ca1e2cb4ef6f4c7a092650e3784f947f6c9197ee56208e8af2a53d28d39a93bb9bef1cbe5c0929cfb84c91e879730f502b2d0fb21b39cf62e9a0f69ceb", 0x97}, {&(0x7f0000000340)="70898a05dd72c684301b0caf0a514853390caf4226de42f5a0bfbc20214741a8c940cc00397edba2d40cd5afb9a3aa2ef7b2ee4e67654503291592a055059b32f4826e46ecf2174df78367207d7e4548738d9b68410b86e83d864545c3ab501ab3ebd396d32f", 0x66}, {&(0x7f0000001600)="7e21e2dbd30518ce6350d41fa6027c483d5cc521ac2eefa878e8581ccb20831273dbd6b79172bd7a697f22c9d13c1862f3b1f474419f3abc84bcbf053495f8a6898ec924941f0b74968c53273057bd52b2e41388943e", 0x56}, {&(0x7f0000001680)="cf87019c4f6c887597762548a141d844e3f226a8beda1370669c0ec4cdf4e54d9e9b8a742eabf7bb396e200dcda32815531422b4be803bb534952ab2621c28b9f2f742b80b7782bde3529ebaef3338f7a4f018255ecb8b34a9763437ba8e1cf37477843287ac31e3b9297409c47ef5e49287ae7ccf02f06156a2e2a4ce6c7035a85cf4fc6d864fff8f63d50d42b5099a6b2bdd7776893bf97c2a3f7dafa1905e2e73f099f44a03d96c59ed0879e1b3a4c863dead7bd925238cda965f8e3f45761dbead442e25daae1a7e8034e9ef6276c150831ca3a93031be258c77ca3edfc3e7fa47272882485c6e41b0cc7ba91790a916ddff2351aaf241", 0xf9}, {&(0x7f0000000100)="1e88150dd613ea38e7ea368808c758fceb96163b9e587fdf9382db8d7437736c59", 0x21}], 0x7, &(0x7f00000003c0)={0x20, 0x10e, 0x8001, "f5e670b11a4de195f6a906df"}, 0x20}, 0x20008855) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58f9e1a0309edf766ded2ad1ca13532baeda11b22baac4f65470bc2423012c089d30f4086cff39c81384bd5d6374c52db8f70f61af7453961f836a474062f832f922a2e34bc9acc5d481f9b15060bd1de9e8e4cd5fb1f756a152b6deec52204c02cf0df5cd86471356df"], 0xcb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 02:33:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r3) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) 02:33:33 executing program 2: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x20000000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 619.349912][ T26] audit: type=1800 audit(1551666813.747:243): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17132 res=0 02:33:33 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x100000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:33 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/raw\x00') pread64(r1, 0x0, 0xa53ef65f860f8ac5, 0x80000000014) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)=r0) 02:33:34 executing program 3: memfd_create(&(0x7f0000000100)='ppp1/^/&vmnet1selfwlan1\x00', 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x8280, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x6, 0x0) syz_open_dev$loop(0x0, 0x7968e71e, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000240)=""/115, &(0x7f0000000080)=0x73) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xffffffffffffffff}) syz_open_pts(r1, 0x1fb) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000380)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x82403, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000340)={@remote, 0x7e, r5}) 02:33:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xbd1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}, 0x80000000003, 0xff00000000000000, 0x0, 0x0, 0x9}, 0xfffffffffffffd94) r3 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x3312, 0x0) [ 619.681150][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:34 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x43, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5, 0x0, 0x0, 0x0, 0x6be}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x20, 0x2, 0xff, 0x6, 0x0, 0x8001}, &(0x7f0000000040)=0x20) 02:33:34 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="0fc7f43e650f01c80f060fae8600000f01eeba410066ed66b9b70900000f320fc76cf6b876028ed8b84e0c8ed0", 0x2d}], 0x1, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000001c0)={0xb, {0x2, 0xb52c, 0x7, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}, 0x4e20, 0x1f, 0x4e24, 0x0, 0xa, 0xa0, 0x20, 0x3f, r2, r3}, {0x4, 0x6, 0x6, 0x400, 0x4, 0xaf84, 0x400, 0x8001}, {0xffffffffffffffe4, 0x40, 0x3, 0x5}, 0x4, 0x6e6bbd, 0x2, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4d2, 0xff}, 0xa, @in=@local, 0x34ff, 0x2, 0x0, 0x2, 0x8, 0x3f, 0x9}}, 0xe8) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 02:33:34 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x101) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xac, "6f92dc42f6a57b897690986ba1bf11f117c2ba1d30c4114460133008ce30c80463ffb52dc771ae20c417dc3ecd5b4bb8348398726305025454708a6ee2613ebb7538c105aa23d1e08aac321aa7c1544365f2c801f66606c965584db94c402f50c50c008882b22705f33b0a62793524fa66831f9afdf2245311c3a5297154fec5e4281f5d8d95c762c80aa599c4940778bbbfa7528887962142c1312868b849e3e54716803caa197e7466cd56"}, &(0x7f0000000100)=0xb4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r1, 0x0, 0x7}, 0x8) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video35\x00', 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000200)=0x5) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000240)=0x1) 02:33:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:34 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x6, {0x400, 0x40, 0x5, 0xff, 0x8, 0x200}, 0x81, 0x21e}, 0xe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x1000) r3 = accept4(r0, 0x0, 0x0, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001680)=[{0x0, 0x0, &(0x7f00000003c0), 0x1, 0x0, 0x83d3001e}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7c, &(0x7f0000000100), &(0x7f0000000040)=0xfff4) 02:33:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x128}}, 0x18) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) accept4$rose(r1, &(0x7f0000000080)=@short={0xb, @remote, @bcast}, &(0x7f00000000c0)=0x1c, 0x80000) fcntl$getflags(r0, 0x1) bind$rose(0xffffffffffffffff, 0x0, 0x0) [ 620.166882][T10882] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:34 executing program 1: syz_open_dev$radio(&(0x7f0000000780)='/dev/radio#\x00', 0x0, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x44, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000100)={'bridgz\x00\x00\x00\x00\t\x00\xab\xda\xf0k'}) fcntl$getown(0xffffffffffffffff, 0x9) r3 = dup3(0xffffffffffffffff, r2, 0x80000) r4 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x80000000, @remote}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1c}, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0x40, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='\xe5\xc2\r\x17|\xd5\x94+i\x18./cgroup.cpu/syz1\x00N\xce\xd14\x11\xfcj\x8eJ\x89t\n\xa1z\x02L\x93l\xd4\xf1e\x8d\xe4\x06\x86\x18\x004\xaf0x0, 0x64e, 0x0, 0x8, 0x87e}, &(0x7f0000000380)=0x18) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) write$P9_RGETATTR(r6, &(0x7f0000000680)={0xa0, 0x19, 0x2, {0x20, {0x20, 0x4}, 0x8, r7, r8, 0x8, 0x5, 0x6, 0x1, 0x2, 0x8001, 0x7, 0x6, 0x3, 0x3, 0x142, 0x1f, 0x9, 0x9}}, 0xa0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000003c0)={r5, 0x11, 0x5, [0x3, 0x401, 0xd1, 0x8, 0x0]}, &(0x7f0000000400)=0x12) close(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clone(0x2102001f76, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) wait4(0x0, 0x0, 0x0, 0x0) [ 620.406123][ T26] audit: type=1326 audit(1551666814.807:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x50000 02:33:34 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0xedc0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x200000) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0xffffffffffffff50, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x105000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') open(&(0x7f00000000c0)='./file0/file0\x00', 0x10000, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x2, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000000) 02:33:34 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x200000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) [ 620.526109][ T26] audit: type=1326 audit(1551666814.847:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 02:33:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x1) setresuid(0x0, 0xee01, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0/file0\x00', 0x2000000000000, 0x5, &(0x7f0000000340)=[{&(0x7f00000000c0)="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", 0xfc, 0x8}, {&(0x7f00000001c0)="a57a1a301159b296e90c46264885f9dfd4e78050169e107e0fc943c497f883546ba282fbcf94f070d26b447fef7c7063cb3ef29163ee40d052a3c366528c79e8c3dd4b", 0x43, 0x8}, {&(0x7f0000000240)="7d71ed5f473d7ac92ffd9ff1843fb575494eaa", 0x13, 0x7fff}, {&(0x7f0000000280)="41d014f5b836c31f38cf653c23e9644dafaab0d3cf701d7586d12a425e672f8df74fbf03c2ac2a2be6fd577f85d7681f0d5c8268736cabe4a10a32efedd1d44f6414038d6ad52723b2713187c08e380497cf6570d735a929e721a6ed803c07ea6802e3be577697fec3230e762fc3c0e34c6b4709d8d774c832a3e443cd389a760909", 0x82, 0x101}, {&(0x7f0000000540)="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", 0x1000, 0x100000000}], 0x2080094, &(0x7f00000003c0)={[{@treelog='treelog'}, {@noautodefrag='noautodefrag'}, {@nospace_cache='nospace_cache'}], [{@context={'context', 0x3d, 'sysadm_u'}}]}) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file1\x00') [ 620.638618][ T26] audit: type=1326 audit(1551666814.847:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 02:33:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x20000000000007f) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0xffffffffffffff1a) fchmod(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/loop-control\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe14) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x401, 0x100) utimensat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x100) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000400)=0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000000c0)) r2 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000002c0)={{0x8, 0x7, 0x4, 0x7, 'syz0\x00', 0xfffffffffffff89e}, 0x5, 0x1, 0x1, r2, 0x4, 0x7fc9, 'syz1\x00', &(0x7f0000000280)=['\x00', '\x00', '/dev/admmidi#\x00', '{\'-\x00'], 0x14, [], [0xfff, 0x7, 0x1, 0x9fa]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x50, &(0x7f0000000480)}, 0x10) clock_getres(0x5, &(0x7f0000000540)) [ 620.800943][ T26] audit: type=1326 audit(1551666814.847:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 [ 620.820893][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:35 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x800, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x7, {0x5, 0x0, 0x87d9, 0x7}}, 0x20) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="230000001fffff160065070930565f76"], 0x337) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$NBD_DISCONNECT(r1, 0xab08) [ 620.999936][ T26] audit: type=1326 audit(1551666814.847:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 02:33:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 621.133684][ T26] audit: type=1326 audit(1551666814.847:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 [ 621.190586][ T26] audit: type=1326 audit(1551666814.847:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 [ 621.215400][ T26] audit: type=1326 audit(1551666814.847:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 [ 621.258631][ T26] audit: type=1326 audit(1551666814.847:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10843 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457e29 code=0x50000 02:33:35 executing program 2: r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340), 0x100000a5, 0x81805) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1a}) lseek(r0, 0x0, 0x3) 02:33:35 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) write$tun(r0, &(0x7f0000000340)={@void, @val={0x2, 0x80, 0x1, 0x401, 0x0, 0x7}, @eth={@local, @empty, [{[{0x9100, 0x0, 0x1ff, 0x3}], {0x8100, 0x4, 0x7e16}}], {@arp={0x806, @generic={0x30f, 0x80f3, 0x6, 0x10, 0xf, @random="4b0221166bdc", "d1f0753fc6fedafd54d981b07b6d6bec", @random="2c8731c264d2", "32989c1b6e61418b356b1df6b3874c9d"}}}}}, 0x54) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) get_robust_list(0x0, 0x0, &(0x7f0000000240)) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) getsockname$netrom(r2, &(0x7f0000000080)={{0x3, @bcast}, [@rose, @netrom, @null, @default, @null, @default, @rose, @bcast]}, &(0x7f0000000100)=0x48) r3 = add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="d09599aea73a17ac1bee742e7819454863d719301107e5bda69aed6c93d1b822cddee07abac3c457248e715907729844e40edcfa1a9817cd522e5ebb35b3c51d62a44ad9e5f51fedbaa9d237b56eec72df6c234e7b123a591ad4ae492bcc3071e986f4553d050cc0e141ca53c29d68fa6dee75558edaddbd50a1466879f1754c0ba66542071657", 0x87, 0xffffffffffffffff) keyctl$clear(0x7, r3) 02:33:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) prctl$PR_GET_DUMPABLE(0x3) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x400) pkey_free(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x400000) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000040)=0x3) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/182) 02:33:35 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000003, @broadcast, 'bridge0\x00'}}, 0x1e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000780)=@can, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900), 0x37b}}, {{&(0x7f0000000c40)=@can, 0x10, &(0x7f0000001e00), 0x21a, &(0x7f0000001e40), 0x32}, 0x2}], 0x2b8, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x10000) [ 621.328750][ C1] net_ratelimit: 8 callbacks suppressed [ 621.328758][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 621.334412][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x8111000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x1000010000806}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x305) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20100) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000001c0)=0x7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = getpid() openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000500)='ns/pid_for_children\x00') r3 = socket$packet(0x11, 0x0, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect(r3, &(0x7f0000000280)=@rc={0x1f, {0xfff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0xffffffffffff8001}}, 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, 0x0, 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r2, &(0x7f00000015c0)='ns/net\x00') syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7ff, 0x280801) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000003c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x12) [ 621.431184][T11163] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25, 0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x3}) write$FUSE_IOCTL(r2, &(0x7f00000000c0)={0x20, 0x0, 0x3, {0x2, 0x10000000000004, 0x240000000, 0x1f}}, 0x20) 02:33:36 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x3f00000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, 0x0) 02:33:36 executing program 1: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[]) chdir(&(0x7f00000003c0)='./file0\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x5d) r2 = getuid() quotactl(0x7fffffff, &(0x7f00000000c0)='./file1\x00', r2, &(0x7f00000001c0)="c6bac6244d6cb67dda77bd699a970a87b16ebfc9de5b493222eea4960a1813e75d51efc146f80cb7ccae542646d25e568162553aa77f75a7ad83763e99785285697725818fcbb320a57c71c3b211809ad8959307ba1db037fda784d1fb87333efbb45e08898e73fde8cfb47ee0510f22e032f09badaa12744df6282b6e29a926a93c0e9a04f64e7116355c58b651c33a9cf64abffda1667c9808a876c3ae1dae3e7a64818066c960a72639eb0b5bbf8d175f0d11f3fd07c82850abfd75a488c68716512852633c77b626326a5b2af0a551259c8bc02e2c0c") setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x14abf3f9, 0x1, 0x101, 0x23, 0x5}, 0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) 02:33:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 621.808740][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 621.814581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 621.845080][T11599] overlayfs: missing 'lowerdir' [ 621.888780][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 621.894634][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:36 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000280)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x2, r1}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x10) 02:33:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:33:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 622.078955][T11723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 622.208938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 622.215304][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:36 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='rose0\x00') r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x600000) r3 = getegid() setfsgid(r3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000100)) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r4, 0xd00, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="6dc24dde9217ab7551f2d5bd17b1d1c8"}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x4) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) [ 622.389550][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:36 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x4000000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:37 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x20, 0x0, 0x3}}, 0x14) 02:33:37 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x4, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000002200)={0x0, 0x0}) r3 = syz_open_dev$midi(&(0x7f0000002480)='/dev/midi#\x00', 0x200, 0x200000) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000024c0)) recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/198, 0xc6}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x3}, 0x9}], 0x1, 0x0, &(0x7f0000002240)={r1, r2+10000000}) pread64(r0, &(0x7f0000002380)=""/224, 0xe0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000002280)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000022c0)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000002300)={r5, 0x20, 0x400000000080}, 0x8) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000002340)) 02:33:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 622.755715][T11931] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:37 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40040000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:33:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="000127bd7000fedbdf25010000001c00070008000100", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="2c00070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="1c00070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100000000000c00080005000000000000000c00030005000000000000000c00040004000000000000000c0004000900000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100000008}]}, 0x30}}, 0x0) 02:33:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0xe500, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) 02:33:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 623.293384][T11921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 623.339701][T12091] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 623.380467][T12091] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 623.408769][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 623.414880][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000001340)=[{&(0x7f0000001240)="1d", 0x1}], 0x1) setsockopt$sock_timeval(r1, 0x1, 0x13, &(0x7f0000000040)={0x0, 0x2710}, 0xfffffffffffffef6) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x8000, 0x3, 0x1ff, 0x1e3, 0x4a8e}) write$binfmt_elf32(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x1f, 0x81, 0x0, 0x800, 0x2, 0x3f, 0x9, 0x164, 0x38, 0x81, 0x7ff, 0x3c00000000000000, 0x20, 0x2, 0x0, 0x800, 0x3}, [{0x7, 0x0, 0x9, 0xfffffffffffffffd, 0x10000, 0x21, 0x3}, {0x1, 0x5, 0xfffffffffffffffd, 0x7, 0x0, 0x5, 0xffffffff, 0xaa}], "addb803458b15a988508ee19b95e9fb5f62e617f1329ba8efea9a96fbee15939feb134ee3440aaf0d2498ce903352f17e699ef46f8a368c34e640153c0c6b0d8b8fb14f39842b76a53f0d4d28db1ac4f042e73e1647cf49db75492a55fb70b55efbf6fec9255157272e0de0d919277a580748797f4879da1a9890693b47dfa6cf2b261efa0917ad3b04b92358a618e344068f223e97eadc7be4d0817e0f9b3d3e46ed1b14dc126593606ff3b15ebde832cc9ca1a068240bd3b7a3bad973130eabf594fd481628367483740b848bff777ab84703b63d09e80f68e93b77fedd3424f84cf17c3bc1932fe", [[], [], []]}, 0x461) recvmmsg(r1, &(0x7f000000a780)=[{{0x0, 0xfffffffffffffdd6, &(0x7f0000000400)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x3}}], 0x112, 0x0, 0x0) 02:33:38 executing program 0: utimensat(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={{0x2, 0xffffffff}, {0xffffffffffffffce, 0x1}}, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xea, 0x20000) [ 626.369213][ C0] net_ratelimit: 12 callbacks suppressed [ 626.369224][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 626.381810][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:41 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xa4ffffff00000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:41 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) read(r0, &(0x7f0000000300)=""/250, 0xfa) 02:33:41 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101080, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000180)="ab3f40ee632b2ea1a380fd8c13562e60377f6ab0757ae3d2321cafc3466db8d7cc71bffdc1c19b8152506ce3ba7f4f3da001ad279f8f0f13cc60cfba560cf2d8cf4754290769126e8222b9c9a24f9a3d56e653f4e9baab051fe98c4fbb585abeb2f69c3516b61c992898cdbcd720faf059e158eb7170f6d21b89ce434ba380f1133d894144fa0f3ec4e9df796adfebc0dc66ec71ce1151246b5e41facf51acb374591ceb8208f0f803daa1e727986574e91ecfdc6aa770b4939649e9c5e2eb704e8eba713889d38874b500f9844ab54ac8533e0c6a0485bccb6f33c21dbd701db4edcd890f9b521754f27955ad6eee4dad24d27ad964d5253f93", 0xfa) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000500)=r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$TIOCSCTTY(r0, 0x540e, 0x9) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7, 0x6, 0x3f, 0x88d, 0xfffffffffffffe00, 0x1000, 0x9, 0x7, 0x10000, 0x7fffffff], 0xa, 0x8, 0x9, 0x8000, 0x1ff, 0xfff, {0x100000000, 0x5, 0xfff, 0x7, 0xa31a, 0x40, 0xf8, 0xe072, 0x5, 0x401, 0x1, 0x7fffffff, 0x1, 0x0, "5540962202cc025ea6e71af6aab5a578e7afe0ca93d4276e1f0f1867a4ccf3d0"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x2, 0x9a01, 0x100}, 0x2c) openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ashmem\x00', 0x80, 0x0) 02:33:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 02:33:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 627.205994][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 627.420639][T12416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x800000000000b) epoll_create(0xb357) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000860], 0x0, 0x0, &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'mond_slave_1\x00', 'vcan0\x00', 'syzkaller0\x00', 'bpq0\x00', @local, [], @dev, [], 0xe8, 0xe8, 0xe8, [@mark_m={'mark_m\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1f0) 02:33:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) 02:33:41 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@isdn={0x22, 0x0, 0x0, 0x0, 0x7f}, 0x80) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) 02:33:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000100)) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000200)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000000c0)=0x5) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000300)={0x1, 0x5d, "d54c10881e519ad08c8f2a5f561ffa391917c1d00430d7404433e05e81ab234e0f7132cbf504c88d1427bb8cb6d593e416bdfd53edb4572aa3a9cbf194eee7249e8984989c84c10ecbb6f51f3f64eccfd28fdb2ea7c1ef865e89512a81"}) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000080)=0x1, 0x0) close(0xffffffffffffffff) 02:33:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:41 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) [ 627.568834][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 627.574917][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 627.758754][T12502] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}], &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f00000004c0)=""/4096, 0x0, 0xfffffffffffffffc}, 0x48) 02:33:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:42 executing program 0: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) tgkill(0x0, 0x0, 0x0) exit(0x100) [ 628.049268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 628.055240][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:42 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x40, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x29, 0x4, 0x0, {0x5, 0xfffffffffffffffa, 0x1, 0x0, [0x0]}}, 0x29) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)=0x9) r2 = socket$inet(0x2, 0x3, 0x19) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x5}}, 0xe8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000280)={0x3, 'team_slave_1\x00', 0x4}, 0x18) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000001c0)) [ 628.129899][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 628.136535][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 628.448848][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 628.454916][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 628.489763][T12615] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 631.728745][ C1] net_ratelimit: 8 callbacks suppressed [ 631.728754][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 631.740265][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 632.208746][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 632.214588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 632.288798][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 632.294614][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 632.608818][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 632.620385][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000340)={0xed}, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000380)={0x100, 0x7, 0x2, 0x9, 0x4, 0x9, 0x80, 0x5, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000400)={r3, 0x5}, &(0x7f0000000440)=0x8) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r5}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000500)={0x0, @reserved}) write$UHID_CREATE2(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3000200000000000200000002000000ffff0000b2a85fa762e26c1c6b1244368967c7e844a01c52ac18691b223e18fc0ba680c0078d5913163fe26325b8c0c181690f847da5564953af010618148f99af0fa09dd7e94891b350f6ab562248d87c7b038b06078251ab3b692d475e9fad39bb780856af55e0bf9654651682958ef5922025df8611bb2abdc33b00db6cfc2a40be088544d18547c82204860930dcff8dfb3538f50c4831a3da252024c9b621bfcd8af864f15ef58dd481ae1686398e729577fe9f78afb34c9bd7b90460c1d21871794c74b53917bae43742d57ef017de7aa1e727acbae743884bc8bb82370c8a2f90249d7f49d10e6c7b76db4480fc3e6f4d4f3fe4c36b30f8e5519951820da40c"], 0x20b) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000280), 0x4) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000004c0)=r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x800, 0x8000, 0x7}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000300)={'bpq0\x00', {0x2, 0x4e20, @remote}}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) r6 = fcntl$dupfd(r1, 0x3, r0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xc0, r7, 0x404, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffff62}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x55b02db5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) unshare(0x40000000) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000480)={r4, 0x100000001, 0x80, 0x1ff, 0x0, 0x763}, 0x14) 02:33:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:47 executing program 1: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r0+10000000}, 0x0) r1 = gettid() tkill(r1, 0x1f) 02:33:47 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3f00], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 633.122978][T13066] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:47 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffa) io_setup(0x3, &(0x7f0000000400)=0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000080)) io_getevents(r0, 0x8, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000440)={0x800100f, 0x1000, 0x3}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x64043a76, 0x34, 0x6, 0x3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 02:33:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 633.509614][T13066] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 633.808740][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 633.814573][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:49 executing program 3: r0 = socket$kcm(0x10, 0x925035b2f3d7ae2c, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002200815fe45ac187185095cf0600b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) 02:33:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x49}, 0x22b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x11, 0x0, 0x77fffb, 0xa, 0x10020000000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x49000000]}, 0x2c) 02:33:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:49 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:49 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) socket$inet6(0xa, 0x6, 0x2693) splice(r0, 0x0, r2, 0x0, 0x18, 0x1) 02:33:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0004063fc90000ffff030000000016940007a90f3d89876e030037702d8fb12ed90920515e8275dd6f6827b94bbb98b755942c040000710e13"], 0x39) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x6081, 0x9}) [ 635.526475][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:50 executing program 3: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000015c0)="8a30da4a9d5281b92f0cef4bef82fbe90c0c423bf52569ee41fa6098d80253cd0ee8b2a6afe4d1b857264878938c24e83e0b76abe68bf4183a77ae4a3216ec62c50984ff040397cf5bfb3f98bb316e588708fb5702e5d5e36581d5dcd2498a73b0f49f30d28b430aac8c271312c4f3ce67548ca931bc93ba0f7258507650f928fe441013bf7ac71a44d0cc3e45f0641e547a50090000000000000017a801ab283e76e7c9792586c4d646f58046e9c130feecd2284fb3f8f3b70a4b1e022078b92302b8192e651e76ad7732b0d30e3a717495481b3b511b91e57418104ebfeb0562a6e73c299fb8aeaa4f3f16319930c99700") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000500)={0x2, 0x8}) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000280)={0x3, {{0x2, 0x4e24, @broadcast}}}, 0x88) fchdir(r1) r2 = open(&(0x7f0000000240)='./file0\x00', 0x141042, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) stat(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000440)='/dev/loop0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)='fuseblk\x00', 0x2000004, &(0x7f00000019c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read'}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/loop0\x00'}}, {@obj_role={'obj_role', 0x3d, '&!['}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/loop0\x00'}}, {@obj_role={'obj_role', 0x3d, ']cpusetwlan0md5sum'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'fuseblk\x00'}}, {@uid_eq={'uid', 0x3d, r5}}]}}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x80469, &(0x7f0000000640)=ANY=[@ANYBLOB]) write$UHID_INPUT(r2, &(0x7f0000001b80)={0x8, "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", 0x1000}, 0xffffff9a) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) fsetxattr$security_smack_transmute(r6, &(0x7f0000000780)='security.SMACK64TRANSMUTE\x00', &(0x7f00000007c0)='TRUE', 0x4, 0x0) [ 635.792208][T13653] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) [ 636.623416][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 636.623432][ T26] audit: type=1804 audit(1551666831.027:313): pid=13729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir535207350/syzkaller.JZAOHT/857/file0/file0" dev="sda1" ino=17214 res=1 [ 636.669999][ T26] audit: type=1804 audit(1551666831.067:314): pid=13729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir535207350/syzkaller.JZAOHT/857/file0/file0" dev="sda1" ino=17214 res=1 [ 636.768829][ C0] net_ratelimit: 12 callbacks suppressed [ 636.768837][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 636.783558][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000000, 0x31, 0xffffffffffffffff, 0x0) 02:33:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 02:33:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xde25, 0x4000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) fanotify_init(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) write(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000540)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 02:33:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:52 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) [ 637.868170][T13762] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 637.968716][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 637.974597][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:52 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x80004) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000640)={@local, 0x0, r2}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') socket$inet_sctp(0x2, 0x5, 0x84) fdatasync(0xffffffffffffffff) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000100)={0xe, 0x2, 0x5, 0x7, 0x77, "b4a40ca71169e883b40bef064cb638445443eded7c9d67ffa52a35ab74e0da32ea84da90772ca6c2f4354db60e09d40cfc456382a57e53b50e60499aca67db26f949295320b1b24c7fd0002a18308142268db9928ae83fd3a5ccf632b66865ae035fc11a6a1b2631065fb902498a0a011a420f61581675"}, 0x83) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(r3, 0x1, 0x3d, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) [ 638.159992][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) 02:33:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) prctl$PR_GET_TIMERSLACK(0x1e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000500)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80}, {0x3, 0x715b, 0x3, 0x7d88, 0x1, 0x0, 0x0, 0xe82}, {0x5a, 0xfffffffffffffffd, 0x100000001, 0xffffffffffff4b25}, 0x1f, 0x0, 0x2, 0x0, 0x3, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x4, 0x0, 0x3, 0x7, 0xffffffffffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x9, 0x200240) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000480)={0x5, 0xf7, 0x10001, 0x180000}, 0x8) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0xfff}, 0x2) r4 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000640)=@sack_info={0x0, 0x1f, 0x100000000}, &(0x7f0000000680)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000006c0)={r6, 0xf9c, 0x6, [0x400, 0x9, 0x3, 0x10001, 0x0, 0x0]}, 0x14) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x401}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000004c0)={r7, 0x80000, r3}) ioctl$DRM_IOCTL_RM_MAP(r8, 0x4028641b, &(0x7f0000000600)={&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x5, 0x8, &(0x7f0000ffe000/0x1000)=nil, 0x8}) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x201, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) 02:33:52 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 638.448762][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 638.454636][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 638.474410][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 638.540272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 638.547212][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x59, 0x4, 0x1f, "4c2137bb6b827b20bf458728439ab09e", "0eab335f521447c00026dc147a56d9d0fd76e6784ad0c2b43ab5e81670daa112a3725fb1f9f643aebb0851ca2d1823394786aca21d1afd44fd1aa97640d89371b8c84d76"}, 0x59, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x24, 0x2d, 0x411, 0x0, 0x0, {0x0, 0x0, {0x2}}}, 0x24}}, 0x0) 02:33:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 638.779934][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 638.849847][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 638.856336][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000040)=""/95) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002780)=@can_newroute={0x1c, 0x18, 0x301, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x8}]}, 0x1c}}, 0x0) 02:33:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r1) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) 02:33:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:53 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3f000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x80000001, 0x8, 0x80000000, 0x8, 0xa0, 0x0, 0x0, 0x2, 0xaa23, 0x0, 0x0, 0x16, 0xffffffffffffffff, 0x0, 0xdb2], 0x106000, 0x100001}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) 02:33:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x800) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000180)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000040)=0x1) fremovexattr(r3, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00') ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000000)={0xfff00000000000, &(0x7f0000000240)="90ce6549f2510e244ec7f3e2bcade34d20b7b799240d79903766707660b161c011246464f228333d8f5a4cf7abb6ca9e2c50158c2d54f3ecc3e9154065389e9808966543112ec1e030782107efb923e91608b472666ede67922c7ad07f176fc36a01290b1a43ca0be149abed7f882a9c3a640dd587f587d8e15c01f53e81ab828187f52b2aa43b0fcfd27c6cd940f67574cd331c123aaed6f0eef9eac45aa79a9993"}) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x9, 0x0, {0x4}, {0x0, 0x100000000}, @cond=[{0xff, 0xffffffffffffff81, 0x3, 0x4, 0x5, 0x78}, {0x7, 0x9, 0x401, 0x1, 0x68c3cd60, 0xe8d}]}, {0x0, 0x0, 0x0, {0x0, 0xe3}, {0x0, 0x7c79}, @ramp={0x0, 0x0, {0x0, 0x0, 0x7}}}}) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x9}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 02:33:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 639.500373][T14352] Unknown ioctl -2147335391 [ 639.513944][T14352] Unknown ioctl -2147204316 [ 639.531669][T14289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 639.533055][T14353] Unknown ioctl -1072676064 [ 639.560168][T14352] Unknown ioctl -2147335391 02:33:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x200000) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2000000000f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x300}}) 02:33:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) [ 639.691649][T14289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = getpgrp(0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x8, 0x80000000, 0x7fff, 0xff, 0x0, 0x5, 0x20041, 0x3, 0x4, 0x33264d1c, 0x1, 0x45a8, 0x2, 0x5, 0x7, 0xfffffffffffff9b1, 0x9, 0x8, 0x5, 0xcb33, 0x50000000, 0xf241, 0x7, 0x3ff, 0x2, 0x100000001, 0xfffffffffffffffe, 0xe, 0x6, 0x7f, 0x6b4c3da, 0x0, 0x7e4, 0x5, 0xfff, 0x6, 0x0, 0x2, 0x7, @perf_config_ext={0x3dc, 0x2}, 0x0, 0x6, 0x6, 0x1, 0x4, 0x1, 0xffffffff80000001}, r3, 0x8, r4, 0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100080c10000000000001400000", 0x58}], 0x1) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000180)) 02:33:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:54 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000008009375, &(0x7f00000003c0)="010000000000000081") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8400, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x101, 0x2, 0x9], 0x3, 0x10001, 0x9, 0x2c, 0x4, 0x7, {0x5, 0x2, 0xfffffffffffff707, 0x2, 0x5084, 0x5d0, 0x963, 0xffffffff80000001, 0x6, 0x20, 0xffffffffffffff00, 0x7, 0x7, 0x4, "708e6b7baf5ce627102fc4a4203a73d875930a915da7e32a6b97106d95147c8b"}}) 02:33:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 639.835500][T14377] autofs4:pid:14377:validate_dev_ioctl: invalid path supplied for cmd(0x08009375) [ 639.922645][T14377] autofs4:pid:14377:validate_dev_ioctl: invalid path supplied for cmd(0x08009375) 02:33:54 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x40000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:54 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3bc, 0x20000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) rt_sigtimedwait(&(0x7f0000000180), 0x0, 0x0, 0x8) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x80) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000080)) ptrace(0x4206, r2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth0_to_hsr\x00', 0x10) 02:33:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:54 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="24000000100001000000fd946fa2830020200a0009000300001c85680c1ba3a20400ff5e28000000090affffba16a0aa1c0009c001da5a80d1090000000000000029090000000cd37eaa0e9e", 0x4c}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x3, 0xfffffffffffffffb, 0x1}, {0x3, 0x3, 0x3, 0xfffffffeffffffff}, {0xffffffff, 0x0, 0xc00000000, 0x4}]}, 0x10) [ 640.159308][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.215250][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:33:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) ioctl$sock_ifreq(r0, 0x8915, &(0x7f00000002c0)={'ip6gre0\x00', @ifru_addrs=@can={0x1d, 0x0}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000300)={@ipv4={[], [], @empty}, 0x7a, r2}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x8c, "86acef040d8bf3a7006e70d5af27e1ee11c327c0bdd3fcdaf5f75e978fca7aa0157f9f707330da47f8b1a6cafccbe615804482ff2d94fdc0fd3541483cd60f190fbf23b1ee6c9a8ab25106d6ffca0100af74ad036bd395fb099c375bd2833788658ce334de1136a745b6d3487f3ac1363236d62e8ba5b7531d9a0329e4faeb22c4d39dddbc33160edbd58c1d"}, &(0x7f0000000140)=0xb0) 02:33:54 executing program 3: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e000000120081aee4050cecdb4cb90425485e510befccd77f3e9cf0758ef9000600b0eba06ac400060003000000", 0x2e}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x2, {0x2, 0x4e21, @broadcast}, 'gre0\x00'}) [ 640.345859][T14614] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:54 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:54 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x140) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac1414aae0000001010000000600000000000000ac1414bbac1e0001ac14141a1000004bac1414aa"], 0x1) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000340)=0xfffffffffffffcd4) stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000780)=0x9, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000640)=0xe8) mount$fuse(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f00000002c0)='fuse\x00', 0x4, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'SEG6\x00'}}, {@uid_lt={'uid<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x1) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1) r6 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) r7 = open(&(0x7f0000000080)='./file0/../file0\x00', 0x2, 0x20) eventfd(0x48) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f00000000c0)={{0xf6a3, 0x7fff}, {0x80000000, 0xfffffffffffff032}, 0x2, 0x0, 0x7ff}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x20000000000000) [ 640.613284][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x8001, 0x400200) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x40, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) r7 = accept(0xffffffffffffffff, &(0x7f0000000240)=@vsock, &(0x7f00000002c0)=0x80) r8 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x4, 0x60100) r9 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x33, 0x80000) r10 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x204000) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x78, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000100)=@llc={0x1a, 0x543, 0x3, 0x0, 0x0, 0x0, @random="16b29a3288a8"}, 0x80, 0x0}, 0x0) prctl$PR_GET_DUMPABLE(0x3) 02:33:55 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:55 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xa4ffffff], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:55 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:55 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffff, 0x140) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) ioctl(r0, 0x40084149, &(0x7f0000000080)="615a01d5dadf1be3e666c1bc3c9606ee657a2b4c0ac8aeb098e3cff44bf584ddd6d3b756558dd7a8d268dee95e85a449ada33eb9e4ebe1be92e585ffcd9a543dae9a64bc57793c9a89d60ff924e68a0f7103470133561807f6eada159b01ddb412b9cec0b7c469786e0f92c493f2c295c5638112a14c275cc170cee5374d59d891ee4d1b") [ 640.956503][T14857] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:55 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$unix(0x1, 0x801, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) socket$vsock_dgram(0x28, 0x2, 0x0) 02:33:55 executing program 1: add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="a38992aeaa030c4db3ac7d048c9b98cfbd8ec1774c", 0x15, 0xfffffffffffffff8) request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='\\.(\x8dmime_type*GPLppp0-+[-\x00', 0xfffffffffffffffd) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="4121ed3bc4536bfa74ea8cb4a9a358e46837c930248aef00d6a5ba87ba3a9bc936b2c3b4e6658e2408565e3eeebcc0eece1a5389a8d5ba6867fbe6e58610e616502646777b53883cccabeb18f3b910db43fd156f7474f0d1121ed856b8ffa47be36804fa673884fd35f013cfd3befda22039f8311e3e66d48cc0f23bd3884237850016b7f035ccf1e87afb47c628582313fd501c08e22a2060f1c394a470b88c7d261224a152d2ec207af337709ee9406bbc2a5754a64285e8b033d7785de3cf89313a787a86ea12605e58ea8c", 0xcd, 0xfffffffffffffff8) r0 = request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='proc@GPLsbdevuserselfvboxnet0em0wlan1,}+wlan1\x00', 0xfffffffffffffffe) add_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="f360487dfa4be396dba6efa50f6ee74bcda5344f291b296387f19d4fcebca3221c17d47bcb529382280138d5b07bdf63e83dedb117b56cc5024b99a37afdc2b53da3ee2987a6bdde531a428f1a75129c6d123b50bb9eb489977a005e63303069421352a889", 0x65, 0xfffffffffffffffa) r1 = add_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="d4cc4ba28f6f83872896334d51e0a825c6", 0x11, 0xfffffffffffffffe) keyctl$dh_compute(0x1c, &(0x7f0000000880)={0x0, r0, r1}, &(0x7f0000000600)=""/240, 0x352, 0x0) 02:33:55 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) 02:33:56 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xffffffa4], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:56 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000440)={0xc021, 0x2}) r3 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) sendmsg$nfc_llcp(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x27, 0x0, 0x2, 0x7, 0x3, 0x1, "b1fe2ea2b7b80f8fbec17f3b7c0f8c6e168610cfcf9311d2eef92a987863350c44e3ce4c35b6ec4face9be2e2bc2d16c6daf9e0021f9136209cc578ba722fb", 0x29}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000080)="acc815c1233c7c14318cb68da1", 0xd}, {&(0x7f0000000200)="14c42d69a21330dd35843ccadfc7f191d1ba2eca7f40aaa1c453e958f5690617e7ed23762262642583bbcca6257b47d9f6b402223e5d01b8fc5107daa0ec3b8c236d782399", 0x45}], 0x2, &(0x7f00000002c0)={0x58, 0x0, 0xe2, "00e1fc4449b64050586379ef00c36b73841a7ed3eb47caf2a4490b4b3c4085c59e5dc168c63b87cd1117b655db105e4bebae1fc0601c966c5f18fbc98b288489c76108"}, 0x58, 0x80}, 0x400c090) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r1, r1}, &(0x7f0000000740)=""/243, 0xf3, &(0x7f0000000700)={&(0x7f00000001c0)={'sm3\x00'}}) 02:33:56 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0xfffffffffffffe29) vmsplice(r2, &(0x7f0000001600)=[{&(0x7f0000000440)="62f56b8de134341d5bcfad84a07869dd", 0x10}], 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r1, 0x0, r4, 0x0, 0x1ea71, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$netrom(r4, &(0x7f0000000480)=""/4096, 0x100d, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0xf5, 0x10001, 0xda}) 02:33:56 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:33:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:56 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1000, 0xffffffffffffffff]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xbd1b) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x418, 0x120, 0x288, 0x120, 0x0, 0x288, 0x380, 0x380, 0x380, 0x380, 0x380, 0x4, &(0x7f00000000c0), {[{{@ip={@remote, @remote, 0xffffffff, 0xffffffff, 'bond_slave_1\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x40}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set2={0x28, 'set\x00', 0x2, {{0x101, 0x100000000, 0x1}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0x16}, [0xff, 0xff000000, 0xff, 0xffffff00], 0x4e22, 0x4e24, 0x4e20, 0x4e20, 0x9, 0x1, 0x93c, 0x1, 0x1}}}, {{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@inet=@tcp={0x30, 'tcp\x00', 0x0, {0x4e22, 0x4e22, 0x4e24, 0x4e24, 0x22, 0x80, 0x0, 0xf}}, @common=@set={0x40, 'set\x00', 0x0, {{0x8, [0x7, 0x9, 0x8, 0x20, 0x0, 0x8001], 0x8, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x60, [0x8, 0x0, 0x0, 0x7, 0xc4, 0xfffffffffffffe00], 0xffffffff, 0x8001}, {0x3e, [0x6, 0x40, 0x7ff, 0x60, 0x3, 0x9], 0x7, 0x3}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x800, 0xff, 0xff, 'gre0\x00', 'bpq0\x00', {0xff}, {0xff}, 0x31, 0x1, 0x10}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7, [0x6, 0x80000001, 0x0, 0x3f, 0x7, 0xffffffffffffffe1], 0x0, 0x9}, {0x6, [0x9, 0x2, 0x0, 0x61, 0x9, 0x1], 0x8, 0x7}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 02:33:56 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x241, 0x5110feb3d336bf6c) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000240)={0x1000, &(0x7f00000003c0)=""/4096}) [ 642.128730][ C1] net_ratelimit: 8 callbacks suppressed [ 642.128738][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 642.140391][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:56 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:56 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x100000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x204044}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0xffff7fffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00002c5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x80) write$P9_RLOCK(r5, &(0x7f0000000040)={0x8, 0x35, 0x2}, 0x8) 02:33:56 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:33:56 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x80002, 0xffffffff00000026) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0xfffffe94) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x1, &(0x7f0000000700)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000200)={0x9, 0x1, {0x3, 0x0, 0x7, 0x2, 0x7}}) socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4000, 0x0, 0x7, 0x0, 0x0, r2, &(0x7f0000000200), 0xfffffdcc}]) dup2(r0, r1) rt_sigtimedwait(&(0x7f0000000080)={0x7}, &(0x7f00000000c0), &(0x7f0000000140), 0x8) 02:33:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400, 0x0) pread64(r1, &(0x7f0000000180)=""/207, 0xcf, 0x0) 02:33:56 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 642.608812][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 642.614732][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 642.650787][T15356] delete_channel: no stack [ 642.688779][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 642.694665][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 642.740698][T15355] delete_channel: no stack 02:33:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:33:57 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x280201, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000001c0)={0x4, 0x8, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x1, 0x9, 0x6a, 0x4, 0x100, 0x6aff, 0x5530, 0x5, 0x100000001, 0xffff, 0x4}, 0xb) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280)=0x75, 0x4) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x3, "896061c62718940ca10bcf94cd7f363fc886856ff0d017095d04cdc65c5962ec", 0x2}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0xfffffffffffff000}, 0xb, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffff9e000a000200aaaaaaaaaa8a0000104313e683ab4b7b7d3e17059ee68d3f96cb4089e1ce535cb22f85590d6b310c32053fbc3472225543afab00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) 02:33:57 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) 02:33:57 executing program 3: clock_getres(0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x800) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280)={0x6, 0x0, [{0x0, 0x1000, &(0x7f0000000040)=""/4096}, {0x4000, 0x1000, &(0x7f0000001040)=""/4096}, {0x6000, 0x5a, &(0x7f0000002040)=""/90}, {0xd002, 0x4a, &(0x7f00000020c0)=""/74}, {0x110002, 0xe5, &(0x7f0000002140)=""/229}, {0x16000, 0x34, &(0x7f0000002240)=""/52}]}) 02:33:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:57 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x200000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 643.015204][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 643.021085][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:33:57 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:33:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x0, 0x5}) 02:33:57 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) [ 643.294772][T15605] __nla_parse: 5 callbacks suppressed [ 643.294782][T15605] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x40000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x20000000000000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x10000, 0x4) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x1, 0x7fffffff}) r1 = geteuid() r2 = request_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='security.SMACK64MMAP\x00', 0xffffffffffffffff) r3 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x2800000000000000, 0x10100) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000300)={0x6, 0x1, "97a85e00fc9d07cc8bce86037e9261956e69b3b48407d87e8893be55fe97d30f", 0x6, 0x10001, 0x1, 0x6, 0x8}) keyctl$get_persistent(0x16, r1, r2) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f00000000c0)='@/\x00', 0x3, 0x2) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x20002, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f00000001c0)={0x8000, 0x9f, @value=0x7f}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x0, 0xb012, r0, 0x80000000) 02:33:57 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:33:57 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10000, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000740)={0x0, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000001c0)=0x84) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045002, &(0x7f0000000580)=0x100040000) getsockopt$inet_mreqn(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f, 0x100b}}, 0x20) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$bt_rfcomm(0x1f, 0x1, 0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x766, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) clock_settime(0x3, 0x0) 02:33:57 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) 02:33:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000f8ffffffffff17001200080001452c14d30b54c049e9184f806044f00076"], 0x1}}, 0x0) [ 643.585857][T15491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:58 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3f00000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000067d25a16e85acc8c00fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="04000000008004000800110002003fc6"], 0x3}}, 0x4000) 02:33:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) 02:33:58 executing program 3: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff7, 0x9, &(0x7f0000001440)=[{&(0x7f0000000080)="3411777f", 0x4, 0x7}, {&(0x7f00000000c0)="920f2372b1687ff868", 0x9, 0xe6}, {&(0x7f0000000100)="5d8706e1e1bb727ce0de5e63bdbd817215569dda98f19ed837d61340297ac937871f0ca5ca6a2c29d26942b3cb75eba3b19dbba36515ece7e7bdaf0c77e45805bdefd64a31fb8a198aad5180cef021e4f1db77acd6f715100eca0ecb", 0x5c, 0x9}, {&(0x7f0000000180)="cf8e", 0x2, 0x6}, {&(0x7f00000001c0)="77fa7ea0604466053c38cfe627030c065890b287e051898ba162094a8b04926ac3e8413e3f3c67aabf3e96cd9a5689482970fb7da37e4f2cce445a18467393a643e92255c46f9eb9877cb94a51e527961d43110ed7fe34286eaddb192ffb9d1bb2a0deda804516432704004d7e3a8483b16b9d8114cc13694a90256d33dd8e33a6ef4b40ec9f75f08a4dbfdbeb2dc9f1abd8f34d2e55d2b66c233f19a692563b75594451efbf50e42414c2e0259260f5b91460c49ccf854ceb5bbfd051d7da2289b7a6ff2eb2c2240594e8f40b326511caf9242db850d7e575f9c082424678c36bdfcdf00d0f3949c6748fb6196931a06549", 0xf2, 0x8000}, {&(0x7f00000002c0)="967af8eab92de169d5e8ec854822232ea0f3eceee9addf102938aa5159cd389e9aa9cf82b114be5fff194a", 0x2b, 0x4}, {&(0x7f0000000300)="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", 0xff, 0x401}, {&(0x7f0000000400)="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", 0x1000, 0x8ea}, {&(0x7f0000001400)="bbcf947e5027b6a551691685032db5ca4133ea", 0x13, 0x71}], 0x1000000, &(0x7f0000001540)='$eth1\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001580)='/dev/null\x00', 0x400201, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000015c0)=@sack_info={0x0, 0xeb, 0x1}, &(0x7f0000001600)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000016c0)={r1, 0x48, &(0x7f0000001640)=[@in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x401}, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, [], 0x25}, 0x7e}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000001700)=0x10) lstat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() lchown(&(0x7f0000001740)='./file0\x00', r3, r4) ppoll(&(0x7f0000001840)=[{r0, 0x4000}, {r0, 0x2400}], 0x2, &(0x7f0000001880)={0x77359400}, &(0x7f00000018c0)={0x2}, 0x8) r5 = fcntl$getown(r0, 0x9) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001900)={[], 0x4, 0x5, 0x3, 0x35db, 0xba43896, r5}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000001980)) fcntl$setflags(r0, 0x2, 0x0) renameat2(r0, &(0x7f00000019c0)='./file0\x00', r0, &(0x7f0000001a00)='./file0\x00', 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000001a40)) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000001a80)={0x1, 0x0, {0x1, 0x8c, 0x8001, 0x3}}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001ac0)={0x81, 0x6, 0x3, 0x5, 0x9, 0x7fffffff, 0x8001, 0x7f, 0x5, 0x59e2}, 0xb) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001b00)=0x5) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001b40)={r1, 0x200, 0x1000, "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"}, 0x1008) flistxattr(r0, &(0x7f0000002b80)=""/228, 0xe4) r6 = add_key$user(&(0x7f0000002c80)='user\x00', &(0x7f0000002cc0)={'syz', 0x2}, &(0x7f0000002d00)="744475aabf022f0e797fb20b0bc722e573c6a046d60956686de0bc4fb728fdf7d3e851cf529f994477fedafa244713259f8cccb9af6ffe730a2e8b523702b6f690e278d88234c18d9c589d598f7bc42c9655d1f35da4c8a83fbf1028ccca3e4d9a40d5dfd4449db67187d8af84bfd2272daaa88bb4bb99decc08c63dca907bf30881f75b9de5b7405fd4ee439634eb3b0bbe3bbfb7331fea0adfd7886df038f971a3ccedf0b611e981483b6ab06a6726ef22a33c8410f915c2eb", 0xba, 0x0) keyctl$update(0x2, r6, &(0x7f0000002dc0)="bca6157af0d5d90d11af281a1ed72c13877f3bb32688bdeca2f40b613189f22188ad485a91f3a223a53cde83486239c1a30ab8ecc40c22dbe409bae4321881aeac3ceba2f4d42f43240e9d3bf10a1c5798608559d3f7ab1e535155d6a5d7db35e560df9e5d36ca099b61b069e1d611aa3363fc26b4301f1da06226cbeacaffae984d1c100e97dfcd41c51bd4d9573a8f546874271325", 0x96) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002e80)={0x0, @empty, @loopback}, &(0x7f0000002ec0)=0xc) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000002f00)=""/51, &(0x7f0000002f40)=0x33) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000002f80)=0xaa27) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002fc0)='/proc/capi/capi20\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000003000)={r2, 0x5}, &(0x7f0000003040)=0x8) sendmsg$kcm(r0, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000003080)}, {&(0x7f00000030c0)="17fcad97f23723d7a00f7bddbbf3e895de4e6d474cb3647d2548ff022e18d6eb0aef9bcf8b8fdc00d65f804ec23ba636c6057a9d0b94df71e79a7c21e2d0f6a4c6d6cba8ba8290f31bcc70b069c1a0fe", 0x50}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000004140)="d941d61537b6b81f96a6574926dc7d83469d2281bed1e05d828e828b6e8ea6783355bd481b48b158fa56b0e433af97cbc96dec6aaa9f0ed50bd51373017b50be5d91d2157361b8edc29ddfc5df97c5e69eacfa571b111f5731706c21d1e9a69f0ab91c7eec925f0e9157db2af2f742138b050ed1166e601827b2b30f571c5c4ae3d6cff2d630c3f08c69547b6a1b2290788203f0646fdd8e52d713b2fd9814cc168d136a7a03bede900c39bfc14db5750705e2bbb1d2e026ccd8df6794f0e8457ea322f39a37f843946917aad69567544d1fb1674eab63109ebb73b6b8331bbb16d7716df3d3a193e42114fc0a5b48c2dcf382414bc6a50c3a39080f79ee87d52a5e105d7968b7565f223f16497b334d1e473c978ba9ecc486b96fb1f0244e593d1bef48ce3e0957bfcba22bcadbb1585cf84ded72fb637d1557a9d4e53b4e868dcdbca03673499b29bb4150a1426180e4673935d614fb07cf305c693068b05e6b3b046a16f85fb38aa302b4c05a304829ef9cda79edc3e9058e866358b19479f61452df9becb7e01593e02e5fdbf6d155da122d3d5be2a65b1f1aa4ea6650bb93ea018ec0d35d46b0b394c4e0a6d50d420d549a6f704e332dda39e509256aeaeb7a643045b6ecc3c954f6dd85cd72c1ab4df534a05214e0dfc1583e2b61f73bd85975c613b1f711b68c8af68c58446d66a6dbeb8fd76e1ecb506bf282ef16785cf0ad0736a6adf209e4a8641f610472a6b3536904d9227545a17323782b9d2b2fa459f334a03cd7b963ac130c47f7c07954901c7eaf82865e0d13bb6415f89fcc005c9255b9f73a6ad37e296563fd3b5c9dcf3ddb9225499f963b1b4c4cd23ac1ba7d71eb8f3491ae26798245aeebf7fb8ebcc23cf656e2410c2e704267d2639ee738b8222b45be40b673ba12ef7c5ee7e37ffd7eaac1c2b52807e1aab099536227f0858ef648a5443be4f93bb04def688d421c9fdf2a8fb71cd566ad8646e0c65e8b412dce7ee08a09042cdd4b38f6effa4b7a9fa5ce13757c644efae21756987b3fcb656442a049333dc25a4ef16fbedb4ad935f0404ae9ca3e878fa0255bfa791156ef4eb5ff2b04102d3f38651e7e3fab5eda16cd7acbe84c3d5507a68216c9a7eda0fc1cb7df5c4c4ab9e080eb4be10ba79f98b1da932c1a654628030d98eac284f0204266a7720a1d16acd7d5934f41a858fac6327372e3f817ed3828996cfb48a593e9856bdead8497809af181fe52081bd853ba4b1ed86aa694082913ead68a01454e16ade438f84cf3c02f5bebd4abb385a85b16e98a58f660760a2ba384b670c745eb7ef778a8240b307dbb9c5dc79a89fe18d5a0a51561ec0eb92b6cf85815ff92b532bad196c0ddcf70d06338052ef0b8846f116c5ddd72c52f0b41d9e7665786e3a755aac429f1b36c30aaa87d26480b9ebf64d82829ab0a845abf690aad9237f1fd7d8e1f2e64ae67684e1480c73d82e3d964e91952aa225098e270f114c7da97cec1c6d10ac8c952d00cfe483fb5dcfc79389b78abb01c5844c0a71f5997aa68661e22a6be8a9569b474d6525b5f3f0eb713658c0d2d2434c64157784f06edcf161cd7035a1b60dfdbecd5ff21c8092f26df0226af35abc996dbf286a957b00d1ef831e5b29d55827ea307543a83ccac23c19f9c0e45938c2fb87e2a65abbf122f9413f0bbf49cd2a8fae05f499611e481b913c5f5f646f238390e4856ce1bac3f4f22ebc44de40a47e82e344f6be1d4c2602b13fe92416d57081c5b3074aef83ae2cc7f4c5ad0ac138b3e5791281a3c0bae375574c2451694213037746fed4fd9a45d13d8769b72129cdc09e9d722ef0ed3e33ca5754475c6f38f414f451e0dedde90c6658ba0124be45c1097e2da4f133310c1b3221e61ce10d863ac8256262fb6fbf6c69c20da338f9adc109ae19332a5a6b147e3e68fe3c5cbc5a0115e6a12c740a5c5734ca27472a0318f1d80b8b863592c0b019e76a983d976fb3e7fe98b7329bb073020f7aaa283911f5b314339385d780db5abed6d4028f8747cea731f2ddfb649e61a27dc7060d7252bdd3385138d2bddf41c363fa34286f3331b7dc22f3daa458fe8c8f08a412921aa8966ca18b9c97fcc76f7f41d722f7a9d818fb8fa597707bec29d592cb4cfe1d9d0c5e2c53ac3e0c265fb509741af1fd713983384565b60a54000b2f1e8cac17388c3f07ebabf00e730c6de0af5f1097c8d54a9df69a41a75e514d8fff9be3207c98d1f5a3b6e382abaac5324ccc3671dc681a5bef739b2668f4f0c778dffacb821168a07de24a1d1217a999d99476f478bde11c1c4d416f64a4edef845920223f438cefce0934fe8c3e585e563b5f969b44f7a7e3464f4d4536e83a7cb192cd83af92127ebd56b238865b751c1dd28c9c398615cdf1b03a21e5f6143928357b38aa18784baece36d1be06833e9b0de12fbf44f5c16e7473dd4f82215a2644ffd62415dc456eddff1587ea4e211eb80d1b7a75ffcfd6b67d44ef59bfb72adb3464aa451589667bd9a4bf155d756197aa1ecff59f6b6f6b77d950df531f78b4530bb955246494c52a797783ac13a3f98dc1fc71213697e0de4f177ae0d3f455cea504fb4d5f267375be33c1df55a2933e1ff046febd988c909d7ce37927c5eeb825ad130dc136bfcf77c24703cae026f9908fabae81bb79b3d43331775a7831f91379ab2f5fe69495a6b10426d3a94d72030e2175fc3451ef0fa0fcae1f5fb97d3b8c7838a3fe8861236227e5c0b789c82ff6ab01c1db2718cfdbcf4522ed277095cf53d080e26fee93202242d083395b61e9d68c72a7f5f30108f53086578cd5fcab357a98921e8e5b47d7bfc8c9ea3cfe6eeb586805d1effe8032027733046b215f1e0bc740b2012c1bb35c3f3e7299dba69d2300ee04ed7c22762b6ae7b4457d47212e62294ebd3b3d5b038b7eabe60ad7ec590f08fdb3a6f88037cea5ce92243eadfccdce94b84dce595213db9e2dd7a09490e4cfa25f9f83c68d1c43b0303a6e2caaaaeba4b2e04276578419b35fe1a8d56863873103df82f1559066f75f75df87974a81c9ecb04223d0c66b0fface5e0791b9918df2f6f440f3b2c6c9ca0ad503c53cefc70d99c4d3496a55d195e555e857ac4f14f166243990c5bb730bd988a728e41bf83920697598d999d1903e86eb701dd241c493710fa6abf0a5689efec99495b796723159575b6bd5ee181ae45318c0e7df63b5438244716b877dec80715a15cec80a664a055e2049cf9094a774dbfd877ae3f7223fec8474b9bb43f41ee8c1df14d69b82a5a4b668c8d404c24ce29cd69d1bfccd6ea539d07e720a20a431b7dd08133b9136a14676b2da1caa2e6dd3744bd9a7977e107cef1002d82cb61e076099470ea4e14bfea3fdcf00300d880a06637e03bf9585c0486ccf0946cd3a0d38a1aa8b633f050989f4b95be700be3f3b5018f43b22f7d51c39b50fb9ab56c83d074c26c8c396a655f4d9ca51d3c15db970547a7d4e0b0f490df7330853b98e6c1e9cb3ad280470eca5139b853738d46dcfdc7c61e0d0110b82e519d9a63b56b267e885a7a7e34fe962b876b064c5d8e7a6a6232df776ab255329a4932cf707495902d5ed2942fc0b23b764978243353cd787e6258f283b47ca656ff887f5be6d661e042965007fbdc01b952a709180c7c215ef90b33bfc334eb58f3a3ce584bb64f863c48d376f240d6cd0f5791c3789bcf6a37da3bde44ae1d4292aa5e5be858567f55af3bd5eef88eba9654fb6fc0c4e156984d05c33a2f97b16216e6fa148c3aebb6ec321047c2e7796e59fcc42faec58a30b9afdaac81c18f809d3ce8cd3e39dd75d8d46d3734a1155945a80266a9c96dffd45efea56963f37e6fc7ead027c5096e0d4d214c298ffa00860c730cf7fee2fb502b87b784c2ae3132c81baae4a801e9042a74b11065143117b6fccd4b56eecc6ab5aba19b37d9d7a8591a59fe5307af67751dc8cbb388f8cfac9462c3abf271f7deefe7f170d301bb0765f3d7607f16bce68c20ce808ec4b68a5c80032098f13d0110115266f0a5ecf0649274a037f46fc2f11ea5b69a9d2430dcd542f2a4be618fe92f6a1f9ed524f8edaff942340a8cbd407b3eb868b9e06a36d39797c8a35477822089adcdfc84e018610e2e9a81f2986c50c870e3d5313fb464e64b06c1a040cf172fe38984b1747a94b0e27f9d9bce1745da238c31677a742c8ad8b35557dfa35e376123e1bb261e0cfb19b4bc1394493d825967f457ef685108080103c76a51a8181a2466d426dffe279fb515eba0c326031a801f3d16bcd1ab74ebb419817c374c6160aee78439cc420dc27a06d41a0aee37ddf713be35b25f46fbdb90176aada73ee40e336893554c8fe5c5f13fedba382a292774494d42f09e279d23bdf7454e1f1d29276bf583ff8b7b13707200a63dd9d2f7f2497fdefcd6d3166cda7447503fffcd6d95a471666f50765391509c6ae16816fa584cbb2878a58dfd0f71bc2194b7f1383c500d3477da5ff45c735f22420075059dec95836d28a6b4b25ca03c216387a4898a6ab46c884e94173310edfcf2e11675ed16641b1959d97a13c5631cb53690c263cc830a2e62902cce9cedf2f878dc2be7e3ee52b101c1d6ce79d433bc7dda5103f48bf3beed36d7b1138f92897d6399568ec4b1d06ec5c64d45e8929a1e5b26e3fa0a88e9c38887b8b1d861bba657eaebe396af0d97d9047a836ee2b54cbefe8e5c7768b50928b164943da13f6a1ba7748a542e8a35f078f6717ce75c5bf090f332eaf1872bc8976f08aa635135e0243940d9ed58e5c81b139bde17b17a510ca37e3204863a8c89a23ffad838ce7a02f7681d59e147544279410d3ee2231d5f4b231ca78e61738a2f403cb0596e7b95bc532ecd691760046dc5c613e8ec666a2f6036ba629769a6d00256d6bf88b7805fcc5c582beade7d469d2f8bd217d90424e6589925a51619f5517dccd696a0c795fa644cae83d9134d574abbee7d58f58cf61188d3a49a2d2697e9b808eebc8fb6ea4091b45e2e06eee0f618173af2de2e0770434f6b3ddc0c276874c40199d0536ed3bede40a32ce6f013fc4376cc76f6e6fc4a6b202b2241fcddd5d60c3c274f9664796c7c737a5a7caf61081491faa59b2a094476d6b49ffa8bfd069971ac619ea6d6a5a1ac45cebb690a1139b91af07b4e9b685ebae32502d2bb0ec53887bf02c42edf1652f737497edfe76c360d5844f7021ed38642fdb16b3665576d6ba23cc24345b21f6bcf7e5f5ad981d97018bbdfa9e0d98960abab9f980bda36e5492c3709d1ce71dded214256a42d1d5cf2c63cadcf7e7c2e1ab07e97a2cc6f26c04d5ffe2723b488d616e634bd0fd2f1d5c9723faba2df4c73709a4a31f41a458b10633a2f8857f7ce62b84c3fad7747fa6b56c9e049756116dbdde9f92dafdff49222899d28e550a16f441eab54c3fc9dd67801206f6d71c8d4e20c741fa1b359e438ae4b2df7fa9b162f9a52b15e401cda8a2367a253258de90f38df6cade789694dfa78093c23fa888c261b62c054a66c27909a2e2865f7a71d24b06923a4fd862b5b334163346794e58807ccc3c7e4366b7a3708c8b68b75ebbd490214ab98ac7382380f4c7db37a99c79155e7609d8c2d4a6f0e498f7379e1b190b9a513b1f1a8378fa8f49dfb8ac250125ce7d9647c30bd445e58131de8fa7a251e2f15c4101f1ef423c1f56f27ee60bbc02cbb49ddf4ee5f9aade4c813c63fa338a48e440396db560ca74d1239838337975f49a6c1cbc5d1982e", 0x1000}], 0x4, &(0x7f0000005180)=[{0xd0, 0x10b, 0x1ee, "c6bbff4667b000d331d4c64d2c482eb442dba11e3c1ab44c1b59f602222685fa83bac9128fd189cd152ea96b6d0c53e65a1e9184ce38880f41152a5c6c3f8195a8410684022673d14adbeef9ad9d65b5e5484b63fd5028b43213c2792a05d13d5a0e550aa3609b7ddf198bfad0977c5e63a5304569bc9443f4135e49b0d8f6ab8322333ad7f3d1dbfdb947c2b6b7f80ec3eb773f789f61030148ff4363d3eb1c53184adc84f3ea49d4958eff8d1096498b1a9fce45d0164be3a6dc28aa10"}, {0xc8, 0x1bf, 0x45108492, "282bcef70b203aa07f057d63286ea0c17ca8bc4924ad76b5e06d53f8b1d18e5e6d7da875ddcb9c9443761b493b7bdda5f252219d510492002fede16c7ddd097d6ff9f121254b536be33c18f18853f92a873df0236941cec96446f62b645dc1c5a413a03e0da59c95aadd28804ad00ee500573b8081254c88f7f7bf1de46dfc5323b13f6e11824ac54b0687b89081a9a4ebb1d0e93b7b4a753eaf22e2381618803d3138fec4a81cc47359febc60dfbc6df38310eee86c17"}, {0xd0, 0x11f, 0x94, "2ec13432be74046693022158a8b526d3fd0113814ac06801355c0deed11cba5bc151fa7df3af85564d9dda12c8dd48a2e2199b4de004485a11e3fb07c334cc3e4b4d3df91a3940a3efaa9f89c85b24559048e90f79f644d9fe5a668f5aaef25b3c1faa7d69ddbb02e4eb4647e125a69b10faec57930344b6a0fbd4071731bc6ff9b6c2245c085bde99c9aa2a43ce1613abee19c7052bb8c8f631ce1582f4b94598da71b2582faee7945924eeb96209d37735c3d2d64dbac2a50413d7"}], 0x268}, 0x4000) sched_rr_get_interval(r5, &(0x7f0000005440)) [ 644.057328][T15812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) 02:33:58 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000b457536f003986dd60fb04620000000000800000000000000000000000000016fe802055d189aa5eec5c23d2f1b597cae100000000000000a490f3b50000bb0002030900000000fe8000000000000000"], 0x0) [ 644.157463][T15862] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 644.208787][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 644.214669][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:33:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003ec0)=[{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000716cab8386af2091749ccf0000"], 0x10}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18}], 0x18}], 0x4924944, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000240)={0x4, 0xbb9, &(0x7f0000000300)="f7ca9b255f417ca40040ccd73c68ba68424f916302ccbf68c3b8086ca4d746225f15176b6b939a48e8025ada05383b5e8d8952c9586a2fc91e027eb6ef0cdc17bebd53b49dc2d93eb5a63801572df16f34499e4764eda27c40425c98aef9e2bae3d28de2c59ee99ecc5aad4dbe5863d0a4ffce05bfb18a8177882586d2b5b7c1d6e33a4b54073722f8f61dd1d14216e6e57a201e767050900e15b6522b0f09ef464ac0e431", &(0x7f0000000140)="d9fcbcbda9dbf6792ef645098a038e7961b661c4de5d2b9e8fcb51384b07f701bd7c30b45debbea5f7ccbdcdbae2138d4e555f1f4e348adb3994224b199ac8ad1d52f5fad3277a6e69b849b762b7c755a5d91a96", 0xa5, 0x54}) 02:33:58 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:33:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) 02:33:58 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4000000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 02:33:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 644.573366][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:33:59 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2559222524c0000a166b52e"], 0x82}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000000ffff"], 0x14}}, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2c0, 0xa2) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x1, @name="6e87384f4b8bfa226ca921bb936658690c98d4c7be6e00fe8f7cd055a426ddd4"}, 0x8, 0x0, 0x5b4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) 02:33:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 02:33:59 executing program 3: prctl$PR_SET_FPEMU(0xa, 0x2) r0 = open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$f2fs(0x0, &(0x7f00000003c0)='./file0/f.le.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000240)=0x80, 0x800) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) renameat(r1, &(0x7f0000000000)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') [ 644.938105][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 645.091599][T16229] overlayfs: filesystem on './file0' not supported as upperdir 02:33:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:33:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) 02:33:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x501000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0xf000, 0x6000}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000002080)='hfsplus\x00', &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:33:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) 02:33:59 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:33:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) 02:33:59 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:33:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) 02:33:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') semget(0xffffffffffffffff, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', 0x0, 0x0, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000680)='security.ima\x00', 0x0, 0x0, 0x98391aa8d00f7f6a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x400100, 0x0) getsockname$tipc(r1, &(0x7f00000001c0)=@name, &(0x7f0000000240)=0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000008c0)='nbd\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) lsetxattr$security_smack_transmute(0x0, &(0x7f0000000600)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x2) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x5, 0x4) write$P9_RFLUSH(r2, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000700), &(0x7f0000000440)=0x36c) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000740)={0x3f, 0x4, 0x8, 'queue0\x00', 0x99f}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x06\x00'}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x8900, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) ppoll(&(0x7f0000000100)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f00000002c0)=0x1) getpeername$ax25(r1, &(0x7f00000003c0)={{0x3, @default}, [@bcast, @netrom, @remote, @null, @rose, @bcast, @null, @rose]}, &(0x7f0000000500)=0x48) write$FUSE_GETXATTR(r2, &(0x7f0000000300)={0x18, 0x0, 0x8, {0x18000000}}, 0x18) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000005c0)={0x23, ""/35}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000640)=""/20) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x17, 0x8, 0x74, 0x80}) 02:34:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x3, 0x120) semtimedop(r1, &(0x7f0000000040)=[{0x3, 0x9, 0x800}, {0x0, 0x7ff, 0x1000}, {0x4, 0x3, 0x800}, {0x1, 0x1156, 0x1000}, {0x3, 0x3191a39e, 0x1000}, {0x7, 0x2, 0x1000}], 0x6, &(0x7f0000000140)={0x0, 0x1c9c380}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x210000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000f19c0000160855e3fb2f580000090405000054e06f2c"], 0x0}, 0x48) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x571141, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000080)={0x80000001, 0x7, 0x65, 0x4, 0x0, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000c99ca53b277900000000"], 0x1}}, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000900)=""/130) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100000000000000) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000500)={@multicast2, @dev}, &(0x7f0000000100)=0xc) r6 = socket(0x0, 0x807, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000740)={0x6, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) modify_ldt$read(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000005080)) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000600)="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") ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000540)={'ip6erspan0\x00', 0x8}) syz_execute_func(&(0x7f00000003c0)="c462b9b718f24e0f2c0745c7410800100000360f0f70009af3460f38f6d6c4224d9c98000000003e6442f6c8aa3666420f71e552c4c1e5e15d76f246cf") ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) [ 645.644410][T16365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:00 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 645.750041][T16378] FAULT_INJECTION: forcing a failure. [ 645.750041][T16378] name failslab, interval 1, probability 0, space 0, times 0 [ 645.795266][T16378] CPU: 0 PID: 16378 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 645.804338][T16378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.814405][T16378] Call Trace: [ 645.817719][T16378] dump_stack+0x172/0x1f0 [ 645.822074][T16378] should_fail.cold+0xa/0x15 [ 645.826685][T16378] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 645.832510][T16378] ? ___might_sleep+0x163/0x280 [ 645.837387][T16378] __should_failslab+0x121/0x190 02:34:00 executing program 1: listen(0xffffffffffffffff, 0xbc) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 645.842337][T16378] should_failslab+0x9/0x14 [ 645.846849][T16378] kmem_cache_alloc_node+0x264/0x710 [ 645.852147][T16378] ? lock_downgrade+0x880/0x880 [ 645.857092][T16378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.863363][T16378] __alloc_skb+0xd5/0x5e0 [ 645.867708][T16378] ? skb_trim+0x190/0x190 [ 645.872060][T16378] vhci_write+0xc4/0x470 [ 645.876324][T16378] new_sync_write+0x4c7/0x760 [ 645.881029][T16378] ? default_llseek+0x2e0/0x2e0 [ 645.881054][T16378] ? common_file_perm+0x238/0x720 [ 645.881088][T16378] ? __fget+0x381/0x550 [ 645.881107][T16378] ? apparmor_file_permission+0x25/0x30 [ 645.881124][T16378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.881141][T16378] ? security_file_permission+0x94/0x380 [ 645.881157][T16378] __vfs_write+0xe4/0x110 [ 645.881194][T16378] vfs_write+0x20c/0x580 [ 645.881211][T16378] ksys_write+0xea/0x1f0 [ 645.881243][T16378] ? __ia32_sys_read+0xb0/0xb0 [ 645.881262][T16378] ? do_syscall_64+0x26/0x610 [ 645.881281][T16378] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.891131][T16378] ? do_syscall_64+0x26/0x610 [ 645.891152][T16378] __x64_sys_write+0x73/0xb0 [ 645.891169][T16378] do_syscall_64+0x103/0x610 [ 645.891189][T16378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.891200][T16378] RIP: 0033:0x457e29 [ 645.891213][T16378] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.891220][T16378] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 645.891233][T16378] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 645.891241][T16378] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 645.891248][T16378] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 645.891255][T16378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 645.891263][T16378] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstat(r1, &(0x7f00000000c0)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) 02:34:00 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:00 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x0, 0x0, 0x3013}}) pipe(&(0x7f0000000040)) [ 646.128536][T16493] FAULT_INJECTION: forcing a failure. [ 646.128536][T16493] name failslab, interval 1, probability 0, space 0, times 0 [ 646.192175][T16493] CPU: 0 PID: 16493 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 646.201263][T16493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.211342][T16493] Call Trace: [ 646.214659][T16493] dump_stack+0x172/0x1f0 [ 646.219013][T16493] should_fail.cold+0xa/0x15 [ 646.223640][T16493] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 646.229555][T16493] ? ___might_sleep+0x163/0x280 [ 646.229583][T16493] __should_failslab+0x121/0x190 [ 646.229604][T16493] should_failslab+0x9/0x14 [ 646.229621][T16493] kmem_cache_alloc_node_trace+0x270/0x720 [ 646.229646][T16493] __kmalloc_node_track_caller+0x3d/0x70 [ 646.229665][T16493] __kmalloc_reserve.isra.0+0x40/0xf0 [ 646.229683][T16493] __alloc_skb+0x10b/0x5e0 [ 646.229698][T16493] ? skb_trim+0x190/0x190 [ 646.229721][T16493] vhci_write+0xc4/0x470 [ 646.229755][T16493] new_sync_write+0x4c7/0x760 [ 646.239520][T16493] ? default_llseek+0x2e0/0x2e0 [ 646.239545][T16493] ? common_file_perm+0x238/0x720 [ 646.239562][T16493] ? __fget+0x381/0x550 02:34:00 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 646.239580][T16493] ? apparmor_file_permission+0x25/0x30 [ 646.239596][T16493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.239612][T16493] ? security_file_permission+0x94/0x380 [ 646.239627][T16493] __vfs_write+0xe4/0x110 [ 646.239643][T16493] vfs_write+0x20c/0x580 [ 646.239660][T16493] ksys_write+0xea/0x1f0 [ 646.239674][T16493] ? __ia32_sys_read+0xb0/0xb0 [ 646.239694][T16493] ? do_syscall_64+0x26/0x610 [ 646.255599][T16493] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.255619][T16493] ? do_syscall_64+0x26/0x610 [ 646.255643][T16493] __x64_sys_write+0x73/0xb0 [ 646.255656][T16493] do_syscall_64+0x103/0x610 [ 646.255672][T16493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.292631][T16493] RIP: 0033:0x457e29 [ 646.292649][T16493] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.304638][T16493] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 646.304655][T16493] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 646.304664][T16493] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 646.304672][T16493] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 646.304681][T16493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 646.304690][T16493] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 646.395805][T16606] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:00 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 646.625271][T16722] FAULT_INJECTION: forcing a failure. [ 646.625271][T16722] name failslab, interval 1, probability 0, space 0, times 0 [ 646.674042][T16722] CPU: 1 PID: 16722 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 646.683110][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.683117][T16722] Call Trace: [ 646.683143][T16722] dump_stack+0x172/0x1f0 [ 646.683166][T16722] should_fail.cold+0xa/0x15 [ 646.683185][T16722] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 646.683213][T16722] ? ___might_sleep+0x163/0x280 [ 646.683233][T16722] __should_failslab+0x121/0x190 [ 646.683249][T16722] should_failslab+0x9/0x14 [ 646.683265][T16722] kmem_cache_alloc_node+0x264/0x710 [ 646.683280][T16722] ? trace_hardirqs_off+0x62/0x220 [ 646.683303][T16722] __alloc_skb+0xd5/0x5e0 [ 646.711459][T16722] ? skb_trim+0x190/0x190 [ 646.711477][T16722] ? vhci_write+0x2b3/0x470 [ 646.711495][T16722] ? rcu_read_lock_sched_held+0x110/0x130 [ 646.711513][T16722] ? kmem_cache_free+0x225/0x260 [ 646.711541][T16722] __vhci_create_device+0x88/0x5a0 [ 646.711557][T16722] vhci_write+0x2d0/0x470 [ 646.721330][T16722] new_sync_write+0x4c7/0x760 [ 646.721347][T16722] ? default_llseek+0x2e0/0x2e0 [ 646.721370][T16722] ? common_file_perm+0x238/0x720 [ 646.721389][T16722] ? __fget+0x381/0x550 [ 646.731146][T16722] ? apparmor_file_permission+0x25/0x30 [ 646.731165][T16722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.731183][T16722] ? security_file_permission+0x94/0x380 [ 646.731215][T16722] __vfs_write+0xe4/0x110 [ 646.740629][T16722] vfs_write+0x20c/0x580 [ 646.740666][T16722] ksys_write+0xea/0x1f0 [ 646.740684][T16722] ? __ia32_sys_read+0xb0/0xb0 [ 646.740711][T16722] ? do_syscall_64+0x26/0x610 [ 646.740732][T16722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.749537][T16722] ? do_syscall_64+0x26/0x610 [ 646.749559][T16722] __x64_sys_write+0x73/0xb0 [ 646.749573][T16722] do_syscall_64+0x103/0x610 [ 646.749611][T16722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.760218][T16722] RIP: 0033:0x457e29 [ 646.760236][T16722] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.760243][T16722] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 646.760258][T16722] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 646.760266][T16722] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 646.760274][T16722] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 646.760281][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 646.760293][T16722] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 647.178748][ C0] net_ratelimit: 12 callbacks suppressed [ 647.178756][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 647.190356][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 648.368734][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 648.374686][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 648.848812][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 648.854647][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 648.933192][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 648.939119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 649.248835][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 649.254653][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:34:03 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x6, 0x0, [{0x40000021}]}) dup(r1) 02:34:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:03 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x9, 0x6e, 0x20, 0xafbe, 0x3, 0x4, 0x7fff, 0xffc0000, 0xddd, 0x4, 0x2, 0x6, 0x800, 0x3, 0x2, 0x7, 0xfffffffeffffffff, 0xdfcf, 0x3, 0x2, 0x80000000, 0x7, 0x3f, 0x4, 0x9, 0x1, 0xfcca, 0x7fffffff, 0x9114, 0x0, 0x4, 0xff1f]}) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) lstat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x9, 0x2, r5, 0x0, r6, 0x0, 0x2, 0xde}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x1000000000013) listen(r2, 0x5) 02:34:03 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:03 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 649.427505][T16736] FAULT_INJECTION: forcing a failure. [ 649.427505][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 649.497638][T16736] CPU: 1 PID: 16736 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 649.506854][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.516931][T16736] Call Trace: [ 649.520233][T16736] dump_stack+0x172/0x1f0 [ 649.524557][T16736] should_fail.cold+0xa/0x15 [ 649.529244][T16736] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 649.535126][T16736] ? ___might_sleep+0x163/0x280 [ 649.539971][T16736] __should_failslab+0x121/0x190 [ 649.544898][T16736] should_failslab+0x9/0x14 [ 649.549386][T16736] kmem_cache_alloc_node_trace+0x270/0x720 [ 649.555185][T16736] __kmalloc_node_track_caller+0x3d/0x70 [ 649.560917][T16736] __kmalloc_reserve.isra.0+0x40/0xf0 [ 649.566276][T16736] __alloc_skb+0x10b/0x5e0 [ 649.570681][T16736] ? skb_trim+0x190/0x190 [ 649.574992][T16736] ? vhci_write+0x2b3/0x470 [ 649.579478][T16736] ? rcu_read_lock_sched_held+0x110/0x130 [ 649.585177][T16736] ? kmem_cache_free+0x225/0x260 [ 649.590101][T16736] __vhci_create_device+0x88/0x5a0 [ 649.595195][T16736] vhci_write+0x2d0/0x470 [ 649.599615][T16736] new_sync_write+0x4c7/0x760 [ 649.604275][T16736] ? default_llseek+0x2e0/0x2e0 [ 649.609114][T16736] ? common_file_perm+0x238/0x720 [ 649.614120][T16736] ? __fget+0x381/0x550 [ 649.618264][T16736] ? apparmor_file_permission+0x25/0x30 [ 649.623795][T16736] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 649.630168][T16736] ? security_file_permission+0x94/0x380 [ 649.635788][T16736] __vfs_write+0xe4/0x110 [ 649.640122][T16736] vfs_write+0x20c/0x580 [ 649.644350][T16736] ksys_write+0xea/0x1f0 [ 649.648577][T16736] ? __ia32_sys_read+0xb0/0xb0 [ 649.653330][T16736] ? do_syscall_64+0x26/0x610 [ 649.658097][T16736] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 649.664143][T16736] ? do_syscall_64+0x26/0x610 [ 649.668895][T16736] __x64_sys_write+0x73/0xb0 [ 649.673509][T16736] do_syscall_64+0x103/0x610 [ 649.678084][T16736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 649.684066][T16736] RIP: 0033:0x457e29 [ 649.687950][T16736] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 649.707543][T16736] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.716448][T16736] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 649.724404][T16736] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 649.732457][T16736] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 649.740420][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 02:34:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 649.748377][T16736] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:04 executing program 0 (fault-call:1 fault-nth:4): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:04 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @pix={0x0, 0x0, 0x3132564e}}) r1 = dup3(r0, r0, 0x80000) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x484400, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xc) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032abd7000ffdbdf250e0000000900010008000400ffff0000140002006272696467655f736c6176655f3000000800030002000000080007004e22000008000500ffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) [ 649.880770][T16760] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:04 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 649.989902][T16865] FAULT_INJECTION: forcing a failure. [ 649.989902][T16865] name failslab, interval 1, probability 0, space 0, times 0 [ 650.106380][T16865] CPU: 0 PID: 16865 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 650.115586][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.125649][T16865] Call Trace: [ 650.125680][T16865] dump_stack+0x172/0x1f0 [ 650.125706][T16865] should_fail.cold+0xa/0x15 [ 650.125727][T16865] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 650.125749][T16865] ? ___might_sleep+0x163/0x280 [ 650.125772][T16865] __should_failslab+0x121/0x190 [ 650.125787][T16865] should_failslab+0x9/0x14 [ 650.125807][T16865] kmem_cache_alloc_trace+0x2d1/0x760 [ 650.158186][T16865] ? skb_trim+0x190/0x190 [ 650.158205][T16865] ? vhci_write+0x2b3/0x470 [ 650.158224][T16865] ? rcu_read_lock_sched_held+0x110/0x130 [ 650.158245][T16865] hci_alloc_dev+0x43/0x1d00 [ 650.182825][T16865] __vhci_create_device+0x101/0x5a0 [ 650.183209][T16873] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 650.188048][T16865] vhci_write+0x2d0/0x470 [ 650.188074][T16865] new_sync_write+0x4c7/0x760 [ 650.188094][T16865] ? default_llseek+0x2e0/0x2e0 [ 650.188122][T16865] ? common_file_perm+0x238/0x720 [ 650.216408][T16865] ? __fget+0x381/0x550 [ 650.220573][T16865] ? apparmor_file_permission+0x25/0x30 [ 650.226112][T16865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 650.226131][T16865] ? security_file_permission+0x94/0x380 [ 650.226155][T16865] __vfs_write+0xe4/0x110 [ 650.226175][T16865] vfs_write+0x20c/0x580 [ 650.246706][T16865] ksys_write+0xea/0x1f0 [ 650.250952][T16865] ? __ia32_sys_read+0xb0/0xb0 [ 650.255757][T16865] ? do_syscall_64+0x26/0x610 [ 650.260431][T16865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 650.260449][T16865] ? do_syscall_64+0x26/0x610 [ 650.260473][T16865] __x64_sys_write+0x73/0xb0 [ 650.260489][T16865] do_syscall_64+0x103/0x610 [ 650.260505][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 650.260517][T16865] RIP: 0033:0x457e29 [ 650.260531][T16865] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 650.260543][T16865] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 650.275811][T16865] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 650.275820][T16865] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 650.275828][T16865] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 650.275848][T16865] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 650.275855][T16865] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:04 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3f00], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:04 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00') write$P9_RREADLINK(r0, &(0x7f00000005c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='v7\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000180)=0xf7c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x301000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = shmget(0x1, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000280)=""/213) getdents(r3, &(0x7f00000006c0)=""/124, 0xffffffffffffff06) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000600), &(0x7f0000000640)=0xb) recvmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)=""/250, 0xfa}], 0x1, &(0x7f0000000540)=""/107, 0x6b}, 0x2000) 02:34:04 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:04 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x20001, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000) fdatasync(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0xfffffffffffffff9, 0x40}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) uname(&(0x7f0000000740)=""/191) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x999}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0xfffffffffffffe91) setsockopt$sock_timeval(r5, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0xfffffffffffffe78) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x101, 0x40000) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="450dfa136043640d4615e737e73c6a510f7c4d", 0x13}], 0x1, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(r1, 0x10, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) fcntl$getown(r1, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) sendfile(r5, r2, &(0x7f0000000200), 0x10000014e) 02:34:04 executing program 0 (fault-call:1 fault-nth:5): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:04 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 650.555994][T16889] FAULT_INJECTION: forcing a failure. [ 650.555994][T16889] name failslab, interval 1, probability 0, space 0, times 0 [ 650.579189][T16889] CPU: 1 PID: 16889 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 650.588588][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.598670][T16889] Call Trace: [ 650.601990][T16889] dump_stack+0x172/0x1f0 [ 650.606344][T16889] should_fail.cold+0xa/0x15 [ 650.611059][T16889] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 650.616929][T16889] ? ___might_sleep+0x163/0x280 [ 650.621800][T16889] __should_failslab+0x121/0x190 [ 650.626782][T16889] should_failslab+0x9/0x14 [ 650.631298][T16889] __kmalloc+0x2dc/0x740 [ 650.635556][T16889] ? alloc_workqueue+0x13c/0xe70 [ 650.640502][T16889] alloc_workqueue+0x13c/0xe70 [ 650.645272][T16889] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 650.650991][T16889] ? scnprintf+0x140/0x140 [ 650.655405][T16889] ? __init_waitqueue_head+0x36/0x90 [ 650.660694][T16889] hci_register_dev+0x1b8/0x860 [ 650.665538][T16889] ? hci_init_sysfs+0x7c/0xa0 [ 650.670225][T16889] __vhci_create_device+0x2d0/0x5a0 [ 650.675520][T16889] vhci_write+0x2d0/0x470 [ 650.679863][T16889] new_sync_write+0x4c7/0x760 [ 650.684551][T16889] ? default_llseek+0x2e0/0x2e0 [ 650.689587][T16889] ? common_file_perm+0x238/0x720 [ 650.694621][T16889] ? __fget+0x381/0x550 [ 650.698898][T16889] ? apparmor_file_permission+0x25/0x30 [ 650.704446][T16889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 650.710707][T16889] ? security_file_permission+0x94/0x380 [ 650.716369][T16889] __vfs_write+0xe4/0x110 [ 650.720718][T16889] vfs_write+0x20c/0x580 [ 650.724963][T16889] ksys_write+0xea/0x1f0 [ 650.729207][T16889] ? __ia32_sys_read+0xb0/0xb0 [ 650.734014][T16889] ? do_syscall_64+0x26/0x610 [ 650.738695][T16889] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 650.744764][T16889] ? do_syscall_64+0x26/0x610 [ 650.749458][T16889] __x64_sys_write+0x73/0xb0 [ 650.754052][T16889] do_syscall_64+0x103/0x610 [ 650.758657][T16889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 650.764565][T16889] RIP: 0033:0x457e29 [ 650.768463][T16889] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 650.788079][T16889] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 650.796507][T16889] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 650.804498][T16889] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 650.812480][T16889] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 650.820466][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 650.828448][T16889] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:05 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:05 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:05 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x20001, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000) fdatasync(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0xfffffffffffffff9, 0x40}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) uname(&(0x7f0000000740)=""/191) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x999}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0xfffffffffffffe91) setsockopt$sock_timeval(r5, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0xfffffffffffffe78) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x101, 0x40000) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="450dfa136043640d4615e737e73c6a510f7c4d", 0x13}], 0x1, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(r1, 0x10, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) fcntl$getown(r1, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) sendfile(r5, r2, &(0x7f0000000200), 0x10000014e) 02:34:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffffffffff7) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xd, 0x1ad, 0x0, 0x220000, &(0x7f0000000000)={[{@fat=@debug='debug'}, {@nodots='nodots'}, {@fat=@debug='debug'}]}) 02:34:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x6609, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000280)=0x1) [ 651.085100][T17016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.168974][T16889] Bluetooth: Can't register HCI device 02:34:05 executing program 0 (fault-call:1 fault-nth:6): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 651.335523][T17126] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.428186][T17138] FAULT_INJECTION: forcing a failure. [ 651.428186][T17138] name failslab, interval 1, probability 0, space 0, times 0 [ 651.442337][T17138] CPU: 0 PID: 17138 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 651.451389][T17138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.451397][T17138] Call Trace: [ 651.451423][T17138] dump_stack+0x172/0x1f0 [ 651.451445][T17138] should_fail.cold+0xa/0x15 [ 651.473817][T17138] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 651.479624][T17138] ? ___might_sleep+0x163/0x280 [ 651.479650][T17138] __should_failslab+0x121/0x190 [ 651.479671][T17138] should_failslab+0x9/0x14 [ 651.479692][T17138] kmem_cache_alloc_trace+0x2d1/0x760 [ 651.489438][T17138] ? rcu_read_lock_sched_held+0x110/0x130 [ 651.489454][T17138] ? __kmalloc+0x5d5/0x740 [ 651.489477][T17138] alloc_workqueue_attrs+0x82/0x120 [ 651.489494][T17138] alloc_workqueue+0x166/0xe70 [ 651.489513][T17138] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 651.489529][T17138] ? scnprintf+0x140/0x140 [ 651.489568][T17138] ? __init_waitqueue_head+0x36/0x90 [ 651.489594][T17138] hci_register_dev+0x1b8/0x860 [ 651.489608][T17138] ? hci_init_sysfs+0x7c/0xa0 [ 651.489630][T17138] __vhci_create_device+0x2d0/0x5a0 [ 651.489660][T17138] vhci_write+0x2d0/0x470 [ 651.489680][T17138] new_sync_write+0x4c7/0x760 [ 651.489694][T17138] ? default_llseek+0x2e0/0x2e0 [ 651.489717][T17138] ? common_file_perm+0x238/0x720 [ 651.499550][T17138] ? __fget+0x381/0x550 [ 651.499573][T17138] ? apparmor_file_permission+0x25/0x30 [ 651.519712][T17138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 651.519732][T17138] ? security_file_permission+0x94/0x380 [ 651.519754][T17138] __vfs_write+0xe4/0x110 [ 651.519775][T17138] vfs_write+0x20c/0x580 [ 651.535140][T17138] ksys_write+0xea/0x1f0 [ 651.535156][T17138] ? __ia32_sys_read+0xb0/0xb0 [ 651.535177][T17138] ? do_syscall_64+0x26/0x610 [ 651.554147][T17138] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.554165][T17138] ? do_syscall_64+0x26/0x610 [ 651.554186][T17138] __x64_sys_write+0x73/0xb0 [ 651.572804][T17138] do_syscall_64+0x103/0x610 [ 651.572825][T17138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.572839][T17138] RIP: 0033:0x457e29 [ 651.584884][T17138] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 651.584893][T17138] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 651.584918][T17138] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 02:34:06 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:06 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x20001, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000) fdatasync(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0xfffffffffffffff9, 0x40}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) uname(&(0x7f0000000740)=""/191) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x999}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0xfffffffffffffe91) setsockopt$sock_timeval(r5, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0xfffffffffffffe78) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x101, 0x40000) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="450dfa136043640d4615e737e73c6a510f7c4d", 0x13}], 0x1, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(r1, 0x10, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) fcntl$getown(r1, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) sendfile(r5, r2, &(0x7f0000000200), 0x10000014e) [ 651.584924][T17138] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 651.584936][T17138] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 651.603432][T17138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 651.603441][T17138] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 651.617008][T17138] Bluetooth: Can't register HCI device 02:34:06 executing program 0 (fault-call:1 fault-nth:7): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:06 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:06 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 651.935327][T17296] FAULT_INJECTION: forcing a failure. [ 651.935327][T17296] name failslab, interval 1, probability 0, space 0, times 0 [ 651.993469][T17296] CPU: 0 PID: 17296 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 652.002660][T17296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.012719][T17296] Call Trace: [ 652.016019][T17296] dump_stack+0x172/0x1f0 [ 652.020367][T17296] should_fail.cold+0xa/0x15 [ 652.024974][T17296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 652.030777][T17296] ? find_held_lock+0x35/0x130 [ 652.030800][T17296] ? __debug_object_init+0x4aa/0xe00 [ 652.030824][T17296] __should_failslab+0x121/0x190 [ 652.030842][T17296] should_failslab+0x9/0x14 [ 652.030856][T17296] kmem_cache_alloc+0x47/0x6f0 [ 652.030873][T17296] ? trace_hardirqs_on+0x67/0x230 [ 652.060133][T17296] ? kasan_check_read+0x11/0x20 [ 652.060156][T17296] __debug_object_init+0x7cb/0xe00 [ 652.070076][T17296] ? debug_object_fixup+0x30/0x30 [ 652.070091][T17296] ? lockdep_init_map+0x1be/0x6d0 [ 652.070111][T17296] debug_object_init+0x16/0x20 [ 652.070125][T17296] __init_work+0x50/0x60 [ 652.070142][T17296] hci_alloc_dev+0xfb4/0x1d00 [ 652.070164][T17296] __vhci_create_device+0x101/0x5a0 [ 652.093845][T17296] vhci_write+0x2d0/0x470 [ 652.103349][T17296] new_sync_write+0x4c7/0x760 [ 652.108039][T17296] ? default_llseek+0x2e0/0x2e0 [ 652.112907][T17296] ? common_file_perm+0x238/0x720 [ 652.117937][T17296] ? __fget+0x381/0x550 [ 652.117958][T17296] ? apparmor_file_permission+0x25/0x30 [ 652.127642][T17296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 652.133895][T17296] ? security_file_permission+0x94/0x380 [ 652.133916][T17296] __vfs_write+0xe4/0x110 02:34:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x65c5, 0x200) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x3, {0xa, 0x4e24, 0x3, @mcast2, 0x10001}}}, 0x38) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x7f, 0x20000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000080)=r6) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 652.133934][T17296] vfs_write+0x20c/0x580 [ 652.148125][T17296] ksys_write+0xea/0x1f0 [ 652.152380][T17296] ? __ia32_sys_read+0xb0/0xb0 [ 652.157165][T17296] ? do_syscall_64+0x26/0x610 [ 652.161849][T17296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.167921][T17296] ? do_syscall_64+0x26/0x610 [ 652.172630][T17296] __x64_sys_write+0x73/0xb0 [ 652.177242][T17296] do_syscall_64+0x103/0x610 [ 652.181875][T17296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.187762][T17296] RIP: 0033:0x457e29 [ 652.189178][T17375] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.191754][T17296] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.220621][T17296] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.220634][T17296] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 02:34:06 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x20001, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000) fdatasync(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0xfffffffffffffff9, 0x40}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) uname(&(0x7f0000000740)=""/191) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x999}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0xfffffffffffffe91) setsockopt$sock_timeval(r5, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0xfffffffffffffe78) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x101, 0x40000) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="450dfa136043640d4615e737e73c6a510f7c4d", 0x13}], 0x1, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) getgid() fcntl$getownex(r1, 0x10, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) fcntl$getown(r1, 0x9) getgroups(0x0, &(0x7f00000023c0)) getpgrp(0xffffffffffffffff) sendfile(r5, r2, &(0x7f0000000200), 0x10000014e) 02:34:06 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 652.220641][T17296] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 652.220648][T17296] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 652.220655][T17296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 652.220663][T17296] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:06 executing program 0 (fault-call:1 fault-nth:8): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 652.483829][T17477] FAULT_INJECTION: forcing a failure. [ 652.483829][T17477] name failslab, interval 1, probability 0, space 0, times 0 [ 652.505903][T17375] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.511846][T17477] CPU: 0 PID: 17477 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 652.524249][T17477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.528788][ C1] net_ratelimit: 9 callbacks suppressed [ 652.528795][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 652.534310][T17477] Call Trace: [ 652.539959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 652.546208][T17477] dump_stack+0x172/0x1f0 [ 652.559507][T17477] should_fail.cold+0xa/0x15 [ 652.564084][T17477] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 652.569877][T17477] ? ___might_sleep+0x163/0x280 [ 652.574713][T17477] __should_failslab+0x121/0x190 [ 652.579633][T17477] should_failslab+0x9/0x14 [ 652.584213][T17477] __kmalloc+0x2dc/0x740 [ 652.588578][T17477] ? apply_wqattrs_prepare+0xae/0x970 [ 652.594046][T17477] apply_wqattrs_prepare+0xae/0x970 [ 652.599319][T17477] apply_workqueue_attrs_locked+0xcb/0x140 [ 652.605117][T17477] apply_workqueue_attrs+0x31/0x50 [ 652.610215][T17477] alloc_workqueue+0x84c/0xe70 [ 652.614965][T17477] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 652.620693][T17477] ? __init_waitqueue_head+0x36/0x90 [ 652.625970][T17477] hci_register_dev+0x1b8/0x860 [ 652.630802][T17477] ? hci_init_sysfs+0x7c/0xa0 [ 652.635478][T17477] __vhci_create_device+0x2d0/0x5a0 [ 652.640656][T17477] vhci_write+0x2d0/0x470 [ 652.645066][T17477] new_sync_write+0x4c7/0x760 [ 652.649756][T17477] ? default_llseek+0x2e0/0x2e0 [ 652.654596][T17477] ? common_file_perm+0x238/0x720 [ 652.659602][T17477] ? __fget+0x381/0x550 [ 652.663745][T17477] ? apparmor_file_permission+0x25/0x30 [ 652.669276][T17477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 652.675500][T17477] ? security_file_permission+0x94/0x380 [ 652.681115][T17477] __vfs_write+0xe4/0x110 [ 652.685429][T17477] vfs_write+0x20c/0x580 [ 652.689661][T17477] ksys_write+0xea/0x1f0 [ 652.693894][T17477] ? __ia32_sys_read+0xb0/0xb0 [ 652.698647][T17477] ? do_syscall_64+0x26/0x610 [ 652.703311][T17477] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.709355][T17477] ? do_syscall_64+0x26/0x610 [ 652.714015][T17477] __x64_sys_write+0x73/0xb0 [ 652.718602][T17477] do_syscall_64+0x103/0x610 [ 652.723186][T17477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.729062][T17477] RIP: 0033:0x457e29 [ 652.732940][T17477] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.752537][T17477] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.760924][T17477] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 652.768890][T17477] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 652.776846][T17477] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 652.784889][T17477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 652.792856][T17477] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 652.803525][T17477] Bluetooth: Can't register HCI device 02:34:07 executing program 0 (fault-call:1 fault-nth:9): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:07 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 652.950104][T17587] FAULT_INJECTION: forcing a failure. [ 652.950104][T17587] name failslab, interval 1, probability 0, space 0, times 0 [ 653.007344][T17587] CPU: 0 PID: 17587 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 653.009512][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 653.016533][T17587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.016543][T17587] Call Trace: [ 653.023063][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 653.032446][T17587] dump_stack+0x172/0x1f0 [ 653.032474][T17587] should_fail.cold+0xa/0x15 [ 653.032503][T17587] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 653.032534][T17587] ? ___might_sleep+0x163/0x280 [ 653.061091][T17587] __should_failslab+0x121/0x190 [ 653.066087][T17587] should_failslab+0x9/0x14 [ 653.070599][T17587] kmem_cache_alloc_trace+0x2d1/0x760 [ 653.075977][T17587] ? rcu_read_lock_sched_held+0x110/0x130 [ 653.081825][T17587] ? __kmalloc+0x5d5/0x740 [ 653.086303][T17587] alloc_workqueue_attrs+0x82/0x120 [ 653.091536][T17587] apply_wqattrs_prepare+0xbb/0x970 [ 653.096781][T17587] apply_workqueue_attrs_locked+0xcb/0x140 [ 653.102607][T17587] apply_workqueue_attrs+0x31/0x50 [ 653.107738][T17587] alloc_workqueue+0x84c/0xe70 [ 653.112532][T17587] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 653.118288][T17587] ? __init_waitqueue_head+0x36/0x90 [ 653.123615][T17587] hci_register_dev+0x1b8/0x860 [ 653.128486][T17587] ? hci_init_sysfs+0x7c/0xa0 [ 653.133213][T17587] __vhci_create_device+0x2d0/0x5a0 [ 653.138440][T17587] vhci_write+0x2d0/0x470 [ 653.142836][T17587] new_sync_write+0x4c7/0x760 [ 653.147546][T17587] ? default_llseek+0x2e0/0x2e0 [ 653.152438][T17587] ? common_file_perm+0x238/0x720 [ 653.157475][T17587] ? __fget+0x381/0x550 [ 653.161641][T17587] ? apparmor_file_permission+0x25/0x30 [ 653.167362][T17587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 653.173633][T17587] ? security_file_permission+0x94/0x380 [ 653.179302][T17587] __vfs_write+0xe4/0x110 [ 653.183661][T17587] vfs_write+0x20c/0x580 [ 653.187945][T17587] ksys_write+0xea/0x1f0 [ 653.192211][T17587] ? __ia32_sys_read+0xb0/0xb0 [ 653.196995][T17587] ? do_syscall_64+0x26/0x610 [ 653.201685][T17587] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 02:34:07 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20108808}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}}, 0x8090) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000180)=ANY=[@ANYBLOB="146643c735665a041a19b2f42a0000003000ffff000000000000000003000000"], 0x14}}, 0x0) [ 653.207790][T17587] ? do_syscall_64+0x26/0x610 [ 653.212524][T17587] __x64_sys_write+0x73/0xb0 [ 653.217179][T17587] do_syscall_64+0x103/0x610 [ 653.221815][T17587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.227742][T17587] RIP: 0033:0x457e29 [ 653.231680][T17587] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.251416][T17587] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.251440][T17587] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 653.251450][T17587] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 653.251457][T17587] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 653.251463][T17587] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 653.251469][T17587] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 653.251987][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 653.268247][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 653.383900][T17587] Bluetooth: Can't register HCI device [ 653.409037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 653.414897][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:34:07 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:07 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r1, 0x0, 0x420000a77, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) close(r0) 02:34:07 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000100)={0x2}) r1 = epoll_create1(0x0) close(r1) fcntl$getflags(r1, 0xb) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000040)=0x80000000) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 02:34:07 executing program 0 (fault-call:1 fault-nth:10): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:07 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:07 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 653.560843][T17609] FAULT_INJECTION: forcing a failure. [ 653.560843][T17609] name failslab, interval 1, probability 0, space 0, times 0 [ 653.590167][T17605] QAT: Invalid ioctl [ 653.611777][T17605] QAT: Invalid ioctl [ 653.616921][T17609] CPU: 0 PID: 17609 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 653.625975][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.636052][T17609] Call Trace: [ 653.639507][T17609] dump_stack+0x172/0x1f0 [ 653.643866][T17609] should_fail.cold+0xa/0x15 [ 653.648513][T17609] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 653.654387][T17609] ? ___might_sleep+0x163/0x280 02:34:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback, 0x3}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0) open(0x0, 0x400000, 0x8000066) creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffffffffffffff, @dev={0xac, 0x7}}, {0x2, 0x0, @remote}, {0x2, 0x4, @local}, 0x10e, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfd00, 0x0, 0x1000, 0x8000}) r3 = gettid() ptrace(0x80400008, r3) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast2}}) fcntl$getown(r2, 0x9) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$tipc2(0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000) syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xfffffffffffffffc, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000880)='./file0/f.le.\x00', 0x0) [ 653.659295][T17609] __should_failslab+0x121/0x190 [ 653.664275][T17609] should_failslab+0x9/0x14 [ 653.668835][T17609] kmem_cache_alloc_trace+0x2d1/0x760 [ 653.674243][T17609] ? rcu_read_lock_sched_held+0x110/0x130 [ 653.680010][T17609] ? __kmalloc+0x5d5/0x740 [ 653.684589][T17609] alloc_workqueue_attrs+0x82/0x120 [ 653.689815][T17609] apply_wqattrs_prepare+0xc8/0x970 [ 653.695089][T17609] apply_workqueue_attrs_locked+0xcb/0x140 [ 653.700973][T17609] apply_workqueue_attrs+0x31/0x50 [ 653.706715][T17609] alloc_workqueue+0x84c/0xe70 02:34:08 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x14d, 0x220900) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/105, 0x69}], 0x6, 0x0) [ 653.711970][T17609] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 653.717739][T17609] ? __init_waitqueue_head+0x36/0x90 [ 653.723054][T17609] hci_register_dev+0x1b8/0x860 [ 653.727935][T17609] ? hci_init_sysfs+0x7c/0xa0 [ 653.732660][T17609] __vhci_create_device+0x2d0/0x5a0 [ 653.737894][T17609] vhci_write+0x2d0/0x470 [ 653.742253][T17609] new_sync_write+0x4c7/0x760 [ 653.746948][T17609] ? default_llseek+0x2e0/0x2e0 [ 653.751818][T17609] ? common_file_perm+0x238/0x720 [ 653.751840][T17609] ? __fget+0x381/0x550 [ 653.751858][T17609] ? apparmor_file_permission+0x25/0x30 [ 653.751875][T17609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 653.751897][T17609] ? security_file_permission+0x94/0x380 [ 653.751918][T17609] __vfs_write+0xe4/0x110 [ 653.761102][T17609] vfs_write+0x20c/0x580 [ 653.761126][T17609] ksys_write+0xea/0x1f0 [ 653.761142][T17609] ? __ia32_sys_read+0xb0/0xb0 [ 653.761173][T17609] ? do_syscall_64+0x26/0x610 [ 653.761203][T17609] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.806865][T17609] ? do_syscall_64+0x26/0x610 [ 653.811584][T17609] __x64_sys_write+0x73/0xb0 [ 653.816178][T17609] do_syscall_64+0x103/0x610 [ 653.820776][T17609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.826652][T17609] RIP: 0033:0x457e29 [ 653.830539][T17609] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.850235][T17609] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.858644][T17609] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 653.866607][T17609] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 653.874564][T17609] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 653.882529][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 653.890486][T17609] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 653.978572][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:08 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 654.062965][T17609] Bluetooth: Can't register HCI device 02:34:08 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:08 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 654.350127][T18090] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:08 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:08 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c}, 0x77) dup3(r0, r1, 0x80000) 02:34:08 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[d::],02:b:\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000014) 02:34:08 executing program 0 (fault-call:1 fault-nth:11): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:08 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 654.608740][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 654.614717][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 654.659810][T18173] FAULT_INJECTION: forcing a failure. [ 654.659810][T18173] name failslab, interval 1, probability 0, space 0, times 0 [ 654.683353][T18171] libceph: parse_ips bad ip '[d::],02:b' [ 654.737036][T18173] CPU: 0 PID: 18173 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 654.746132][T18173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.756211][T18173] Call Trace: [ 654.759577][T18173] dump_stack+0x172/0x1f0 [ 654.763974][T18173] should_fail.cold+0xa/0x15 [ 654.768625][T18173] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 654.774479][T18173] ? ___might_sleep+0x163/0x280 [ 654.779380][T18173] __should_failslab+0x121/0x190 [ 654.784372][T18173] should_failslab+0x9/0x14 [ 654.788942][T18173] kmem_cache_alloc_node+0x264/0x710 [ 654.794312][T18173] alloc_unbound_pwq+0x4c5/0xcf0 [ 654.799300][T18173] apply_wqattrs_prepare+0x35e/0x970 [ 654.804642][T18173] apply_workqueue_attrs_locked+0xcb/0x140 [ 654.810503][T18173] apply_workqueue_attrs+0x31/0x50 [ 654.816083][T18173] alloc_workqueue+0x84c/0xe70 [ 654.820895][T18173] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 654.823655][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 654.826667][T18173] ? __init_waitqueue_head+0x36/0x90 [ 654.826693][T18173] hci_register_dev+0x1b8/0x860 [ 654.826718][T18173] ? hci_init_sysfs+0x7c/0xa0 [ 654.851067][T18173] __vhci_create_device+0x2d0/0x5a0 [ 654.856288][T18173] vhci_write+0x2d0/0x470 [ 654.860642][T18173] new_sync_write+0x4c7/0x760 [ 654.865355][T18173] ? default_llseek+0x2e0/0x2e0 [ 654.870229][T18173] ? common_file_perm+0x238/0x720 [ 654.875294][T18173] ? __fget+0x381/0x550 [ 654.879505][T18173] ? apparmor_file_permission+0x25/0x30 02:34:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000003c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='TIPC\x00', 0x5, 0x2) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) r2 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000440)="bbe43265a264d141d90ed050bebed53fdb675cd797fded249829e4f9464f77310ff36dcc6c971335148206328db9d88d6a06f6195bd0fa6e10b26e8f659c656fea7acad1bb05173ec140ce5a8475b088a2cbc240832ceb43875d0a91cb0984d29fdde5df38ebf8ba53a2fd5b4eb973240be4e52a308a05153d5ca93ee037b25ebff7c5ffb8be17defbcc9e9a78a6e4213cff99b89075df91ab6088d34dded9349f9f03cad038f6c75931a3691e249db8c43b4bfc060f282ebb", 0xb9, 0xfffffffffffffffb) keyctl$read(0xb, r2, &(0x7f0000000500)=""/216, 0xd8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 654.885364][T18173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.891636][T18173] ? security_file_permission+0x94/0x380 [ 654.897299][T18173] __vfs_write+0xe4/0x110 [ 654.901670][T18173] vfs_write+0x20c/0x580 [ 654.905946][T18173] ksys_write+0xea/0x1f0 [ 654.910226][T18173] ? __ia32_sys_read+0xb0/0xb0 [ 654.910248][T18173] ? do_syscall_64+0x26/0x610 [ 654.910267][T18173] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.910280][T18173] ? do_syscall_64+0x26/0x610 [ 654.910302][T18173] __x64_sys_write+0x73/0xb0 [ 654.919721][T18173] do_syscall_64+0x103/0x610 [ 654.919755][T18173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.919767][T18173] RIP: 0033:0x457e29 [ 654.919781][T18173] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.919787][T18173] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.919800][T18173] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 02:34:09 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0), 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000002c0)={'syz_tun\x00', 0x4}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000280)) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000180)={&(0x7f0000000140), 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0xc0}, 0x50) getpeername$unix(r1, &(0x7f0000000380), &(0x7f0000000880)=0x6e) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0xf, 0x1000, 0x0, 0x0, 0x2, 0xffffffffffffff9c, 0x5}, 0x2c) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001a010000010000007d0000000000000040f63309ca5a26bd538d3a3105fa8f8972bd60dd41b80638afabe90abbfa896120daaa624b245360d5122c6f5678fc5122219818583a12bbe1971b9cc285023a533a007e14ebcdb56c7ef637e49df78076dc86b9cccb33d2c91ced9f2f81a0be3205482fc0"], 0x7d}}], 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev}, 0x80) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) [ 654.919807][T18173] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 654.919820][T18173] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 655.001593][T18173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 655.009593][T18173] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 655.051245][T18173] Bluetooth: Can't register HCI device 02:34:09 executing program 0 (fault-call:1 fault-nth:12): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:09 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090e0000000000e10000050000050006001c0000000a0000a9edb69569b3040000000000000000000000000000ef0a0000000000000200010000000000000003020000d0f605000500000000000a00000000000000ffe7001f0002000000010001000000170000000000000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000ff01, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) [ 655.321634][T18492] FAULT_INJECTION: forcing a failure. [ 655.321634][T18492] name failslab, interval 1, probability 0, space 0, times 0 02:34:09 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 655.511926][T18492] CPU: 1 PID: 18492 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 655.521123][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.531185][T18492] Call Trace: [ 655.531214][T18492] dump_stack+0x172/0x1f0 [ 655.531237][T18492] should_fail.cold+0xa/0x15 [ 655.531255][T18492] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 655.531276][T18492] ? ___might_sleep+0x163/0x280 [ 655.536460][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 655.539036][T18492] __should_failslab+0x121/0x190 [ 655.539060][T18492] should_failslab+0x9/0x14 [ 655.539076][T18492] __kmalloc+0x2dc/0x740 [ 655.539099][T18492] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 655.554340][T18492] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 655.573111][T18492] ? alloc_workqueue+0x13c/0xe70 [ 655.573130][T18492] alloc_workqueue+0x13c/0xe70 [ 655.593978][T18492] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 655.594002][T18492] ? __init_waitqueue_head+0x36/0x90 [ 655.594028][T18492] hci_register_dev+0x209/0x860 [ 655.614672][T18492] __vhci_create_device+0x2d0/0x5a0 [ 655.614693][T18492] vhci_write+0x2d0/0x470 [ 655.624248][T18492] new_sync_write+0x4c7/0x760 [ 655.628967][T18492] ? default_llseek+0x2e0/0x2e0 [ 655.633848][T18492] ? common_file_perm+0x238/0x720 [ 655.638886][T18492] ? __fget+0x381/0x550 [ 655.638924][T18492] ? apparmor_file_permission+0x25/0x30 [ 655.648622][T18492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 655.648641][T18492] ? security_file_permission+0x94/0x380 [ 655.648663][T18492] __vfs_write+0xe4/0x110 [ 655.648682][T18492] vfs_write+0x20c/0x580 [ 655.648714][T18492] ksys_write+0xea/0x1f0 [ 655.660564][T18492] ? __ia32_sys_read+0xb0/0xb0 [ 655.660586][T18492] ? do_syscall_64+0x26/0x610 [ 655.660602][T18492] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 655.660615][T18492] ? do_syscall_64+0x26/0x610 [ 655.660645][T18492] __x64_sys_write+0x73/0xb0 [ 655.669295][T18492] do_syscall_64+0x103/0x610 [ 655.669315][T18492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 655.669326][T18492] RIP: 0033:0x457e29 [ 655.669342][T18492] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 655.669349][T18492] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.678680][T18492] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 655.678689][T18492] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 655.678696][T18492] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 655.678704][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 655.678712][T18492] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 655.732384][T18492] Bluetooth: Can't register HCI device 02:34:10 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3f000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:10 executing program 0 (fault-call:1 fault-nth:13): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:10 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:10 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:10 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x400002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xa4, &(0x7f0000000100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x1d}, 0x5}, @in6={0xa, 0x4e22, 0x1000, @rand_addr="4843e2d0bdec1a13c8ca6465a6adcec0", 0x4}, @in6={0xa, 0x4e22, 0x80000001, @empty, 0x3}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000280)={r3, 0xfffffffffffffe01}, &(0x7f00000002c0)=0x8) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000300)=""/53) io_setup(0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x440080, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={[], 0x0}, 0xb, 'hwsim0\x00'}) 02:34:10 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1e}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) r2 = getegid() chown(&(0x7f0000000080)='\x00', r1, r2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x0) close(r3) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_mr_vif\x00') fanotify_mark(r4, 0x40, 0xa, r3, &(0x7f0000000280)='./file0\x00') ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) [ 656.020746][T18624] FAULT_INJECTION: forcing a failure. [ 656.020746][T18624] name failslab, interval 1, probability 0, space 0, times 0 [ 656.054677][T18624] CPU: 1 PID: 18624 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 656.064015][T18624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.074083][T18624] Call Trace: [ 656.077490][T18624] dump_stack+0x172/0x1f0 [ 656.081852][T18624] should_fail.cold+0xa/0x15 [ 656.086586][T18624] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 656.092429][T18624] ? ___might_sleep+0x163/0x280 [ 656.097321][T18624] __should_failslab+0x121/0x190 [ 656.102291][T18624] should_failslab+0x9/0x14 [ 656.106820][T18624] kmem_cache_alloc_trace+0x2d1/0x760 [ 656.112224][T18624] ? rcu_read_lock_sched_held+0x110/0x130 [ 656.117967][T18624] ? __kmalloc+0x5d5/0x740 [ 656.122421][T18624] alloc_workqueue_attrs+0x82/0x120 [ 656.127643][T18624] alloc_workqueue+0x166/0xe70 [ 656.132466][T18624] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 656.138216][T18624] ? __init_waitqueue_head+0x36/0x90 [ 656.143536][T18624] hci_register_dev+0x209/0x860 [ 656.148422][T18624] __vhci_create_device+0x2d0/0x5a0 [ 656.153649][T18624] vhci_write+0x2d0/0x470 [ 656.158095][T18624] new_sync_write+0x4c7/0x760 [ 656.162801][T18624] ? default_llseek+0x2e0/0x2e0 [ 656.167767][T18624] ? common_file_perm+0x238/0x720 [ 656.172833][T18624] ? __fget+0x381/0x550 [ 656.177027][T18624] ? apparmor_file_permission+0x25/0x30 [ 656.182606][T18624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 656.188878][T18624] ? security_file_permission+0x94/0x380 [ 656.194540][T18624] __vfs_write+0xe4/0x110 [ 656.198904][T18624] vfs_write+0x20c/0x580 [ 656.203170][T18624] ksys_write+0xea/0x1f0 [ 656.207542][T18624] ? __ia32_sys_read+0xb0/0xb0 [ 656.212332][T18624] ? do_syscall_64+0x26/0x610 [ 656.217037][T18624] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.223132][T18624] ? do_syscall_64+0x26/0x610 [ 656.227840][T18624] __x64_sys_write+0x73/0xb0 [ 656.232470][T18624] do_syscall_64+0x103/0x610 [ 656.237087][T18624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.242979][T18624] RIP: 0033:0x457e29 [ 656.242996][T18624] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:34:10 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:10 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') read$FUSE(r1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)=""/250, 0xfa}, {&(0x7f0000000840)=""/91, 0x5b}, {&(0x7f0000000a00)=""/184, 0xb8}], 0x3, &(0x7f0000000300)=""/231, 0xe7}, 0x1000000042) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000006c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000000000004000, 0x200, 0x5, 0x1, 0x101, 0x2, 0x2843, 0x3}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000740)=ANY=[@ANYBLOB="a70100000000000010000026f5b2b7bcc28e39f2216db2206440c70cb70700000000000000ac7c60d32f09290112b837670241b29e21e09ece4cbca8b6c166afcd2fa98587ab0d1c445ad70012"], 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x80010, 0x0) mount(0x0, 0x0, 0x0, 0x80000, &(0x7f000002f000)) r4 = dup2(r2, r2) ioctl$TCSBRKP(r3, 0x5425, 0x5) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r2, &(0x7f0000001400), 0x0, 0x2) ioctl$int_out(r3, 0x2, &(0x7f0000000700)) link(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) [ 656.243009][T18624] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 656.274921][T18624] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 656.282911][T18624] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 656.290898][T18624] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 656.299197][T18624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 656.299207][T18624] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:10 executing program 1: socketpair(0x1000000000001e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x8001, 0x4000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="000055d50766be70a1790000ecff0000004e650c447537f7d0814db25316fd17ecb8e2457a"], 0x18}}, 0x0) [ 656.432481][T18639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:10 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 656.567420][T19042] tmpfs: No value for mount option 'Í/©…‡« DZ×' 02:34:11 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:11 executing program 1: mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=0000000000100000000000']) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1, 0x20000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0xcb, 0x0, 0x3ff, 0x2, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e20, @remote}}, 0x3, 0x7, 0x3, 0x8, 0x40}, 0x98) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x100002, &(0x7f00000001c0)) [ 656.825642][T18780] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:11 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x40000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:11 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x392) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000000000dc000000040000000000000000000000070000000700000000000041e491d72f079417c1eb440000000000000000000000000000000000000000000000000005000000000000000000000002000000000000000100000000000000ff7f000000000000070000000000ffff08000000040000000000000000000000000000003c220000000000000000000000000000000000000000000000000000"]) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) vmsplice(r1, &(0x7f0000001600)=[{&(0x7f0000000440)='b', 0x1}], 0x1, 0x0) connect$rose(r1, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x1ea71, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30f) 02:34:11 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 656.915803][T18624] Bluetooth: Can't register HCI device 02:34:11 executing program 0 (fault-call:1 fault-nth:14): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x2, 0x6, 0x8}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x2, 0x4, 0x4000002a80, 0x0, 0xffffffffffffffff, 0x0, [0xe]}, 0x2c) 02:34:11 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x20801, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x20000182}, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2) 02:34:11 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 657.222412][T19604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffd3e, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x7, @mcast1={0xff, 0x1, [0x9]}}]}}}]}, 0x125}}, 0x0) [ 657.324629][T19689] FAULT_INJECTION: forcing a failure. [ 657.324629][T19689] name failslab, interval 1, probability 0, space 0, times 0 02:34:11 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setpgid(r1, r1) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0xc0000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={r3, 0x8, 0x0, 0x6d1, 0x0, 0x4, 0x8}) 02:34:11 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 657.470954][T19598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 657.480759][T19689] CPU: 0 PID: 19689 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 657.489821][T19689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.499907][T19689] Call Trace: [ 657.503410][T19689] dump_stack+0x172/0x1f0 [ 657.507813][T19689] should_fail.cold+0xa/0x15 [ 657.512446][T19689] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 657.518286][T19689] ? ___might_sleep+0x163/0x280 [ 657.523197][T19689] __should_failslab+0x121/0x190 [ 657.523230][T19689] should_failslab+0x9/0x14 [ 657.523254][T19689] __kmalloc_track_caller+0x2d8/0x740 [ 657.532711][T19689] ? pointer+0x910/0x910 [ 657.532725][T19689] ? set_precision+0x180/0x180 [ 657.532757][T19689] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 657.532779][T19689] ? kasprintf+0xbb/0xf0 [ 657.532811][T19689] kvasprintf+0xc8/0x170 [ 657.532826][T19689] ? bust_spinlocks+0xe0/0xe0 02:34:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0000000300000080000aad975d486477d0c6fe0100d01f830b9e9b2fe3c14bcd69818b1721575514d8607ea929d414e2a3955a41360973aef7de3a61ab50ebb9337f93a04a6019daa46da985c889ab812a65926ab0fdb8d1b0b1e410888c425c5f23966fcf8113a812edfce67663c4d75414a2ae80468151e9edbbae5da442ef296b7fea5ea25c533a390fa43e2bc100e5b1e79945bf1c1ad5bfd1469d0c71bb32d87df0b2a364590f3b611963dd35b05ce1340d84bbc1aa129e196966f3579d7d948ef0d6de45f481016a6e572ae93bcd44bdf60f", @ANYRES32=r2, @ANYBLOB="0c9a2b8285449588fc52da04"], 0x20}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) r4 = getpgid(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x1f, 0x2, 0x7ff}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={r5, 0xdba1, 0x20}, &(0x7f0000000400)=0xc) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000240)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3, 0x5, 0xfffffffffffffff7, 0x80, 0x0, 0xfff, 0x4, 0xc, 0x3f, 0x5a8, 0x9, 0x2, 0x4, 0xd5f8, 0x9, 0x0, 0x100, 0x80, 0x8, 0x7ff, 0x2, 0xec83, 0x100000000, 0x9, 0x3, 0x1, 0x7, 0xc74, 0x1, 0x7, 0x2, 0x4, 0x7, 0x7, 0x2, 0x8000, 0x0, 0x100000000, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x489c, 0x9, 0x200, 0x7, 0xff, 0xb72, 0x5}, r4, 0xc, 0xffffffffffffff9c, 0xa) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x10000) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) [ 657.532848][T19689] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 657.532865][T19689] ? find_next_bit+0x107/0x130 [ 657.532890][T19689] kasprintf+0xbb/0xf0 [ 657.580650][T19689] ? kvasprintf_const+0x190/0x190 [ 657.585714][T19689] ? kasan_check_read+0x11/0x20 [ 657.590668][T19689] alloc_workqueue+0x442/0xe70 [ 657.595514][T19689] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 657.601281][T19689] ? __init_waitqueue_head+0x36/0x90 [ 657.606613][T19689] hci_register_dev+0x209/0x860 [ 657.611526][T19689] __vhci_create_device+0x2d0/0x5a0 [ 657.616795][T19689] vhci_write+0x2d0/0x470 [ 657.621167][T19689] new_sync_write+0x4c7/0x760 [ 657.625918][T19689] ? default_llseek+0x2e0/0x2e0 [ 657.630824][T19689] ? common_file_perm+0x238/0x720 [ 657.635906][T19689] ? __fget+0x381/0x550 [ 657.640101][T19689] ? apparmor_file_permission+0x25/0x30 [ 657.645684][T19689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 657.651992][T19689] ? security_file_permission+0x94/0x380 [ 657.657671][T19689] __vfs_write+0xe4/0x110 [ 657.662051][T19689] vfs_write+0x20c/0x580 [ 657.666338][T19689] ksys_write+0xea/0x1f0 [ 657.670622][T19689] ? __ia32_sys_read+0xb0/0xb0 [ 657.675432][T19689] ? do_syscall_64+0x26/0x610 [ 657.680172][T19689] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.686293][T19689] ? do_syscall_64+0x26/0x610 [ 657.691050][T19689] __x64_sys_write+0x73/0xb0 [ 657.695673][T19689] do_syscall_64+0x103/0x610 [ 657.700295][T19689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.706216][T19689] RIP: 0033:0x457e29 [ 657.710142][T19689] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 657.730340][T19689] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 657.738794][T19689] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 657.746800][T19689] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 657.754797][T19689] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 657.762803][T19689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 657.770837][T19689] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 657.779272][ C0] net_ratelimit: 12 callbacks suppressed [ 657.779284][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 657.790796][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:34:12 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xa4ffffff], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x400000}, {&(0x7f0000009000)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0x66}], 0x5, 0x0) r1 = accept(r0, &(0x7f0000000140)=@sco, &(0x7f0000000080)=0x80) connect$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x4, 0x3}}, 0x10) getsockname(r0, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x80) ioctl(r0, 0xc2604110, &(0x7f0000000280)="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") 02:34:12 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:12 executing program 0 (fault-call:1 fault-nth:15): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x2ed) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f0000000340)="f626283582aee06e43cc1da2dec61eae6239efe30a83bab5d868e99352d06360ab834153cc161de84b511252387d5af8e3189b501bed0e9fd82cac33be7e690b726ed1056d91cf96daddd21249e0641aebea91b7f74e47a11267de34cdd057a5117f4c9a84dcb3e45cc98764e83cb6fb1cc9e7a6d1a2104b754cec23b5ce9b294c8d36a77ba5ebb3b2c156cf4364167d661327e23f870c54ff6d698210e68fa2") openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) chdir(&(0x7f0000000480)='./file0\x00') openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)=ANY=[@ANYBLOB='5z\x00'], 0x10) 02:34:12 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000300)={0x78}, 0x78) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0xad, 0xfa00, @id_afonly={&(0x7f0000000040)}}, 0x164) [ 658.207165][T20044] FAULT_INJECTION: forcing a failure. [ 658.207165][T20044] name failslab, interval 1, probability 0, space 0, times 0 [ 658.248890][T20044] CPU: 1 PID: 20044 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 658.257979][T20044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.268050][T20044] Call Trace: [ 658.271366][T20044] dump_stack+0x172/0x1f0 [ 658.275731][T20044] should_fail.cold+0xa/0x15 [ 658.280350][T20044] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 658.286190][T20044] ? ___might_sleep+0x163/0x280 [ 658.291063][T20044] __should_failslab+0x121/0x190 [ 658.296058][T20044] should_failslab+0x9/0x14 [ 658.300578][T20044] __kmalloc+0x2dc/0x740 [ 658.304974][T20044] ? apply_wqattrs_prepare+0xae/0x970 [ 658.310367][T20044] apply_wqattrs_prepare+0xae/0x970 [ 658.315588][T20044] apply_workqueue_attrs_locked+0xcb/0x140 [ 658.315607][T20044] apply_workqueue_attrs+0x31/0x50 [ 658.326610][T20044] alloc_workqueue+0x84c/0xe70 [ 658.331384][T20044] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 658.337112][T20044] ? __init_waitqueue_head+0x36/0x90 [ 658.337142][T20044] hci_register_dev+0x209/0x860 [ 658.347259][T20044] __vhci_create_device+0x2d0/0x5a0 [ 658.352476][T20044] vhci_write+0x2d0/0x470 [ 658.356825][T20044] new_sync_write+0x4c7/0x760 [ 658.361507][T20044] ? default_llseek+0x2e0/0x2e0 [ 658.361533][T20044] ? common_file_perm+0x238/0x720 [ 658.361549][T20044] ? __fget+0x381/0x550 [ 658.361566][T20044] ? apparmor_file_permission+0x25/0x30 [ 658.361587][T20044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 658.381124][T20044] ? security_file_permission+0x94/0x380 [ 658.381147][T20044] __vfs_write+0xe4/0x110 [ 658.381167][T20044] vfs_write+0x20c/0x580 [ 658.393030][T20044] ksys_write+0xea/0x1f0 [ 658.393047][T20044] ? __ia32_sys_read+0xb0/0xb0 [ 658.393066][T20044] ? do_syscall_64+0x26/0x610 [ 658.393087][T20044] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.410591][T20044] ? do_syscall_64+0x26/0x610 [ 658.410615][T20044] __x64_sys_write+0x73/0xb0 [ 658.410640][T20044] do_syscall_64+0x103/0x610 [ 658.421370][T20044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.421382][T20044] RIP: 0033:0x457e29 [ 658.421395][T20044] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 658.421407][T20044] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 658.473011][T20044] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 658.480990][T20044] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 658.488966][T20044] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 658.496943][T20044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 658.504916][T20044] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:13 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6c05, 0x101000) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000300)={@empty, r2}, 0x14) r3 = socket(0x10, 0x20000000000003, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x823) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000180)=0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94fdffff42000103e1ffffff7ff9ffffff000000b86370ee76a997971512871c202537348e2ec222bdc5d7bfe2b7b7b7ec8c2a7525418f43fdb088e7e7644fe83f3db6099d7fe9de6281ecc5f31c7709f2edf686c9687bb57f956c244337a4c22cc9e1cbd910167c025532ec2f47e0df1d19d64b912e02f998d8f4fff09d605f723e878ba6685b887b344d946ff020d9bb3068e5739f0c9ecde1"], 0x14}}, 0x0) r4 = dup(r0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000000c0)) [ 658.563776][T20260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:13 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:13 executing program 1: r0 = socket$inet(0x2, 0x2000000080002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xa1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x2, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"]}, 0x246) [ 658.722658][T20044] Bluetooth: Can't register HCI device 02:34:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 658.768776][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 658.774680][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:34:13 executing program 0 (fault-call:1 fault-nth:16): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 659.000483][T20562] FAULT_INJECTION: forcing a failure. [ 659.000483][T20562] name failslab, interval 1, probability 0, space 0, times 0 [ 659.020968][T20260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 659.058240][T20562] CPU: 1 PID: 20562 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 659.067312][T20562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.067318][T20562] Call Trace: [ 659.067345][T20562] dump_stack+0x172/0x1f0 [ 659.067378][T20562] should_fail.cold+0xa/0x15 [ 659.089665][T20562] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 659.095486][T20562] ? ___might_sleep+0x163/0x280 [ 659.100837][T20562] __should_failslab+0x121/0x190 [ 659.100858][T20562] should_failslab+0x9/0x14 [ 659.100874][T20562] kmem_cache_alloc_trace+0x2d1/0x760 [ 659.100892][T20562] ? rcu_read_lock_sched_held+0x110/0x130 [ 659.100905][T20562] ? __kmalloc+0x5d5/0x740 [ 659.100931][T20562] alloc_workqueue_attrs+0x82/0x120 [ 659.115732][T20562] apply_wqattrs_prepare+0xbb/0x970 [ 659.131053][T20562] apply_workqueue_attrs_locked+0xcb/0x140 [ 659.131072][T20562] apply_workqueue_attrs+0x31/0x50 [ 659.142089][T20562] alloc_workqueue+0x84c/0xe70 [ 659.142118][T20562] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 659.152461][T20562] ? __init_waitqueue_head+0x36/0x90 [ 659.152487][T20562] hci_register_dev+0x209/0x860 [ 659.168327][T20562] __vhci_create_device+0x2d0/0x5a0 [ 659.173530][T20562] vhci_write+0x2d0/0x470 [ 659.173553][T20562] new_sync_write+0x4c7/0x760 [ 659.173571][T20562] ? default_llseek+0x2e0/0x2e0 [ 659.173606][T20562] ? common_file_perm+0x238/0x720 [ 659.192460][T20562] ? __fget+0x381/0x550 [ 659.197238][T20562] ? apparmor_file_permission+0x25/0x30 [ 659.202792][T20562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.209043][T20562] ? security_file_permission+0x94/0x380 [ 659.214694][T20562] __vfs_write+0xe4/0x110 [ 659.219035][T20562] vfs_write+0x20c/0x580 [ 659.223289][T20562] ksys_write+0xea/0x1f0 [ 659.227540][T20562] ? __ia32_sys_read+0xb0/0xb0 [ 659.232318][T20562] ? do_syscall_64+0x26/0x610 [ 659.237000][T20562] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.243073][T20562] ? do_syscall_64+0x26/0x610 [ 659.247776][T20562] __x64_sys_write+0x73/0xb0 [ 659.252380][T20562] do_syscall_64+0x103/0x610 [ 659.256981][T20562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.262874][T20562] RIP: 0033:0x457e29 [ 659.266775][T20562] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.286505][T20562] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 659.294931][T20562] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 659.302905][T20562] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 659.310880][T20562] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 659.318870][T20562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 659.326846][T20562] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 659.335450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 659.341310][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 659.394731][T20562] Bluetooth: Can't register HCI device [ 659.488933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.494881][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:34:13 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffffa4], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x341, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x65}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0xfffffffffffffe79, &(0x7f00000002c0)=""/4096, 0x0, 0x4000000003}, 0x48) dup2(r0, r1) 02:34:13 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:13 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x4e9e, &(0x7f0000000080)=0x0) io_submit(r3, 0x7, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x100000001, r0, &(0x7f00000001c0)="15bcdc65816e206289c4526ee6311b3afc73e81a58b2bec14d59e82ab95a6ff798361595bf36d33bf14a907a8b78876b6639e97a8790f51e8d99a61036296e79067a70f1726d064f767bef027eacdaa11a292e225b51ce80a5a903e2113e5ebdfccf0996fa1f6a509a1c15a0a381aadb1a2dae47ad03aa666bd6c39a6f8ef55e63101b2a3d586c178c3aee9aba85e1ad46fd378c9650f5dbfab9228f018c67d84c49c6f84a44a5382d09189475ca3ad970119bbab85ed0b33b241ea205e31f28ed060b09da0e916e558786d06f94f0d9eda19354a2546e6d4b295a853f", 0xdd, 0x3, 0x0, 0x0, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x91f, r1, &(0x7f00000002c0)="159aa1331828050de0c6abca5843a93b315523747548093a95bfba9f183f11f7b8abff2ac4995cc270c67a303e5ae53c1a2654b83f527e5636a701e82e6333bd8fd8b499134fbadbe6e4520d99714481d6366bef7fda2dc9221adbebba5beb6b4f09446970dd7b6113b6a54ce11cb8157acfff194405a1a52d3b1d39f1ed6459664356591217e8e7d85427acba414c1b485bc30578ac42cb8f2e", 0x9a, 0xfffffffffffff800, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x40, r1, &(0x7f0000000580)="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", 0x1000, 0x1, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f00000003c0)="4a3e09cd681400c78adc16c11ae99b8f752e208e3135ebafd7a409b2e146d29a5795289c38c9d29d443eecd61651a251853975f1ccd99898bd7ead129d24b0edd3eba57ee0174b109fc8a958d408aa3fad14f6caae193f80264f1abc5102d8dcb965ea449e365bbf3d892ab77acd9b83840f3ff47fd16dafe42712d39bf3873c6d1a58c3bc5188f0ac44da352ddc6a8872eea9b56fda4ec7739a1ff813162436931a52ccea7ab8598fad48aa52b7d3221007ce67859b8aed6e419d3dff57a41dd4dc9b12adb529875af1dc8ba2cd9529f63842df5963", 0xd6, 0x6, 0x0, 0x0, r0}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x100000001, r1, &(0x7f0000000500)="6c75050649bc7b136862e092327bafa7d9970186075148264413d388f439e4286145b8f90fcc548252", 0x29, 0x6, 0x0, 0x0, r0}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f00000015c0)="2e31522ba0b6bb21a44feb581f18155792751bf1e826b4408e1e2e5a5f1f721a21590bcd9b73b39a85fa2a25777dc360978a00d37b8a21a0e3a178b67542ee08cf98c11f8ff3326ab92b033bdb29b0ee52c4189d91ee0e8223bf79010194ce8d81a5768b0f6082cbc0f4d1b1b40d4932b2dc98207c93421c645a", 0x7a, 0x0, 0x0, 0x3, r0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000001680)="0fdc6d6440bfd4fefd9530a86adda346507c00aaeeec74030b46f326bb6bf837055607fbb6982e274a80", 0x2a, 0x0, 0x0, 0x0, r0}]) io_setup(0x200, &(0x7f0000000000)=0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:34:13 executing program 0 (fault-call:1 fault-nth:17): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 659.632582][T20689] FAULT_INJECTION: forcing a failure. [ 659.632582][T20689] name failslab, interval 1, probability 0, space 0, times 0 [ 659.677013][T20689] CPU: 1 PID: 20689 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 659.686103][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.686111][T20689] Call Trace: [ 659.686140][T20689] dump_stack+0x172/0x1f0 [ 659.686163][T20689] should_fail.cold+0xa/0x15 [ 659.686181][T20689] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 659.686202][T20689] ? ___might_sleep+0x163/0x280 [ 659.686221][T20689] __should_failslab+0x121/0x190 [ 659.686238][T20689] should_failslab+0x9/0x14 [ 659.686254][T20689] kmem_cache_alloc_trace+0x2d1/0x760 [ 659.686269][T20689] ? rcu_read_lock_sched_held+0x110/0x130 [ 659.686284][T20689] ? __kmalloc+0x5d5/0x740 [ 659.686307][T20689] alloc_workqueue_attrs+0x82/0x120 [ 659.686321][T20689] apply_wqattrs_prepare+0xc8/0x970 [ 659.686351][T20689] apply_workqueue_attrs_locked+0xcb/0x140 [ 659.761093][T20689] apply_workqueue_attrs+0x31/0x50 [ 659.766243][T20689] alloc_workqueue+0x84c/0xe70 [ 659.771064][T20689] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 659.776831][T20689] ? __init_waitqueue_head+0x36/0x90 [ 659.782161][T20689] hci_register_dev+0x209/0x860 [ 659.787056][T20689] __vhci_create_device+0x2d0/0x5a0 [ 659.792290][T20689] vhci_write+0x2d0/0x470 [ 659.796657][T20689] new_sync_write+0x4c7/0x760 [ 659.801372][T20689] ? default_llseek+0x2e0/0x2e0 [ 659.806256][T20689] ? common_file_perm+0x238/0x720 [ 659.811303][T20689] ? __fget+0x381/0x550 [ 659.815487][T20689] ? apparmor_file_permission+0x25/0x30 [ 659.821068][T20689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.827334][T20689] ? security_file_permission+0x94/0x380 [ 659.833005][T20689] __vfs_write+0xe4/0x110 [ 659.837377][T20689] vfs_write+0x20c/0x580 [ 659.841657][T20689] ksys_write+0xea/0x1f0 [ 659.845922][T20689] ? __ia32_sys_read+0xb0/0xb0 [ 659.850703][T20689] ? do_syscall_64+0x26/0x610 [ 659.855397][T20689] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.861492][T20689] ? do_syscall_64+0x26/0x610 [ 659.866216][T20689] __x64_sys_write+0x73/0xb0 [ 659.871271][T20689] do_syscall_64+0x103/0x610 [ 659.875898][T20689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.881806][T20689] RIP: 0033:0x457e29 [ 659.885717][T20689] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.905336][T20689] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 659.913773][T20689] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 659.921766][T20689] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 659.930104][T20689] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 659.938099][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 659.946090][T20689] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:14 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f21548e065671c56bd980fa5ea6f0b8e31381a8759e38ab95"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:34:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x1000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000300)={0xffff, 0x4, [0x3ff]}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x8, 0x9}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={r3, 0x6, 0x30}, &(0x7f0000000280)=0xc) r4 = dup(r1) syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_GET_ONE_REG(r4, 0x4010aec9, &(0x7f0000000000)={0x0, 0x2000000013}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000380)={0x8001, 0x8}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xbc52, 0x10003) 02:34:14 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x1100000000000000, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020f7a00070087fffe80000006700000000005001a00ffffffffe700000000000000000025f51cee212ce72b005e97b00200000000000000641e4df6d405592abeaf2caa953914c3718e93c0245a79763b346628f9026e6a0340a8e6ef121acb02b80572b4ca3e945e3b17f8ba7810b21ef11ca5ec081be95a0b16a486c613525dc6"], 0x2a}}, 0x0) 02:34:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 659.954995][ T26] audit: type=1804 audit(1551666854.077:315): pid=20693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir799331669/syzkaller.MlUBQn/789/bus" dev="sda1" ino=17848 res=1 [ 659.959869][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.985417][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:34:14 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) r3 = socket(0x840000000003, 0x200000000000004, 0xff) r4 = fcntl$dupfd(r2, 0x406, r0) write$FUSE_POLL(r4, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x364a63e3}}, 0x18) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) accept4$packet(r3, &(0x7f0000004240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004280)=0x14, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000004340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)=@newtfilter={0x34, 0x2c, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, r5, {0x2, 0xa}, {0x6, 0xffff}, {0xf, 0xffe0}}, [@TCA_RATE={0x8, 0x5, {0x7, 0x10001}}, @TCA_RATE={0x8, 0x5, {0x9, 0x5a65}}]}, 0x34}}, 0x40080) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2000) [ 660.037432][T20895] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:14 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 660.075734][ T26] audit: type=1804 audit(1551666854.397:316): pid=20693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir799331669/syzkaller.MlUBQn/789/bus" dev="sda1" ino=17848 res=1 [ 660.111162][ T26] audit: type=1804 audit(1551666854.397:317): pid=20693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir799331669/syzkaller.MlUBQn/789/bus" dev="sda1" ino=17848 res=1 [ 660.165096][T20689] Bluetooth: Can't register HCI device 02:34:14 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000640)={'bridge0\x00\x00\x02\x00k\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0x6) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffe, @local, 0x8}}, [0xfffffffffffffffd, 0x7fff, 0x7, 0x6, 0x0, 0x1, 0x5, 0x5, 0x7b, 0x100, 0xffffffffffff0001, 0x4, 0x9, 0x9, 0xfffffffffffffff9]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x80000000, @mcast2, 0x400}}, 0x80000001, 0x3ff, 0x4, 0x0, 0x80}, &(0x7f0000000100)=0x98) 02:34:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)=ANY=[@ANYBLOB="fdffffff1400000067bce747990c9400050000000200000007000000"]) fcntl$setlease(r0, 0x400, 0x4) select(0x30, &(0x7f0000000100)={0x1f}, 0x0, 0x0, 0x0) 02:34:14 executing program 0 (fault-call:1 fault-nth:18): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 660.432636][T20694] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:14 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:14 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x100000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) [ 660.554809][T20934] FAULT_INJECTION: forcing a failure. [ 660.554809][T20934] name failslab, interval 1, probability 0, space 0, times 0 [ 660.598330][T20934] CPU: 1 PID: 20934 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 660.607417][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.617508][T20934] Call Trace: [ 660.620810][T20934] dump_stack+0x172/0x1f0 [ 660.625144][T20934] should_fail.cold+0xa/0x15 [ 660.629744][T20934] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 660.635584][T20934] ? ___might_sleep+0x163/0x280 [ 660.640487][T20934] __should_failslab+0x121/0x190 [ 660.645451][T20934] should_failslab+0x9/0x14 [ 660.649997][T20934] kmem_cache_alloc_node+0x264/0x710 [ 660.655318][T20934] alloc_unbound_pwq+0x4c5/0xcf0 [ 660.660293][T20934] apply_wqattrs_prepare+0x35e/0x970 [ 660.665612][T20934] apply_workqueue_attrs_locked+0xcb/0x140 [ 660.671416][T20934] apply_workqueue_attrs+0x31/0x50 [ 660.676520][T20934] alloc_workqueue+0x84c/0xe70 [ 660.681317][T20934] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 660.687074][T20934] ? __init_waitqueue_head+0x36/0x90 [ 660.692390][T20934] hci_register_dev+0x209/0x860 [ 660.697270][T20934] __vhci_create_device+0x2d0/0x5a0 [ 660.702507][T20934] vhci_write+0x2d0/0x470 [ 660.706860][T20934] new_sync_write+0x4c7/0x760 [ 660.711531][T20934] ? default_llseek+0x2e0/0x2e0 [ 660.716372][T20934] ? common_file_perm+0x238/0x720 [ 660.721445][T20934] ? __fget+0x381/0x550 [ 660.725609][T20934] ? apparmor_file_permission+0x25/0x30 [ 660.731142][T20934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.737372][T20934] ? security_file_permission+0x94/0x380 [ 660.742998][T20934] __vfs_write+0xe4/0x110 [ 660.747319][T20934] vfs_write+0x20c/0x580 [ 660.751552][T20934] ksys_write+0xea/0x1f0 [ 660.755790][T20934] ? __ia32_sys_read+0xb0/0xb0 [ 660.760543][T20934] ? do_syscall_64+0x26/0x610 [ 660.765209][T20934] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.771255][T20934] ? do_syscall_64+0x26/0x610 [ 660.775918][T20934] __x64_sys_write+0x73/0xb0 [ 660.780504][T20934] do_syscall_64+0x103/0x610 [ 660.785124][T20934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.791002][T20934] RIP: 0033:0x457e29 [ 660.794881][T20934] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.814478][T20934] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 660.822877][T20934] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 660.830831][T20934] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 660.838784][T20934] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 02:34:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000180)=""/16) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) process_vm_readv(r2, 0x0, 0xffffffffffffffb0, &(0x7f0000002540), 0x2b9, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0xa8, 0x401, 0x2}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000200)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x0, 0x5, 0x8, 0xfffffffffffffff9, 0x9, 0x8001, 0x8, 0x20, 0x0, 0x9, 0x2, 0x401, 0x1}, {0x6c0c92f1, 0x73f, 0x18, 0x522940d5, 0x0, 0xd359, 0x6, 0x4, 0x462, 0x3, 0x5, 0x100, 0x3ff}, {0x4, 0x10000, 0x7, 0x80000001, 0x6, 0x0, 0x7ff, 0x7659, 0x1ff, 0xe80, 0x37c9dd40, 0x0, 0x5}], 0x27}) preadv(r3, &(0x7f00000017c0), 0x1a4, 0x2000000) [ 660.846734][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 660.854689][T20934] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 660.972924][T20934] Bluetooth: Can't register HCI device [ 660.973695][T21140] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:15 executing program 0 (fault-call:1 fault-nth:19): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:15 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:15 executing program 3: [ 661.148551][T21157] FAULT_INJECTION: forcing a failure. [ 661.148551][T21157] name failslab, interval 1, probability 0, space 0, times 0 [ 661.187905][T21157] CPU: 1 PID: 21157 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 661.197261][T21157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.207339][T21157] Call Trace: [ 661.210664][T21157] dump_stack+0x172/0x1f0 [ 661.215036][T21157] should_fail.cold+0xa/0x15 [ 661.219660][T21157] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 661.225503][T21157] ? ___might_sleep+0x163/0x280 [ 661.230388][T21157] __should_failslab+0x121/0x190 [ 661.235358][T21157] should_failslab+0x9/0x14 [ 661.239983][T21157] kmem_cache_alloc+0x2b2/0x6f0 02:34:15 executing program 3: 02:34:15 executing program 1: [ 661.244851][T21157] ? unwind_get_return_address+0x61/0xa0 [ 661.250509][T21157] ? __save_stack_trace+0x8a/0xf0 [ 661.255563][T21157] __d_alloc+0x2e/0x8c0 [ 661.259743][T21157] d_alloc+0x4d/0x2b0 [ 661.263741][T21157] ? debug_smp_processor_id+0x3c/0x280 [ 661.269217][T21157] d_alloc_parallel+0xf4/0x1bc0 [ 661.274103][T21157] ? debug_smp_processor_id+0x3c/0x280 [ 661.279584][T21157] ? __d_lookup_rcu+0x6c0/0x6c0 [ 661.284582][T21157] ? __d_lookup+0x40c/0x760 [ 661.289091][T21157] ? lockdep_init_map+0x1be/0x6d0 [ 661.289108][T21157] ? lockdep_init_map+0x1be/0x6d0 [ 661.289133][T21157] __lookup_slow+0x1ab/0x500 [ 661.289147][T21157] ? vfs_unlink+0x560/0x560 [ 661.289169][T21157] ? lockdep_hardirqs_on+0x418/0x5d0 [ 661.289188][T21157] ? d_lookup+0x19e/0x260 [ 661.289210][T21157] lookup_one_len+0x16d/0x1a0 [ 661.323003][T21157] ? lookup_one_len_unlocked+0x100/0x100 [ 661.328672][T21157] start_creating+0xbf/0x1e0 [ 661.333282][T21157] debugfs_create_dir+0x26/0x3d0 [ 661.338243][T21157] hci_register_dev+0x299/0x860 [ 661.343127][T21157] __vhci_create_device+0x2d0/0x5a0 [ 661.348350][T21157] vhci_write+0x2d0/0x470 [ 661.352710][T21157] new_sync_write+0x4c7/0x760 [ 661.357429][T21157] ? default_llseek+0x2e0/0x2e0 [ 661.362326][T21157] ? common_file_perm+0x238/0x720 [ 661.367381][T21157] ? __fget+0x381/0x550 [ 661.371579][T21157] ? apparmor_file_permission+0x25/0x30 [ 661.377150][T21157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.383426][T21157] ? security_file_permission+0x94/0x380 [ 661.389081][T21157] __vfs_write+0xe4/0x110 [ 661.389101][T21157] vfs_write+0x20c/0x580 [ 661.389120][T21157] ksys_write+0xea/0x1f0 [ 661.389136][T21157] ? __ia32_sys_read+0xb0/0xb0 [ 661.389160][T21157] ? do_syscall_64+0x26/0x610 [ 661.401968][T21157] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.401989][T21157] ? do_syscall_64+0x26/0x610 [ 661.402015][T21157] __x64_sys_write+0x73/0xb0 [ 661.402029][T21157] do_syscall_64+0x103/0x610 [ 661.402047][T21157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.411486][T21157] RIP: 0033:0x457e29 [ 661.411502][T21157] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.411516][T21157] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.426829][T21157] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 661.426839][T21157] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 661.426848][T21157] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 661.426858][T21157] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 661.426865][T21157] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 661.624133][T21160] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 662.928824][ C1] net_ratelimit: 8 callbacks suppressed [ 662.928833][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 662.940285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 663.488919][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 663.494779][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 663.648813][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 663.654698][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:34:18 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x200000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:18 executing program 3: 02:34:18 executing program 1: 02:34:18 executing program 0 (fault-call:1 fault-nth:20): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:18 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 664.128858][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 664.134714][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:34:18 executing program 1: 02:34:18 executing program 3: 02:34:18 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 664.249395][T21281] FAULT_INJECTION: forcing a failure. [ 664.249395][T21281] name failslab, interval 1, probability 0, space 0, times 0 [ 664.333914][T21281] CPU: 1 PID: 21281 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 664.343015][T21281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.353089][T21281] Call Trace: [ 664.353117][T21281] dump_stack+0x172/0x1f0 [ 664.353156][T21281] should_fail.cold+0xa/0x15 [ 664.365396][T21281] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.371227][T21281] ? ___might_sleep+0x163/0x280 [ 664.371251][T21281] __should_failslab+0x121/0x190 02:34:18 executing program 3: [ 664.371271][T21281] should_failslab+0x9/0x14 [ 664.371287][T21281] kmem_cache_alloc+0x2b2/0x6f0 [ 664.371302][T21281] ? lookup_one_len+0x10e/0x1a0 [ 664.371321][T21281] alloc_inode+0xb8/0x190 [ 664.371343][T21281] new_inode_pseudo+0x19/0xf0 [ 664.381115][T21281] new_inode+0x1f/0x40 [ 664.381144][T21281] debugfs_get_inode+0x1a/0x130 [ 664.381159][T21281] debugfs_create_dir+0x7a/0x3d0 [ 664.381181][T21281] hci_register_dev+0x299/0x860 [ 664.381202][T21281] __vhci_create_device+0x2d0/0x5a0 [ 664.381220][T21281] vhci_write+0x2d0/0x470 [ 664.404415][T21281] new_sync_write+0x4c7/0x760 [ 664.404435][T21281] ? default_llseek+0x2e0/0x2e0 [ 664.413351][T21281] ? common_file_perm+0x238/0x720 [ 664.413369][T21281] ? __fget+0x381/0x550 [ 664.413388][T21281] ? apparmor_file_permission+0x25/0x30 [ 664.423160][T21281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.423176][T21281] ? security_file_permission+0x94/0x380 [ 664.423198][T21281] __vfs_write+0xe4/0x110 [ 664.423218][T21281] vfs_write+0x20c/0x580 [ 664.423236][T21281] ksys_write+0xea/0x1f0 [ 664.423254][T21281] ? __ia32_sys_read+0xb0/0xb0 [ 664.432748][T21281] ? do_syscall_64+0x26/0x610 [ 664.432766][T21281] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.432779][T21281] ? do_syscall_64+0x26/0x610 [ 664.432800][T21281] __x64_sys_write+0x73/0xb0 [ 664.432815][T21281] do_syscall_64+0x103/0x610 [ 664.432830][T21281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.432847][T21281] RIP: 0033:0x457e29 02:34:18 executing program 1: [ 664.442333][T21281] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.442341][T21281] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.442354][T21281] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 664.442361][T21281] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 664.442369][T21281] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 664.442378][T21281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 02:34:19 executing program 3: [ 664.442387][T21281] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 664.504085][T21290] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 664.779444][T21286] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:19 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3f00000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:19 executing program 1: 02:34:19 executing program 3: 02:34:19 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:19 executing program 0 (fault-call:1 fault-nth:21): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:19 executing program 1: semget$private(0x0, 0x3, 0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x3, 0x101000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x4000000002, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00672de45ae087185082cf0124b0eba06ec44104000000000000140000000000008d0051894dd65b2f", 0x2e}], 0x1}, 0x0) 02:34:19 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) gettid() ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 664.970916][T21419] FAULT_INJECTION: forcing a failure. [ 664.970916][T21419] name failslab, interval 1, probability 0, space 0, times 0 [ 665.006948][T21419] CPU: 0 PID: 21419 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 665.016031][T21419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.026125][T21419] Call Trace: [ 665.026157][T21419] dump_stack+0x172/0x1f0 [ 665.026181][T21419] should_fail.cold+0xa/0x15 [ 665.026200][T21419] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 665.026221][T21419] ? ___might_sleep+0x163/0x280 [ 665.026243][T21419] __should_failslab+0x121/0x190 [ 665.026263][T21419] should_failslab+0x9/0x14 [ 665.058608][T21419] kmem_cache_alloc+0x2b2/0x6f0 [ 665.063479][T21419] ? lookup_one_len+0x10e/0x1a0 [ 665.068340][T21419] alloc_inode+0xb8/0x190 [ 665.068357][T21419] new_inode_pseudo+0x19/0xf0 [ 665.068373][T21419] new_inode+0x1f/0x40 [ 665.068393][T21419] debugfs_get_inode+0x1a/0x130 [ 665.068407][T21419] debugfs_create_dir+0x7a/0x3d0 [ 665.068428][T21419] hci_register_dev+0x299/0x860 [ 665.077428][T21419] __vhci_create_device+0x2d0/0x5a0 [ 665.077449][T21419] vhci_write+0x2d0/0x470 [ 665.077472][T21419] new_sync_write+0x4c7/0x760 [ 665.077491][T21419] ? default_llseek+0x2e0/0x2e0 [ 665.077518][T21419] ? common_file_perm+0x238/0x720 [ 665.086413][T21419] ? __fget+0x381/0x550 [ 665.086436][T21419] ? apparmor_file_permission+0x25/0x30 [ 665.086456][T21419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.086474][T21419] ? security_file_permission+0x94/0x380 [ 665.086493][T21419] __vfs_write+0xe4/0x110 [ 665.096263][T21419] vfs_write+0x20c/0x580 [ 665.096286][T21419] ksys_write+0xea/0x1f0 [ 665.096306][T21419] ? __ia32_sys_read+0xb0/0xb0 [ 665.096325][T21419] ? do_syscall_64+0x26/0x610 [ 665.096348][T21419] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.105845][T21419] ? do_syscall_64+0x26/0x610 [ 665.105869][T21419] __x64_sys_write+0x73/0xb0 [ 665.105887][T21419] do_syscall_64+0x103/0x610 [ 665.105909][T21419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.105922][T21419] RIP: 0033:0x457e29 [ 665.105938][T21419] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.105950][T21419] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 665.112434][T21431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 665.115536][T21419] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 665.115545][T21419] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 665.115554][T21419] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 665.115563][T21419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 02:34:19 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20001, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) [ 665.115571][T21419] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 665.120895][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 665.130553][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:34:19 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:19 executing program 0 (fault-call:1 fault-nth:22): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 665.444511][T21431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:19 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000000000000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:19 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) [ 665.656619][T21753] FAULT_INJECTION: forcing a failure. [ 665.656619][T21753] name failslab, interval 1, probability 0, space 0, times 0 [ 665.669833][T21753] CPU: 0 PID: 21753 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 665.678888][T21753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.688962][T21753] Call Trace: [ 665.692288][T21753] dump_stack+0x172/0x1f0 [ 665.696655][T21753] should_fail.cold+0xa/0x15 [ 665.701283][T21753] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 665.707125][T21753] ? ___might_sleep+0x163/0x280 [ 665.712570][T21753] __should_failslab+0x121/0x190 [ 665.717542][T21753] should_failslab+0x9/0x14 [ 665.722084][T21753] kmem_cache_alloc_trace+0x2d1/0x760 [ 665.727458][T21753] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 665.733717][T21753] ? refcount_inc_checked+0x2b/0x70 [ 665.738934][T21753] device_add+0xfdc/0x18a0 [ 665.743368][T21753] ? device_initialize+0x440/0x440 [ 665.748518][T21753] ? get_device_parent.isra.0+0x570/0x570 [ 665.754269][T21753] hci_register_dev+0x2e8/0x860 [ 665.754298][T21753] __vhci_create_device+0x2d0/0x5a0 [ 665.754317][T21753] vhci_write+0x2d0/0x470 [ 665.754340][T21753] new_sync_write+0x4c7/0x760 [ 665.764383][T21753] ? default_llseek+0x2e0/0x2e0 [ 665.764411][T21753] ? common_file_perm+0x238/0x720 [ 665.764429][T21753] ? __fget+0x381/0x550 [ 665.764449][T21753] ? apparmor_file_permission+0x25/0x30 [ 665.793027][T21753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.799290][T21753] ? security_file_permission+0x94/0x380 [ 665.799316][T21753] __vfs_write+0xe4/0x110 [ 665.799336][T21753] vfs_write+0x20c/0x580 [ 665.799354][T21753] ksys_write+0xea/0x1f0 [ 665.799369][T21753] ? __ia32_sys_read+0xb0/0xb0 [ 665.799391][T21753] ? do_syscall_64+0x26/0x610 [ 665.809365][T21753] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.809385][T21753] ? do_syscall_64+0x26/0x610 [ 665.809411][T21753] __x64_sys_write+0x73/0xb0 [ 665.809425][T21753] do_syscall_64+0x103/0x610 [ 665.809441][T21753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.809458][T21753] RIP: 0033:0x457e29 [ 665.856960][T21753] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.876550][T21753] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 665.884960][T21753] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 665.892936][T21753] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 02:34:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:20 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 665.900927][T21753] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 665.908920][T21753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 665.916915][T21753] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 665.950956][T21753] Bluetooth: Can't register HCI device [ 665.976296][T21971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback, 0x3}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x48, 0x0) r1 = open(0x0, 0x100ffd, 0x0) r2 = creat(0x0, 0x0) r3 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff36, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e20, @dev={0xac, 0x14, 0x8}}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @multicast1}, 0x10, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x59, 0x0, 0x1000, 0x8000, 0x2}) r7 = gettid() ptrace(0x80400008, r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast2}}) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) r8 = fcntl$getown(r1, 0x9) fcntl$getown(r6, 0x9) fcntl$getownex(r6, 0x10, &(0x7f0000000140)) getpgrp(r8) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) fcntl$getown(r2, 0x9) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x4, 0x64, [], 0x146, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\xce\x1a\xfah\x00', {0x2, 0x80000000000000, @loopback}}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) 02:34:20 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:20 executing program 0 (fault-call:1 fault-nth:23): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 666.208632][T21984] FAULT_INJECTION: forcing a failure. [ 666.208632][T21984] name failslab, interval 1, probability 0, space 0, times 0 [ 666.230234][T21984] CPU: 0 PID: 21984 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 666.239289][T21984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.249373][T21984] Call Trace: [ 666.252714][T21984] dump_stack+0x172/0x1f0 [ 666.257093][T21984] should_fail.cold+0xa/0x15 [ 666.261725][T21984] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 666.267573][T21984] ? ___might_sleep+0x163/0x280 [ 666.272463][T21984] __should_failslab+0x121/0x190 [ 666.277440][T21984] should_failslab+0x9/0x14 [ 666.281996][T21984] __kmalloc_track_caller+0x2d8/0x740 [ 666.287404][T21984] ? console_unlock+0x6a7/0xeb0 [ 666.292287][T21984] ? find_held_lock+0x35/0x130 [ 666.297085][T21984] ? kstrdup_const+0x66/0x80 [ 666.301709][T21984] kstrdup+0x3a/0x70 [ 666.305628][T21984] kstrdup_const+0x66/0x80 [ 666.310079][T21984] __kernfs_new_node+0xb0/0x690 [ 666.314954][T21984] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 666.320455][T21984] ? tick_nohz_tick_stopped+0x1a/0x90 [ 666.325846][T21984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.332107][T21984] ? irq_work_queue+0x36/0x1d0 [ 666.336887][T21984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.343144][T21984] ? wake_up_klogd+0x99/0xd0 [ 666.347753][T21984] kernfs_new_node+0x99/0x130 [ 666.352445][T21984] kernfs_create_dir_ns+0x52/0x160 [ 666.357571][T21984] sysfs_create_dir_ns+0x131/0x2a0 [ 666.362692][T21984] ? sysfs_create_mount_point+0xa0/0xa0 [ 666.368259][T21984] ? class_dir_child_ns_type+0xd/0x60 [ 666.373652][T21984] kobject_add_internal.cold+0xe5/0x5d4 [ 666.379214][T21984] kobject_add+0x150/0x1c0 [ 666.383638][T21984] ? kset_create_and_add+0x1a0/0x1a0 [ 666.388945][T21984] ? kasan_check_read+0x11/0x20 [ 666.393822][T21984] ? mutex_unlock+0xd/0x10 [ 666.398264][T21984] device_add+0x3d5/0x18a0 [ 666.402695][T21984] ? device_initialize+0x440/0x440 [ 666.407826][T21984] ? get_device_parent.isra.0+0x570/0x570 [ 666.413571][T21984] hci_register_dev+0x2e8/0x860 [ 666.418443][T21984] __vhci_create_device+0x2d0/0x5a0 [ 666.423660][T21984] vhci_write+0x2d0/0x470 [ 666.428011][T21984] new_sync_write+0x4c7/0x760 [ 666.432698][T21984] ? default_llseek+0x2e0/0x2e0 [ 666.437566][T21984] ? common_file_perm+0x238/0x720 [ 666.442601][T21984] ? __fget+0x381/0x550 [ 666.446770][T21984] ? apparmor_file_permission+0x25/0x30 [ 666.452329][T21984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.458579][T21984] ? security_file_permission+0x94/0x380 [ 666.464235][T21984] __vfs_write+0xe4/0x110 [ 666.468590][T21984] vfs_write+0x20c/0x580 [ 666.472856][T21984] ksys_write+0xea/0x1f0 [ 666.477110][T21984] ? __ia32_sys_read+0xb0/0xb0 [ 666.481890][T21984] ? do_syscall_64+0x26/0x610 [ 666.486578][T21984] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.492653][T21984] ? do_syscall_64+0x26/0x610 [ 666.497346][T21984] __x64_sys_write+0x73/0xb0 [ 666.501974][T21984] do_syscall_64+0x103/0x610 [ 666.506581][T21984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.512483][T21984] RIP: 0033:0x457e29 [ 666.516395][T21984] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.536008][T21984] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.544963][T21984] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 666.552961][T21984] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 666.560954][T21984] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 666.568935][T21984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 666.576926][T21984] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 666.644812][T21984] kobject_add_internal failed for hci4 (error: -12 parent: bluetooth) [ 666.683548][T21984] Bluetooth: Can't register HCI device [ 667.968922][ C0] net_ratelimit: 10 callbacks suppressed [ 667.968931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 667.980461][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 668.288771][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 668.294627][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.328778][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 669.334609][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 669.728957][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 669.734831][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 670.049717][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 670.055519][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:34:26 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000001540)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYPTR=&(0x7f0000001740)=ANY=[@ANYPTR64=&(0x7f0000001480)=ANY=[@ANYRESHEX=r0, @ANYPTR, @ANYRES32=r0], @ANYPTR=&(0x7f00000014c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYBLOB="af8c2f099e5cf641952beeb56f670482a0d5e8afde04487a5da1dba82cd897426cd9e73ecd2c22688984db5884720af3530096fbefe6b2b224312f518701f48efdd0bf2a598cea04f310c31d499413fe87a3951519986711ac3b03a3000000000000000000000000000000000000000000000000000000"], @ANYRESDEC=r0, @ANYBLOB="4007fe2ff433493d6236e3dd923d6e3a270dd385a8e50d5a33d1893ad1f2a4e9e486fd5f65efd13e2efbd4a0ba2876030d737f7ef9e893ee9709571a308d81d22dfaa5217acf6a6996c17dae462fbd9b56787f50b13ad043a4ccde3107a82b17af57750349b73d922a73d01e4a1ab31872158041d3f8ac7b1cb9696e8aa1c9b7f978010151ca7bb2a5a9e34f9beb552e5c633b2bd10fac2596d0f007491a368d744d50c4deb2f20a36f0ff2b12", @ANYRESHEX=r0]], 0xe) unlink(&(0x7f0000000080)='./file0\x00') setxattr$security_selinux(&(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:dmidecode_exec_t:s0\x00', 0x26, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001340)={{{@in, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1000, 0xfffffffffffffffd}], 0x1000, &(0x7f00000015c0)=ANY=[@ANYBLOB='journal_dev=0x0000000000000005,dioread_lock,nojournal_checksum,grpid,nojournal_checksum,acl,errors=remount-ro,smackfsroot=/,fsmagic=0x0000000000000007,uid>', @ANYRESDEC=r1, @ANYBLOB=',uid<', @ANYRESDEC=r2, @ANYBLOB="c7f1263a94c1a57265e60bf78c6aef3c18f7821b155a29504e909abaddc31b1bb9404dd440f9216726e40898d4a9cf213797e30bdb4c2db0f022e17ed5707e26aed75d56ec4f87b7b7a2d0dec3446fd7235516dde62f69f48a1e77d49be9b08f2d26b5e61d2545f12e0c8419e902ce4891b1bf20ac2b601189f69468423cfc8ff26e2161fa6cde6e508f812ef6088f34e5fcf64df577f10552830576"]) link(&(0x7f0000001440)='./file1/file1\x00', &(0x7f0000000300)='./file1/file0\x00') 02:34:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:26 executing program 0 (fault-call:1 fault-nth:24): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:26 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080), 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:26 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:26 executing program 1: openat$dir(0xffffffffffffff9c, 0x0, 0x83, 0x49) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e5, 0x20000fff}) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) [ 672.217185][T22208] FAULT_INJECTION: forcing a failure. [ 672.217185][T22208] name failslab, interval 1, probability 0, space 0, times 0 [ 672.232496][T22208] CPU: 0 PID: 22208 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 672.241625][T22208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.241633][T22208] Call Trace: [ 672.241662][T22208] dump_stack+0x172/0x1f0 [ 672.241687][T22208] should_fail.cold+0xa/0x15 [ 672.241707][T22208] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 672.241734][T22208] ? ___might_sleep+0x163/0x280 [ 672.241761][T22208] __should_failslab+0x121/0x190 [ 672.241779][T22208] should_failslab+0x9/0x14 [ 672.241794][T22208] kmem_cache_alloc+0x2b2/0x6f0 [ 672.241820][T22208] __kernfs_new_node+0xef/0x690 [ 672.241835][T22208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 672.241854][T22208] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 672.241872][T22208] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 672.241888][T22208] ? find_held_lock+0x35/0x130 [ 672.259534][T22208] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 672.269897][T22208] ? kasan_check_write+0x14/0x20 [ 672.269921][T22208] kernfs_new_node+0x99/0x130 [ 672.269939][T22208] kernfs_create_link+0xdd/0x250 [ 672.269961][T22208] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 672.269975][T22208] sysfs_create_link+0x65/0xc0 [ 672.269992][T22208] device_add+0x663/0x18a0 [ 672.270010][T22208] ? get_device_parent.isra.0+0x570/0x570 [ 672.280168][T22208] ? start_creating+0x163/0x1e0 [ 672.280189][T22208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 672.280212][T22208] hci_register_dev+0x2e8/0x860 [ 672.280236][T22208] __vhci_create_device+0x2d0/0x5a0 [ 672.280254][T22208] vhci_write+0x2d0/0x470 [ 672.289687][T22208] new_sync_write+0x4c7/0x760 [ 672.289705][T22208] ? default_llseek+0x2e0/0x2e0 [ 672.289729][T22208] ? common_file_perm+0x238/0x720 [ 672.289743][T22208] ? __fget+0x381/0x550 [ 672.289760][T22208] ? apparmor_file_permission+0x25/0x30 [ 672.312392][T22208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 672.352888][T22208] ? security_file_permission+0x94/0x380 [ 672.352912][T22208] __vfs_write+0xe4/0x110 [ 672.352932][T22208] vfs_write+0x20c/0x580 [ 672.374558][T22208] ksys_write+0xea/0x1f0 [ 672.374577][T22208] ? __ia32_sys_read+0xb0/0xb0 [ 672.384085][T22208] ? do_syscall_64+0x26/0x610 [ 672.384103][T22208] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.384120][T22208] ? do_syscall_64+0x26/0x610 [ 672.398632][T22208] __x64_sys_write+0x73/0xb0 [ 672.408300][T22208] do_syscall_64+0x103/0x610 [ 672.408324][T22208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.408339][T22208] RIP: 0033:0x457e29 [ 672.424502][T22208] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.424512][T22208] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.424526][T22208] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 672.424538][T22208] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 02:34:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000000)) 02:34:27 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080), 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 672.437742][T22208] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 672.437752][T22208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 672.437761][T22208] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 672.531835][T22208] Bluetooth: Can't register HCI device [ 672.549185][T22210] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:27 executing program 0 (fault-call:1 fault-nth:25): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:27 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f00000003c0)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000a50d00000000"]) 02:34:27 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)={0x100000000000000, 0x7fffffff}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3) [ 672.726790][T22530] FAULT_INJECTION: forcing a failure. [ 672.726790][T22530] name failslab, interval 1, probability 0, space 0, times 0 [ 672.778819][T22530] CPU: 1 PID: 22530 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 672.787883][T22530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.787889][T22530] Call Trace: [ 672.787920][T22530] dump_stack+0x172/0x1f0 [ 672.787945][T22530] should_fail.cold+0xa/0x15 [ 672.810303][T22530] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 672.810325][T22530] ? ___might_sleep+0x163/0x280 [ 672.810346][T22530] __should_failslab+0x121/0x190 [ 672.810364][T22530] should_failslab+0x9/0x14 [ 672.810382][T22530] __kmalloc_track_caller+0x2d8/0x740 [ 672.821005][T22530] ? kernfs_activate+0x192/0x1f0 [ 672.821025][T22530] ? kstrdup_const+0x66/0x80 [ 672.821041][T22530] kstrdup+0x3a/0x70 [ 672.821059][T22530] kstrdup_const+0x66/0x80 [ 672.830449][T22530] __kernfs_new_node+0xb0/0x690 [ 672.830465][T22530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 672.830485][T22530] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 672.830506][T22530] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 672.830524][T22530] ? find_held_lock+0x35/0x130 [ 672.837169][T22416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 672.840905][T22530] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 672.840925][T22530] ? kasan_check_write+0x14/0x20 [ 672.840946][T22530] kernfs_new_node+0x99/0x130 [ 672.849412][T22530] kernfs_create_link+0xdd/0x250 [ 672.849431][T22530] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 672.849448][T22530] sysfs_create_link+0x65/0xc0 [ 672.849468][T22530] device_add+0x78f/0x18a0 02:34:27 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080), 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 672.849489][T22530] ? get_device_parent.isra.0+0x570/0x570 [ 672.849507][T22530] ? start_creating+0x163/0x1e0 [ 672.849525][T22530] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 672.849547][T22530] hci_register_dev+0x2e8/0x860 [ 672.858862][T22530] __vhci_create_device+0x2d0/0x5a0 [ 672.858881][T22530] vhci_write+0x2d0/0x470 [ 672.858910][T22530] new_sync_write+0x4c7/0x760 [ 672.858928][T22530] ? default_llseek+0x2e0/0x2e0 [ 672.870713][T22530] ? common_file_perm+0x238/0x720 [ 672.870731][T22530] ? __fget+0x381/0x550 [ 672.870751][T22530] ? apparmor_file_permission+0x25/0x30 [ 672.870766][T22530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 672.870788][T22530] ? security_file_permission+0x94/0x380 [ 672.881675][T22530] __vfs_write+0xe4/0x110 [ 672.881696][T22530] vfs_write+0x20c/0x580 [ 672.881718][T22530] ksys_write+0xea/0x1f0 [ 672.897100][T22530] ? __ia32_sys_read+0xb0/0xb0 [ 672.897119][T22530] ? do_syscall_64+0x26/0x610 [ 672.897139][T22530] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.917740][T22530] ? do_syscall_64+0x26/0x610 [ 672.917765][T22530] __x64_sys_write+0x73/0xb0 [ 672.917783][T22530] do_syscall_64+0x103/0x610 [ 672.926932][T22530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.926946][T22530] RIP: 0033:0x457e29 [ 672.926958][T22530] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.926970][T22530] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 02:34:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 672.937495][T22530] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 672.937505][T22530] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 672.937514][T22530] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 672.937524][T22530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 672.937532][T22530] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 673.043177][T22532] overlayfs: failed to resolve './file1': -2 [ 673.108350][T22530] Bluetooth: Can't register HCI device 02:34:27 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@md5={0x1, "02ef8b936392318d92fd1cf95913e068"}, 0x11, 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2000000000000000) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x4000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x7, 0x4, 0x43, &(0x7f0000000180)="3e408439d0f5fa6a1f13632a9b5017e3acddc34c46de7cd69cfbae873de1bb7f3f2379acce97312d655af2af0fb740b2aa906f96fb5542525364cbfecf3ad1e0cc43c4"}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='/grt\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\x97m\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1e\xc6\xe3W\x90\'E\x11\xe0\xc6\x1f\xf2/\xf6\x1f\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="00fbc501ff017aae25d8d51308b49b937dc7119eea6176525e6d6b5d38f019eb05807dc03639b0f6c5b1b685ee842cb65600ef75e4a1b10fa0fd12ca53cec5243cd244ba92ec0767d058765d6215bf6048e0a8d85c1d5caedadfc9790000000000000005d356102ce5827b69ca90f5bc979154fad095ec28a598b3d55e7246c6d14ca53267873489e3f251ec21feb28eaac0f76748c66ceefb0ae32e1b84c8cffe49ba5bdc014d2dfb30415e4487702a96f770e61514593f00924d71f6134fb3a44e215b9f"], 0xc5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000380)=0x6, &(0x7f00000003c0)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001680)={r4, &(0x7f00000005c0)="8f82681352b03df4ba6210a1690dd80f9d63a4f3870d9138951aab436bba5d44de17c05d560cd657a78cb47d4a84bb9c8f75f4a9a6dcc0499f0919ffce1ec6e97dc7bc594ad19a03e54810fce41209bbab3ccb3d67a878e9a1b30ce6c24f433b00f96c5debf0ec24a48e660cfc0657497b9f348f81b47e442747e04ddc21d3b6e54f8441d2088de1e5060f0a88cbd1", &(0x7f0000000680)=""/4096}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)) 02:34:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0xffffffffffffffff, 0x3) get_thread_area(&(0x7f0000000040)={0x7, 0x20100800, 0x400, 0xffffffffffffff81, 0x5, 0x6a04, 0x4, 0x1000, 0x7, 0xfd}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) 02:34:27 executing program 0 (fault-call:1 fault-nth:26): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 673.345998][T22761] FAULT_INJECTION: forcing a failure. [ 673.345998][T22761] name failslab, interval 1, probability 0, space 0, times 0 [ 673.359590][T22761] CPU: 1 PID: 22761 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 673.368701][T22761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.378754][T22761] Call Trace: [ 673.382068][T22761] dump_stack+0x172/0x1f0 [ 673.386424][T22761] should_fail.cold+0xa/0x15 [ 673.391022][T22761] ? kernel_text_address+0x73/0xf0 [ 673.396143][T22761] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 673.401958][T22761] ? unwind_get_return_address+0x61/0xa0 [ 673.407593][T22761] ? __save_stack_trace+0x8a/0xf0 [ 673.412627][T22761] __should_failslab+0x121/0x190 [ 673.417572][T22761] should_failslab+0x9/0x14 [ 673.422081][T22761] kmem_cache_alloc+0x47/0x6f0 [ 673.426854][T22761] ? save_stack+0xa9/0xd0 [ 673.431198][T22761] ? save_stack+0x45/0xd0 [ 673.435528][T22761] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 673.441342][T22761] ? kasan_slab_alloc+0xf/0x20 [ 673.446134][T22761] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 673.452460][T22761] idr_get_free+0x425/0x8d0 [ 673.456967][T22761] idr_alloc_u32+0x19e/0x330 [ 673.461548][T22761] ? __fprop_inc_percpu_max+0x230/0x230 [ 673.467081][T22761] ? mark_held_locks+0xf0/0xf0 [ 673.471827][T22761] ? perf_trace_lock+0x510/0x510 [ 673.476760][T22761] idr_alloc_cyclic+0x132/0x270 [ 673.481596][T22761] ? idr_alloc+0x150/0x150 [ 673.486005][T22761] __kernfs_new_node+0x171/0x690 [ 673.490929][T22761] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 673.496377][T22761] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 673.502515][T22761] ? find_held_lock+0x35/0x130 [ 673.507263][T22761] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 673.513404][T22761] ? kasan_check_write+0x14/0x20 [ 673.518340][T22761] kernfs_new_node+0x99/0x130 [ 673.523119][T22761] kernfs_create_link+0xdd/0x250 [ 673.528046][T22761] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 673.534023][T22761] sysfs_create_link+0x65/0xc0 [ 673.538776][T22761] device_add+0x663/0x18a0 [ 673.543182][T22761] ? get_device_parent.isra.0+0x570/0x570 [ 673.548884][T22761] ? start_creating+0x163/0x1e0 [ 673.553723][T22761] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 673.559950][T22761] hci_register_dev+0x2e8/0x860 [ 673.564805][T22761] __vhci_create_device+0x2d0/0x5a0 [ 673.569993][T22761] vhci_write+0x2d0/0x470 [ 673.574311][T22761] new_sync_write+0x4c7/0x760 [ 673.578995][T22761] ? default_llseek+0x2e0/0x2e0 [ 673.583879][T22761] ? common_file_perm+0x238/0x720 [ 673.588884][T22761] ? __fget+0x381/0x550 [ 673.593023][T22761] ? apparmor_file_permission+0x25/0x30 [ 673.598639][T22761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 673.604891][T22761] ? security_file_permission+0x94/0x380 [ 673.610545][T22761] __vfs_write+0xe4/0x110 [ 673.614873][T22761] vfs_write+0x20c/0x580 [ 673.619102][T22761] ksys_write+0xea/0x1f0 [ 673.623337][T22761] ? __ia32_sys_read+0xb0/0xb0 [ 673.628084][T22761] ? do_syscall_64+0x26/0x610 [ 673.632761][T22761] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.638805][T22761] ? do_syscall_64+0x26/0x610 [ 673.643493][T22761] __x64_sys_write+0x73/0xb0 [ 673.648086][T22761] do_syscall_64+0x103/0x610 [ 673.652658][T22761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.658528][T22761] RIP: 0033:0x457e29 [ 673.662404][T22761] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 673.681986][T22761] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 673.690414][T22761] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 673.698473][T22761] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 673.706423][T22761] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 673.714911][T22761] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 673.722862][T22761] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 673.731110][ C1] net_ratelimit: 10 callbacks suppressed [ 673.731118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 673.742646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 673.898718][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 673.904640][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 674.218751][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.224699][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 674.538784][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.545195][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 675.808763][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 675.814582][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:34:30 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f00000000c0)={'bond0\x00', @random="01003a1e2410"}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'\x00', {0x2, 0x4e22, @multicast2}}) 02:34:30 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{0x0}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:30 executing program 0 (fault-call:1 fault-nth:27): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) bind$inet6(r2, &(0x7f0000001440)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) restart_syscall() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x400020000005, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) stat(0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xb0e) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) getsockname$unix(r0, &(0x7f0000000c80), &(0x7f0000000000)=0x6e) getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r2, r2, 0x80000) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000080)) prctl$PR_CAPBSET_READ(0x17, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) recvfrom$inet6(r3, &(0x7f0000000040)=""/31, 0x1f, 0x0, 0x0, 0x3ce) r5 = accept4(r3, 0x0, 0x0, 0x3) sendto$inet6(r5, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) dup2(r1, r3) 02:34:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 676.262225][T22872] FAULT_INJECTION: forcing a failure. [ 676.262225][T22872] name failslab, interval 1, probability 0, space 0, times 0 [ 676.340217][T22872] CPU: 0 PID: 22872 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 676.349393][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.349401][T22872] Call Trace: [ 676.349440][T22872] dump_stack+0x172/0x1f0 [ 676.349467][T22872] should_fail.cold+0xa/0x15 [ 676.349489][T22872] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 676.349509][T22872] ? ___might_sleep+0x163/0x280 [ 676.367171][T22872] __should_failslab+0x121/0x190 [ 676.367194][T22872] should_failslab+0x9/0x14 [ 676.367211][T22872] kmem_cache_alloc+0x2b2/0x6f0 [ 676.367228][T22872] ? memcpy+0x46/0x50 [ 676.377589][T22872] ? kstrdup+0x5a/0x70 [ 676.377614][T22872] __kernfs_new_node+0xef/0x690 [ 676.377633][T22872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.377650][T22872] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 676.377671][T22872] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 676.387522][T22872] ? find_held_lock+0x35/0x130 [ 676.387540][T22872] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 676.387559][T22872] ? kasan_check_write+0x14/0x20 [ 676.387577][T22872] kernfs_new_node+0x99/0x130 [ 676.387596][T22872] kernfs_create_link+0xdd/0x250 [ 676.396927][T22872] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 676.396945][T22872] sysfs_create_link+0x65/0xc0 [ 676.396966][T22872] device_add+0x78f/0x18a0 [ 676.396991][T22872] ? get_device_parent.isra.0+0x570/0x570 [ 676.404994][T22872] ? start_creating+0x163/0x1e0 [ 676.405012][T22872] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 676.405035][T22872] hci_register_dev+0x2e8/0x860 02:34:30 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{0x0}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4200, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000000c0)={0xef, ""/239}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a00040002100700005436dc0bab090000000400ffff9e", 0x39}], 0x1) [ 676.405061][T22872] __vhci_create_device+0x2d0/0x5a0 [ 676.416107][T22872] vhci_write+0x2d0/0x470 [ 676.416128][T22872] new_sync_write+0x4c7/0x760 [ 676.416146][T22872] ? default_llseek+0x2e0/0x2e0 [ 676.416173][T22872] ? common_file_perm+0x238/0x720 [ 676.427736][T22872] ? __fget+0x381/0x550 [ 676.427757][T22872] ? apparmor_file_permission+0x25/0x30 [ 676.427773][T22872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.427790][T22872] ? security_file_permission+0x94/0x380 [ 676.427809][T22872] __vfs_write+0xe4/0x110 [ 676.438681][T22872] vfs_write+0x20c/0x580 [ 676.438703][T22872] ksys_write+0xea/0x1f0 [ 676.438721][T22872] ? __ia32_sys_read+0xb0/0xb0 [ 676.438739][T22872] ? do_syscall_64+0x26/0x610 [ 676.438751][T22872] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.438768][T22872] ? do_syscall_64+0x26/0x610 [ 676.448366][T22872] __x64_sys_write+0x73/0xb0 [ 676.448384][T22872] do_syscall_64+0x103/0x610 [ 676.448404][T22872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.448415][T22872] RIP: 0033:0x457e29 [ 676.448432][T22872] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.459376][T22872] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 676.459392][T22872] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 676.459401][T22872] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 676.459410][T22872] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 676.459419][T22872] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 676.459428][T22872] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 676.561886][T22872] Bluetooth: Can't register HCI device [ 676.590473][T22886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:31 executing program 3: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x3050800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d756e69782c61636365737306616e792c6d6d22702c6d73697a003d3078303030303030303030303030303030392c636163686533667363616368652c6d73697a653d3078303030303030303030303030343830df2c696e616d653d2800"]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='timers\x00') ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000002c0)=0x200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:34:31 executing program 0 (fault-call:1 fault-nth:28): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x80001) accept4$x25(r0, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newae={0x54, 0x1e, 0xf07, 0x0, 0x0, {{@in=@broadcast}, @in6=@dev}, [@mark={0xc}, @etimer_thresh={0x8}]}, 0x351}}, 0x0) [ 676.833860][T23114] FAULT_INJECTION: forcing a failure. [ 676.833860][T23114] name failslab, interval 1, probability 0, space 0, times 0 [ 676.863532][T23114] CPU: 0 PID: 23114 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 676.872669][T23114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.872675][T23114] Call Trace: [ 676.872700][T23114] dump_stack+0x172/0x1f0 [ 676.872725][T23114] should_fail.cold+0xa/0x15 [ 676.872745][T23114] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 676.900863][T23114] ? ___might_sleep+0x163/0x280 [ 676.905724][T23114] __should_failslab+0x121/0x190 [ 676.910665][T23114] should_failslab+0x9/0x14 [ 676.915176][T23114] kmem_cache_alloc+0x2b2/0x6f0 [ 676.915205][T23114] __kernfs_new_node+0xef/0x690 [ 676.915224][T23114] ? kernfs_find_and_get_ns+0x26/0x70 [ 676.924916][T23114] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 676.924946][T23114] ? lock_downgrade+0x880/0x880 [ 676.924968][T23114] ? mutex_trylock+0x1e0/0x1e0 [ 676.935754][T23114] ? kernfs_activate+0x192/0x1f0 [ 676.935774][T23114] kernfs_new_node+0x99/0x130 [ 676.935791][T23114] __kernfs_create_file+0x51/0x340 [ 676.945375][T23114] sysfs_add_file_mode_ns+0x222/0x560 [ 676.945397][T23114] sysfs_merge_group+0x1a0/0x340 [ 676.945413][T23114] ? sysfs_init_fs_context+0x340/0x340 [ 676.954986][T23114] ? kernfs_put+0x3e3/0x600 [ 676.955038][T23114] dpm_sysfs_add+0x21d/0x270 [ 676.955060][T23114] device_add+0xa20/0x18a0 [ 676.965509][T23114] ? get_device_parent.isra.0+0x570/0x570 [ 676.965529][T23114] ? start_creating+0x163/0x1e0 [ 676.965553][T23114] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 676.965576][T23114] hci_register_dev+0x2e8/0x860 [ 676.975932][T23114] __vhci_create_device+0x2d0/0x5a0 [ 676.975954][T23114] vhci_write+0x2d0/0x470 [ 676.975976][T23114] new_sync_write+0x4c7/0x760 [ 676.985058][T23114] ? default_llseek+0x2e0/0x2e0 02:34:31 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{0x0}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 676.985088][T23114] ? common_file_perm+0x238/0x720 [ 676.995181][T23114] ? __fget+0x381/0x550 [ 676.995203][T23114] ? apparmor_file_permission+0x25/0x30 [ 676.995219][T23114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.995258][T23114] ? security_file_permission+0x94/0x380 [ 677.006322][T23114] __vfs_write+0xe4/0x110 [ 677.006345][T23114] vfs_write+0x20c/0x580 [ 677.006366][T23114] ksys_write+0xea/0x1f0 [ 677.016391][T23114] ? __ia32_sys_read+0xb0/0xb0 [ 677.016414][T23114] ? do_syscall_64+0x26/0x610 [ 677.016435][T23114] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.025395][T23114] ? do_syscall_64+0x26/0x610 [ 677.025420][T23114] __x64_sys_write+0x73/0xb0 [ 677.025442][T23114] do_syscall_64+0x103/0x610 [ 677.035372][T23114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.035385][T23114] RIP: 0033:0x457e29 [ 677.035403][T23114] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.051590][T23114] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.051606][T23114] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 677.051615][T23114] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 677.051624][T23114] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 677.051633][T23114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 677.051642][T23114] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 677.146719][T22889] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 677.223472][T23114] Bluetooth: Can't register HCI device 02:34:31 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:31 executing program 3: r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000108000/0x2000)=nil) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x220002, 0x0) renameat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file1\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) shmat(r0, &(0x7f0000107000/0x4000)=nil, 0x0) 02:34:31 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 02:34:31 executing program 1: r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) listxattr(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)=""/238, 0xee) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in={{0x2, 0x4e20, @rand_addr=0x9d7}}, [0xffffffffffff0001, 0xffffffff, 0x93, 0x100, 0x5, 0x8, 0x20, 0x5, 0xfce1, 0x0, 0x913e, 0x6, 0x0, 0x5]}, &(0x7f0000000240)=0x100) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000bc0), 0x0, 0xe01b8601000000}], 0x0) 02:34:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:31 executing program 0 (fault-call:1 fault-nth:29): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 677.433430][T23376] FAULT_INJECTION: forcing a failure. [ 677.433430][T23376] name failslab, interval 1, probability 0, space 0, times 0 [ 677.456185][T23376] CPU: 0 PID: 23376 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 677.465267][T23376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.475316][T23376] Call Trace: [ 677.475356][T23376] dump_stack+0x172/0x1f0 02:34:31 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x88) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5450, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) [ 677.475382][T23376] should_fail.cold+0xa/0x15 [ 677.475404][T23376] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 677.493385][T23376] ? ___might_sleep+0x163/0x280 [ 677.493410][T23376] __should_failslab+0x121/0x190 [ 677.493432][T23376] should_failslab+0x9/0x14 [ 677.493449][T23376] kmem_cache_alloc+0x2b2/0x6f0 [ 677.493472][T23376] ? lock_downgrade+0x880/0x880 [ 677.512567][T23376] ? kasan_check_read+0x11/0x20 [ 677.512594][T23376] __kernfs_new_node+0xef/0x690 [ 677.512615][T23376] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 677.512638][T23376] ? wait_for_completion+0x440/0x440 [ 677.538052][T23376] ? mutex_unlock+0xd/0x10 [ 677.538070][T23376] ? kernfs_activate+0x192/0x1f0 [ 677.538089][T23376] kernfs_new_node+0x99/0x130 [ 677.552111][T23376] __kernfs_create_file+0x51/0x340 [ 677.557313][T23376] sysfs_add_file_mode_ns+0x222/0x560 [ 677.557339][T23376] sysfs_merge_group+0x1a0/0x340 [ 677.557357][T23376] ? sysfs_init_fs_context+0x340/0x340 [ 677.557372][T23376] ? kernfs_put+0x3e3/0x600 [ 677.557403][T23376] dpm_sysfs_add+0x21d/0x270 [ 677.567672][T23376] device_add+0xa20/0x18a0 [ 677.567697][T23376] ? get_device_parent.isra.0+0x570/0x570 [ 677.567717][T23376] ? start_creating+0x163/0x1e0 [ 677.567736][T23376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.567757][T23376] hci_register_dev+0x2e8/0x860 [ 677.577684][T23376] __vhci_create_device+0x2d0/0x5a0 [ 677.577705][T23376] vhci_write+0x2d0/0x470 [ 677.577728][T23376] new_sync_write+0x4c7/0x760 [ 677.577751][T23376] ? default_llseek+0x2e0/0x2e0 [ 677.586732][T23376] ? common_file_perm+0x238/0x720 [ 677.586751][T23376] ? __fget+0x381/0x550 [ 677.586771][T23376] ? apparmor_file_permission+0x25/0x30 [ 677.586789][T23376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.586810][T23376] ? security_file_permission+0x94/0x380 [ 677.597339][T23376] __vfs_write+0xe4/0x110 [ 677.597360][T23376] vfs_write+0x20c/0x580 [ 677.597382][T23376] ksys_write+0xea/0x1f0 [ 677.597399][T23376] ? __ia32_sys_read+0xb0/0xb0 [ 677.597421][T23376] ? do_syscall_64+0x26/0x610 02:34:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x101080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$ax25(r2, &(0x7f00000001c0)={{0x3, @null, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @rand_addr=0x6}, {0x306}, 0x40, {0x2, 0x4e23, @local}, 'veth1_to_bridge\x00'}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)) 02:34:32 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f0000000040)={r3, r2, 0x1000}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getpgrp(r4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$setown(r2, 0x8, 0x0) [ 677.609129][T23524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 677.613659][T23376] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.613677][T23376] ? do_syscall_64+0x26/0x610 [ 677.613703][T23376] __x64_sys_write+0x73/0xb0 [ 677.613719][T23376] do_syscall_64+0x103/0x610 [ 677.613738][T23376] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.622846][T23376] RIP: 0033:0x457e29 [ 677.622862][T23376] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.622871][T23376] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.622886][T23376] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 677.622895][T23376] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 677.622904][T23376] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 677.622913][T23376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 02:34:32 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) [ 677.622922][T23376] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 677.709930][T23376] Bluetooth: Can't register HCI device 02:34:32 executing program 0 (fault-call:1 fault-nth:30): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10100, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x44) [ 678.008511][T23718] FAULT_INJECTION: forcing a failure. [ 678.008511][T23718] name failslab, interval 1, probability 0, space 0, times 0 [ 678.028967][T23718] CPU: 1 PID: 23718 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 678.038010][T23718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.038016][T23718] Call Trace: [ 678.038041][T23718] dump_stack+0x172/0x1f0 [ 678.038065][T23718] should_fail.cold+0xa/0x15 [ 678.057807][T23524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.060311][T23718] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 678.060335][T23718] ? ___might_sleep+0x163/0x280 [ 678.060358][T23718] __should_failslab+0x121/0x190 [ 678.060377][T23718] should_failslab+0x9/0x14 [ 678.060396][T23718] kmem_cache_alloc+0x2b2/0x6f0 [ 678.080302][T23718] ? lock_downgrade+0x880/0x880 [ 678.080328][T23718] __kernfs_new_node+0xef/0x690 [ 678.089730][T23718] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 678.089754][T23718] ? wait_for_completion+0x440/0x440 [ 678.089780][T23718] ? mutex_unlock+0xd/0x10 [ 678.089794][T23718] ? kernfs_activate+0x192/0x1f0 [ 678.089815][T23718] kernfs_new_node+0x99/0x130 [ 678.089834][T23718] __kernfs_create_file+0x51/0x340 [ 678.089852][T23718] sysfs_add_file_mode_ns+0x222/0x560 [ 678.104367][T23718] sysfs_merge_group+0x1a0/0x340 [ 678.104389][T23718] ? sysfs_init_fs_context+0x340/0x340 [ 678.124433][T23718] ? kernfs_put+0x3e3/0x600 [ 678.139557][T23718] dpm_sysfs_add+0x21d/0x270 [ 678.139577][T23718] device_add+0xa20/0x18a0 [ 678.139600][T23718] ? get_device_parent.isra.0+0x570/0x570 [ 678.139619][T23718] ? start_creating+0x163/0x1e0 [ 678.139641][T23718] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 678.150003][T23718] hci_register_dev+0x2e8/0x860 [ 678.150029][T23718] __vhci_create_device+0x2d0/0x5a0 [ 678.150047][T23718] vhci_write+0x2d0/0x470 [ 678.150069][T23718] new_sync_write+0x4c7/0x760 [ 678.150086][T23718] ? default_llseek+0x2e0/0x2e0 [ 678.159253][T23718] ? common_file_perm+0x238/0x720 [ 678.159271][T23718] ? __fget+0x381/0x550 [ 678.159291][T23718] ? apparmor_file_permission+0x25/0x30 [ 678.159309][T23718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.159328][T23718] ? security_file_permission+0x94/0x380 [ 678.159362][T23718] __vfs_write+0xe4/0x110 [ 678.159379][T23718] vfs_write+0x20c/0x580 [ 678.159396][T23718] ksys_write+0xea/0x1f0 [ 678.159409][T23718] ? __ia32_sys_read+0xb0/0xb0 [ 678.159429][T23718] ? do_syscall_64+0x26/0x610 [ 678.159448][T23718] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.180581][T23718] ? do_syscall_64+0x26/0x610 [ 678.180605][T23718] __x64_sys_write+0x73/0xb0 [ 678.180622][T23718] do_syscall_64+0x103/0x610 [ 678.180643][T23718] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.180655][T23718] RIP: 0033:0x457e29 [ 678.180671][T23718] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.190670][T23718] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.190685][T23718] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 678.190694][T23718] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 678.190702][T23718] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 678.190714][T23718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 678.204503][T23718] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 678.364681][T23718] Bluetooth: Can't register HCI device 02:34:32 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:32 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xf}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdfe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x884}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x34, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x3c, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffffffff00000000}}]}]}, 0x2c}}, 0x0) 02:34:32 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000009d4722162ca24e1b62bda4016d1e52bd8b2dabefc7ad77a6644d019010dad48072916c53d66a305875f0be4d3b8cd4b964f9eedfde915723b303823ccda6a68912b103cdc94455a134f1"], 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x5084f74d, {}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0xfd00, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x80000001, 0x2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r2 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x1, 0x80000000) geteuid() getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) connect$bt_rfcomm(r2, &(0x7f0000000b80)={0x1f, {0x6, 0x20, 0x5, 0x117912bd, 0x4, 0x8}, 0xf7}, 0xa) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000480)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @rand_addr, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x0, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000280)=0x10) mprotect(&(0x7f000072a000/0x1000)=nil, 0x1000, 0x0) fallocate(r0, 0x0, 0xffffffff, 0x7) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000000200), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) r3 = socket$inet6(0xa, 0x1, 0x51b) ioctl(r3, 0x8912, &(0x7f0000000680)="0a5cc80700315f85715070") r4 = socket(0x40000000002, 0x3, 0x67) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000006c0)={'nat\x00'}, &(0x7f00000002c0)=0x78) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000580)={0x0, @speck128}) sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680), 0x0, &(0x7f0000000800)}, 0x8804) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)="1cf01a5ebaf2cb2d66dd1480b2e71cfe918eb617977075516d792314fa3975efc7932fa0107380e5d68f6d1071f314a0d2c422cbb831fbff703a51d1423b182f57cdcad3a23f82960de169ffd729ab12095b6d1703ab6f8cc256f4abb9a18e2160de9a6f826bcef10a6c7e543a3fc44d0df55ef09c5f78a339755f2c3f279b5532847ec155352216c6228af460ed67f436feb16cc96cad61b81ee3347762c53a62c6006fc0b509ef96ec2f4d7d30", 0xae}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xe42, 0x10000) sendto$unix(r4, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 02:34:32 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 02:34:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:32 executing program 0 (fault-call:1 fault-nth:31): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 678.487703][T23802] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 678.497518][T23797] FAULT_INJECTION: forcing a failure. [ 678.497518][T23797] name failslab, interval 1, probability 0, space 0, times 0 [ 678.517082][T23808] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 678.535024][T23797] CPU: 0 PID: 23797 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 678.544633][T23797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.544641][T23797] Call Trace: [ 678.544669][T23797] dump_stack+0x172/0x1f0 [ 678.544695][T23797] should_fail.cold+0xa/0x15 [ 678.544715][T23797] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 678.544738][T23797] ? ___might_sleep+0x163/0x280 [ 678.544759][T23797] __should_failslab+0x121/0x190 [ 678.544776][T23797] should_failslab+0x9/0x14 [ 678.544796][T23797] kmem_cache_alloc+0x2b2/0x6f0 [ 678.558122][T23797] ? lock_downgrade+0x880/0x880 [ 678.558140][T23797] ? kasan_check_read+0x11/0x20 [ 678.558162][T23797] __kernfs_new_node+0xef/0x690 [ 678.558181][T23797] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 678.567074][T23797] ? wait_for_completion+0x440/0x440 [ 678.567100][T23797] ? mutex_unlock+0xd/0x10 [ 678.567118][T23797] ? kernfs_activate+0x192/0x1f0 [ 678.567135][T23797] kernfs_new_node+0x99/0x130 [ 678.567154][T23797] __kernfs_create_file+0x51/0x340 [ 678.577785][T23797] sysfs_add_file_mode_ns+0x222/0x560 [ 678.577810][T23797] sysfs_merge_group+0x1a0/0x340 [ 678.577828][T23797] ? sysfs_init_fs_context+0x340/0x340 [ 678.577841][T23797] ? kernfs_put+0x3e3/0x600 [ 678.577872][T23797] dpm_sysfs_add+0x21d/0x270 [ 678.587276][T23797] device_add+0xa20/0x18a0 [ 678.587301][T23797] ? get_device_parent.isra.0+0x570/0x570 [ 678.587321][T23797] ? start_creating+0x163/0x1e0 [ 678.587340][T23797] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 678.587373][T23797] hci_register_dev+0x2e8/0x860 02:34:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) getpgid(r1) ioctl$sock_ifreq(r0, 0x8000100000089ad, &(0x7f00000002c0)={'mql\x00', @ifru_hwaddr=@dev={[], 0x14}}) socket$inet6_udplite(0xa, 0x2, 0x88) [ 678.597064][T23797] __vhci_create_device+0x2d0/0x5a0 [ 678.597085][T23797] vhci_write+0x2d0/0x470 [ 678.597109][T23797] new_sync_write+0x4c7/0x760 [ 678.597131][T23797] ? default_llseek+0x2e0/0x2e0 [ 678.606798][T23797] ? common_file_perm+0x238/0x720 [ 678.606817][T23797] ? __fget+0x381/0x550 [ 678.606837][T23797] ? apparmor_file_permission+0x25/0x30 [ 678.606854][T23797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.606871][T23797] ? security_file_permission+0x94/0x380 [ 678.606903][T23797] __vfs_write+0xe4/0x110 [ 678.617605][T23797] vfs_write+0x20c/0x580 [ 678.617627][T23797] ksys_write+0xea/0x1f0 [ 678.617645][T23797] ? __ia32_sys_read+0xb0/0xb0 [ 678.617666][T23797] ? do_syscall_64+0x26/0x610 [ 678.617685][T23797] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.627009][T23797] ? do_syscall_64+0x26/0x610 [ 678.627034][T23797] __x64_sys_write+0x73/0xb0 [ 678.627050][T23797] do_syscall_64+0x103/0x610 [ 678.627089][T23797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.627101][T23797] RIP: 0033:0x457e29 [ 678.627119][T23797] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.636851][T23797] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.636911][T23797] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 678.636919][T23797] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 678.636929][T23797] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 02:34:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) socketpair$unix(0x1, 0x400000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3}) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000003c0)={0x7, &(0x7f0000000380)=[{0x200, 0x3ff}, {0xfff, 0xffffffffffffffc0}, {0x9, 0x24f}, {0x3eea, 0x2}, {0x330a, 0x1ff}, {0x40, 0xad}, {0x1, 0x1}]}) dup2(r4, r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000498000)={0x0, 0xffffffffffffff22, &(0x7f0000c8d000)={&(0x7f00000001c0)={0x20, 0x1, 0x9, 0x40000800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0xe0}}, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x400000) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x101, 0x7fffffff, 0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x5, 0x8, 0x100000000, 0x7, 0x7, 0xffffffff, 0xe63, 0x0, 0x10, 0xa}}) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6b87bc0dc1c3effc6b3bc4bcc977247d1d85b4264788e62697417cde8e7f54b128478d2ca25a037cfe5f0384991b7f345f48dd795a1e70da779b6be60af3818afd80cb", @ANYRES16=r8, @ANYBLOB="000628bd7000fddbdf2501000000080004000300000008000200020000000800040003000000080001004e240000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, 'fou\x00'}, {0x20, 'proc]'}], 0xa, "b06647bbd007567802d58408b4d7015b6ffdde581d01e43986e4293f79d60bdee57b0babded09a1e7db802bca542eeb28fd6a94cc40c8138535f07d20f39c21b2f1bd0f70f6b57e62a"}, 0x75) 02:34:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r1 = gettid() timer_create(0x8000000009, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r1}, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x1}, {0x77359400}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80100, 0x0) sendto$ax25(r3, &(0x7f0000000240)="adff66bd7b173dca869c00e98926b5fc127dc909842c4b1eebf75d0e3bfe4ba1210a583d5315eb22ea96bfe40f5c60e7ef095df66a162c463da121cf30db7ac9b3f325c3225f923ec9dbe06f8442a6ba83f8953ef4474c410740c545fb9a21237bee2cb03e5b92d6e33bbaf49ac55f5734841d2aa76a6e051a47d96a525fac01ca44fac82e83e8485f731412e531330561fa5efe86356eb33c786b4502c7b338ca7b14f8ff8e5ee3c159ea11a9632dce48b56abad56e71415171315e199812e0058dabb28a07503e431f2d531166bc2acf4e2db21a7eb9253a7c92e58ca2", 0xde, 0x4080, &(0x7f0000000340)={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) read(r2, &(0x7f0000000080)=""/128, 0x80) [ 678.636937][T23797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 678.636946][T23797] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 678.860568][T23931] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.873869][T23797] Bluetooth: Can't register HCI device 02:34:33 executing program 0 (fault-call:1 fault-nth:32): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 678.928280][T23933] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:34:33 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)) [ 679.044973][T24031] FAULT_INJECTION: forcing a failure. [ 679.044973][T24031] name failslab, interval 1, probability 0, space 0, times 0 [ 679.058181][T24031] CPU: 0 PID: 24031 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 679.067209][T24031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.067218][T24031] Call Trace: [ 679.067244][T24031] dump_stack+0x172/0x1f0 [ 679.067270][T24031] should_fail.cold+0xa/0x15 [ 679.089626][T24031] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 679.089651][T24031] ? ___might_sleep+0x163/0x280 [ 679.089675][T24031] __should_failslab+0x121/0x190 [ 679.089696][T24031] should_failslab+0x9/0x14 [ 679.089715][T24031] kmem_cache_alloc+0x2b2/0x6f0 [ 679.109748][T24031] ? lock_downgrade+0x880/0x880 [ 679.109767][T24031] ? kasan_check_read+0x11/0x20 [ 679.109790][T24031] __kernfs_new_node+0xef/0x690 [ 679.109807][T24031] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 679.109842][T24031] ? wait_for_completion+0x440/0x440 [ 679.119601][T24031] ? mutex_unlock+0xd/0x10 02:34:33 executing program 1: r0 = getegid() getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) setregid(r0, r1) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x4fd59c98000, 0x9}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f00000000c0)=0x40010) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xffffffffffffffe1, 0x7, 0x3, 0xf65, 0x894a}) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200)=0x1618ea1a, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'teql0\x00', 0x400}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x10, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x800, 0x2, 0x1, 0x9}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x840) write$P9_RSTAT(r2, &(0x7f0000000400)={0x49, 0x7d, 0x1, {0x0, 0x42, 0xf8, 0x6, {0x30, 0x3}, 0x4000000, 0x400000000000, 0x81, 0x0, 0x5, 'TIPC\x00', 0x5, 'TIPC\x00', 0x5, 'TIPC\x00'}}, 0x49) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000004c0)={0x57, 0x5243, 0x4, {0x9, 0x3f}, {0x2, 0x80000000}, @period={0x58, 0x9, 0x1, 0x5, 0xffffffffcc6f2f0e, {0x4, 0x6, 0x2, 0x1ff}, 0x5, &(0x7f0000000480)=[0xffffffff, 0x4, 0x1, 0x9, 0x5]}}) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x8000, 0x0) modify_ldt$write2(0x11, &(0x7f0000000540)={0x3, 0x20001000, 0x2000, 0x1, 0x0, 0x2, 0x101, 0x7fff, 0x2, 0x8}, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) connect$tipc(r2, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x2}}, 0x10) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000005c0)=""/245) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000006c0)={@remote={[], 0x3}, 0x1, 'nr0\x00'}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x24}, 0x7}}, 0x8, 0x1000, 0x3, 0x5e, 0x7}, &(0x7f0000000880)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000008c0)={r5}, &(0x7f0000000900)=0x8) r6 = syz_open_dev$usb(&(0x7f0000000940)='/dev/bus/usb/00#/00#\x00', 0x0, 0xa0000) mount$overlay(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='overlay\x00', 0x104004, &(0x7f0000000a00)={[{@xino_on='xino=on'}, {@index_off='index=off'}, {@index_off='index=off'}, {@metacopy_off='metacopy=off'}, {@default_permissions='default_permissions'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@default_permissions='default_permissions'}, {@xino_auto='xino=auto'}], [{@dont_appraise='dont_appraise'}]}) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) [ 679.119618][T24031] ? kernfs_activate+0x192/0x1f0 [ 679.119638][T24031] kernfs_new_node+0x99/0x130 [ 679.119656][T24031] __kernfs_create_file+0x51/0x340 [ 679.119674][T24031] sysfs_add_file_mode_ns+0x222/0x560 [ 679.129339][T24031] sysfs_merge_group+0x1a0/0x340 [ 679.129357][T24031] ? sysfs_init_fs_context+0x340/0x340 [ 679.129371][T24031] ? kernfs_put+0x3e3/0x600 [ 679.129403][T24031] dpm_sysfs_add+0x21d/0x270 [ 679.129423][T24031] device_add+0xa20/0x18a0 [ 679.140223][T24031] ? get_device_parent.isra.0+0x570/0x570 [ 679.140243][T24031] ? start_creating+0x163/0x1e0 [ 679.140278][T24031] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 679.140303][T24031] hci_register_dev+0x2e8/0x860 [ 679.154281][T24031] __vhci_create_device+0x2d0/0x5a0 [ 679.154302][T24031] vhci_write+0x2d0/0x470 [ 679.154327][T24031] new_sync_write+0x4c7/0x760 [ 679.154343][T24031] ? default_llseek+0x2e0/0x2e0 [ 679.154370][T24031] ? common_file_perm+0x238/0x720 [ 679.164807][T24031] ? __fget+0x381/0x550 [ 679.164845][T24031] ? apparmor_file_permission+0x25/0x30 [ 679.164863][T24031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 679.164884][T24031] ? security_file_permission+0x94/0x380 [ 679.175361][T24031] __vfs_write+0xe4/0x110 [ 679.175383][T24031] vfs_write+0x20c/0x580 [ 679.175405][T24031] ksys_write+0xea/0x1f0 [ 679.175424][T24031] ? __ia32_sys_read+0xb0/0xb0 [ 679.175448][T24031] ? do_syscall_64+0x26/0x610 [ 679.184503][T24031] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.184521][T24031] ? do_syscall_64+0x26/0x610 [ 679.184544][T24031] __x64_sys_write+0x73/0xb0 [ 679.184562][T24031] do_syscall_64+0x103/0x610 [ 679.184579][T24031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.184594][T24031] RIP: 0033:0x457e29 [ 679.194789][T24031] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.194798][T24031] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 679.194813][T24031] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 679.194833][T24031] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 679.194843][T24031] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 679.194851][T24031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 679.194860][T24031] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 679.289745][T24031] Bluetooth: Can't register HCI device [ 679.453412][T23931] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:34:33 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 02:34:33 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)) 02:34:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0xfffffffffffffebf, 0x0, 0xfffffd4c, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) 02:34:33 executing program 0 (fault-call:1 fault-nth:33): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 679.591012][T24255] FAULT_INJECTION: forcing a failure. [ 679.591012][T24255] name failslab, interval 1, probability 0, space 0, times 0 [ 679.613180][T24255] CPU: 1 PID: 24255 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 679.622213][T24255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.632260][T24255] Call Trace: [ 679.632288][T24255] dump_stack+0x172/0x1f0 [ 679.632321][T24255] should_fail.cold+0xa/0x15 [ 679.632342][T24255] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 679.632365][T24255] ? ___might_sleep+0x163/0x280 [ 679.632385][T24255] __should_failslab+0x121/0x190 [ 679.644559][T24255] should_failslab+0x9/0x14 [ 679.644579][T24255] kmem_cache_alloc+0x2b2/0x6f0 [ 679.669461][T24255] ? lock_downgrade+0x880/0x880 [ 679.669479][T24255] ? kasan_check_read+0x11/0x20 [ 679.669502][T24255] __kernfs_new_node+0xef/0x690 [ 679.669522][T24255] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 679.669540][T24255] ? wait_for_completion+0x440/0x440 [ 679.669563][T24255] ? mutex_unlock+0xd/0x10 [ 679.679230][T24255] ? kernfs_activate+0x192/0x1f0 [ 679.679251][T24255] kernfs_new_node+0x99/0x130 [ 679.679271][T24255] __kernfs_create_file+0x51/0x340 [ 679.679295][T24255] sysfs_add_file_mode_ns+0x222/0x560 [ 679.679319][T24255] sysfs_merge_group+0x1a0/0x340 [ 679.679334][T24255] ? sysfs_init_fs_context+0x340/0x340 [ 679.679351][T24255] ? kernfs_put+0x3e3/0x600 [ 679.694894][T24255] dpm_sysfs_add+0x21d/0x270 [ 679.694914][T24255] device_add+0xa20/0x18a0 [ 679.704229][T24255] ? get_device_parent.isra.0+0x570/0x570 [ 679.704246][T24255] ? start_creating+0x163/0x1e0 [ 679.704268][T24255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 679.730161][T24255] hci_register_dev+0x2e8/0x860 [ 679.730186][T24255] __vhci_create_device+0x2d0/0x5a0 [ 679.730203][T24255] vhci_write+0x2d0/0x470 [ 679.730224][T24255] new_sync_write+0x4c7/0x760 [ 679.730242][T24255] ? default_llseek+0x2e0/0x2e0 [ 679.749413][T24255] ? common_file_perm+0x238/0x720 [ 679.749432][T24255] ? __fget+0x381/0x550 [ 679.749451][T24255] ? apparmor_file_permission+0x25/0x30 [ 679.749470][T24255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 679.749487][T24255] ? security_file_permission+0x94/0x380 [ 679.749508][T24255] __vfs_write+0xe4/0x110 [ 679.810912][T24255] vfs_write+0x20c/0x580 [ 679.810935][T24255] ksys_write+0xea/0x1f0 [ 679.810954][T24255] ? __ia32_sys_read+0xb0/0xb0 [ 679.810974][T24255] ? do_syscall_64+0x26/0x610 [ 679.810991][T24255] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.811004][T24255] ? do_syscall_64+0x26/0x610 [ 679.811025][T24255] __x64_sys_write+0x73/0xb0 [ 679.811041][T24255] do_syscall_64+0x103/0x610 [ 679.811059][T24255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.811083][T24255] RIP: 0033:0x457e29 [ 679.811104][T24255] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.859189][T24255] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 02:34:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfffffffffffffffc, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000100)) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x880, 0x0) r1 = socket$netlink(0x10, 0x3, 0x40000003) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000280)=""/220) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000014000702000000000000000002ff000600000000000000009e89c36fbcca341a06267f3b318c11c84ab339a8c4d65e1366c36bfa57a3ba94b62d4aa466da66957967190bd60775f31048dacfc0d6c10b981933dc8dfd6c9ade1146c885ac7f74e230692331030c", @ANYRES32], 0x24c}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 02:34:34 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)) [ 679.859218][T24255] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 679.859225][T24255] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 679.859233][T24255] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 679.859241][T24255] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 679.859248][T24255] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 679.968766][ C1] net_ratelimit: 15 callbacks suppressed [ 679.968779][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 679.980351][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 680.044996][T24255] Bluetooth: Can't register HCI device 02:34:34 executing program 3: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x17) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r0}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 02:34:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x6, 0x200800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@release], 0x1, 0x0, &(0x7f0000000140)='+'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) 02:34:34 executing program 0 (fault-call:1 fault-nth:34): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) [ 680.181757][T24460] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.218763][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 680.224670][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 680.242103][T24782] FAULT_INJECTION: forcing a failure. [ 680.242103][T24782] name failslab, interval 1, probability 0, space 0, times 0 [ 680.244856][T24783] binder: BINDER_SET_CONTEXT_MGR already set [ 680.274184][T24782] CPU: 1 PID: 24782 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 02:34:34 executing program 5 (fault-call:5 fault-nth:0): clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 680.283319][T24782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.293375][T24782] Call Trace: [ 680.296684][T24782] dump_stack+0x172/0x1f0 [ 680.301038][T24782] should_fail.cold+0xa/0x15 [ 680.305629][T24782] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 680.305651][T24782] ? ___might_sleep+0x163/0x280 [ 680.305674][T24782] __should_failslab+0x121/0x190 [ 680.321228][T24782] should_failslab+0x9/0x14 [ 680.325847][T24782] __kmalloc+0x2dc/0x740 [ 680.330123][T24782] ? kobject_uevent_env+0x2fb/0x1030 [ 680.335417][T24782] ? rcu_read_lock_sched_held+0x110/0x130 [ 680.341141][T24782] ? kobject_get_path+0xc4/0x1b0 [ 680.346092][T24782] kobject_get_path+0xc4/0x1b0 [ 680.350954][T24782] kobject_uevent_env+0x31f/0x1030 [ 680.356076][T24782] kobject_uevent+0x20/0x26 [ 680.356095][T24782] device_add+0xb28/0x18a0 [ 680.356116][T24782] ? get_device_parent.isra.0+0x570/0x570 [ 680.370809][T24782] ? start_creating+0x163/0x1e0 [ 680.375660][T24782] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 680.375682][T24782] hci_register_dev+0x2e8/0x860 [ 680.375705][T24782] __vhci_create_device+0x2d0/0x5a0 [ 680.392066][T24782] vhci_write+0x2d0/0x470 [ 680.392090][T24782] new_sync_write+0x4c7/0x760 [ 680.392109][T24782] ? default_llseek+0x2e0/0x2e0 [ 680.405923][T24782] ? common_file_perm+0x238/0x720 [ 680.410952][T24782] ? __fget+0x381/0x550 [ 680.415113][T24782] ? apparmor_file_permission+0x25/0x30 [ 680.415133][T24782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 680.415151][T24782] ? security_file_permission+0x94/0x380 [ 680.415173][T24782] __vfs_write+0xe4/0x110 [ 680.436857][T24782] vfs_write+0x20c/0x580 [ 680.441106][T24782] ksys_write+0xea/0x1f0 [ 680.441126][T24782] ? __ia32_sys_read+0xb0/0xb0 [ 680.441148][T24782] ? do_syscall_64+0x26/0x610 [ 680.441165][T24782] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.441179][T24782] ? do_syscall_64+0x26/0x610 [ 680.441200][T24782] __x64_sys_write+0x73/0xb0 [ 680.441215][T24782] do_syscall_64+0x103/0x610 [ 680.441236][T24782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.448762][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.450200][T24782] RIP: 0033:0x457e29 02:34:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 680.454886][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 680.461015][T24782] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 680.461023][T24782] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 680.461041][T24782] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 680.470293][T24782] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 680.470301][T24782] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 680.470310][T24782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 680.470319][T24782] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 [ 680.768750][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.774589][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 682.048779][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 682.054722][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:34:37 executing program 4: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/19, 0x13}, {0xffffffffffffffff}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x5}, 0x21) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@empty, @ipv4={[], [], @rand_addr=0x3}, @mcast2, 0x9, 0x8001, 0x7fffffff, 0x400, 0x200, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3b3a309b4685d809, 0x935) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) unshare(0x40000000) r4 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="7257fd47725dd4d388b070") r6 = socket$inet(0x10, 0x2, 0xc) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet_int(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x6, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [], @multicast1}}, {0xa, 0x0, 0x7, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x6) 02:34:37 executing program 0 (fault-call:1 fault-nth:35): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) 02:34:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 02:34:37 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) 02:34:37 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x10, 0x0, &(0x7f0000000180)={{0x6, @rose}, [@null, @remote, @rose, @remote, @bcast, @remote, @netrom, @null]}, 0x48) sendto$netrom(r0, &(0x7f0000000080)="eaa98d43324ba42e2694702a9738182e2c7866a113d52e0173353589b6897a07a7bf5cd33803b2461d4cb1fb00be2e4313c1bb40543215a779591fed49de1df6e6f2923376845bb6c89d392fea636e76f1511160e2f1532e73bdb1a5d981f6161811ce4768e3e7d0fb7e2a2c3c6288e9a8c400b99e963cecf01e5c82b12ba3f675a5d7a76ceb385162e2166eff6ce03cf90f0ef494442c97e5f6f58e50816272777ae54b1e5f850e05774433a68998d1a331f9e52ef019e8902feba43f26ebfa0b97d1a155d4ea4b3e94deeac1005d67ef6ae6638e7e275a4c6a7b9854690d1f262802c5ea188347a262a1403f52599f10", 0xf1, 0x11, &(0x7f0000000200)={{0x3, @null, 0x5}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 02:34:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 683.157336][T25014] FAULT_INJECTION: forcing a failure. [ 683.157336][T25014] name failslab, interval 1, probability 0, space 0, times 0 [ 683.187682][T25014] CPU: 1 PID: 25014 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 683.196816][T25014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 02:34:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000001, &(0x7f0000000240)="000000010000000000004e9ff33b3c38431e") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) [ 683.196827][T25014] Call Trace: [ 683.210181][T25014] dump_stack+0x172/0x1f0 [ 683.214536][T25014] should_fail.cold+0xa/0x15 [ 683.219136][T25014] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 683.225153][T25014] ? ___might_sleep+0x163/0x280 [ 683.230007][T25014] __should_failslab+0x121/0x190 [ 683.230028][T25014] should_failslab+0x9/0x14 [ 683.230043][T25014] kmem_cache_alloc_trace+0x2d1/0x760 [ 683.230060][T25014] ? kasan_check_write+0x14/0x20 [ 683.249759][T25014] ? __mutex_unlock_slowpath+0xf8/0x6b0 02:34:37 executing program 3: r0 = socket$inet6(0xa, 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x4cfe4810, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) ioctl(r0, 0x8, &(0x7f0000000180)="6db3ddcab7c8f4c9e60bce052a4529a36ab2312184364d0fbe6813b3ab408ebfb704c806ca4abdc3e37db723c87c22e1b0a7f70adf1e926b9f0406b68d5932c82b10aba20efe0d962a8133ea5243da4ce28ad9bda3292c2b1bf7fbb56b3e0ed84feb2cae15c1e0b5960ddf7efc7fd8a54f5d301a5b5e44b6b0da633a6a7c8f2ce1e6cf37a770c56bf9bc0c51fee87fcf3d67c69acce2f2fb6db47955e2f761a7960964198f85d74503e69f673df94c0e78246a0252e0dc119ea11beb6107752e75a375dd0a44a6e7b714c76eb904095b7ae9e80f97479f02ec726ed0842d9e226686c40d78b901aaff0fea0e") bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) [ 683.249776][T25014] ? device_pm_check_callbacks+0x118/0x3f0 [ 683.249796][T25014] kobject_uevent_env+0x2fb/0x1030 [ 683.266235][T25014] kobject_uevent+0x20/0x26 [ 683.270740][T25014] device_add+0xb28/0x18a0 [ 683.275157][T25014] ? get_device_parent.isra.0+0x570/0x570 [ 683.280897][T25014] ? start_creating+0x163/0x1e0 [ 683.285754][T25014] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 683.292008][T25014] hci_register_dev+0x2e8/0x860 [ 683.296896][T25014] __vhci_create_device+0x2d0/0x5a0 [ 683.302100][T25014] vhci_write+0x2d0/0x470 [ 683.306435][T25014] new_sync_write+0x4c7/0x760 [ 683.311119][T25014] ? default_llseek+0x2e0/0x2e0 [ 683.311141][T25014] ? common_file_perm+0x238/0x720 [ 683.311156][T25014] ? __fget+0x381/0x550 [ 683.311173][T25014] ? apparmor_file_permission+0x25/0x30 [ 683.330830][T25014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.337067][T25014] ? security_file_permission+0x94/0x380 [ 683.337087][T25014] __vfs_write+0xe4/0x110 [ 683.337105][T25014] vfs_write+0x20c/0x580 [ 683.347116][T25014] ksys_write+0xea/0x1f0 [ 683.347134][T25014] ? __ia32_sys_read+0xb0/0xb0 [ 683.347154][T25014] ? do_syscall_64+0x26/0x610 [ 683.347173][T25014] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.355713][T25014] ? do_syscall_64+0x26/0x610 [ 683.355736][T25014] __x64_sys_write+0x73/0xb0 [ 683.355757][T25014] do_syscall_64+0x103/0x610 [ 683.365160][T25014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.365172][T25014] RIP: 0033:0x457e29 02:34:37 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000340)={0x0, 0x0, 0x301f, 0x2, 0x400, 0xf4, 0x0, 0x1}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, 0x0) socketpair(0x1e, 0x3, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="73656375720000000000000000000000000000006e0000003003bc76bb1d322e8c499f0732e74ab9e8c52a28c6d5f7b126b4d76ffe9bda40ed351caead23c009c322be292e77db4509"], 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x195) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000440), 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000100)={0x0, {0x1ff}}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x9) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0xf4240) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)) [ 683.365186][T25014] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 683.365197][T25014] RSP: 002b:00007fe392ef5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 683.375886][T25014] RAX: ffffffffffffffda RBX: 00007fe392ef5c90 RCX: 0000000000457e29 [ 683.375895][T25014] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 683.375904][T25014] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 683.375913][T25014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe392ef66d4 [ 683.375921][T25014] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 0000000000000004 02:34:37 executing program 5: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) socketpair(0xb, 0x80005, 0x100000000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x120, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c49}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe044}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x79}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) close(r0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x2) [ 683.518589][T25115] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 683.561712][T25255] ================================================================== [ 683.569844][T25255] BUG: KASAN: use-after-free in lockdep_register_key+0x3b9/0x490 [ 683.577551][T25255] Read of size 8 at addr ffff888090a7ae58 by task syz-executor.5/25255 [ 683.585760][T25255] [ 683.585777][T25255] CPU: 0 PID: 25255 Comm: syz-executor.5 Not tainted 5.0.0-rc8-next-20190301 #1 [ 683.585785][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.585788][T25255] Call Trace: [ 683.585807][T25255] dump_stack+0x172/0x1f0 [ 683.585822][T25255] ? lockdep_register_key+0x3b9/0x490 [ 683.597154][T25255] print_address_description.cold+0x7c/0x20d [ 683.597167][T25255] ? lockdep_register_key+0x3b9/0x490 [ 683.597180][T25255] ? lockdep_register_key+0x3b9/0x490 [ 683.597191][T25255] kasan_report.cold+0x1b/0x40 [ 683.597207][T25255] ? lockdep_register_key+0x3b9/0x490 [ 683.626129][T25255] __asan_report_load8_noabort+0x14/0x20 [ 683.626140][T25255] lockdep_register_key+0x3b9/0x490 [ 683.626157][T25255] alloc_workqueue+0x427/0xe70 [ 683.626174][T25255] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 683.652645][T25255] ? __init_waitqueue_head+0x36/0x90 [ 683.652664][T25255] hci_register_dev+0x1b8/0x860 [ 683.652677][T25255] ? hci_init_sysfs+0x7c/0xa0 [ 683.652697][T25255] __vhci_create_device+0x2d0/0x5a0 [ 683.673568][T25255] vhci_write+0x2d0/0x470 [ 683.673585][T25255] new_sync_write+0x4c7/0x760 [ 683.673612][T25255] ? default_llseek+0x2e0/0x2e0 [ 683.673631][T25255] ? common_file_perm+0x238/0x720 [ 683.692604][T25255] ? __fget+0x381/0x550 [ 683.692623][T25255] ? apparmor_file_permission+0x25/0x30 [ 683.692641][T25255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.692657][T25255] ? security_file_permission+0x94/0x380 [ 683.692678][T25255] __vfs_write+0xe4/0x110 [ 683.717031][T25255] vfs_write+0x20c/0x580 [ 683.717045][T25255] ksys_write+0xea/0x1f0 [ 683.717059][T25255] ? __ia32_sys_read+0xb0/0xb0 [ 683.717074][T25255] ? do_syscall_64+0x26/0x610 [ 683.717092][T25255] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.728909][T25255] ? do_syscall_64+0x26/0x610 [ 683.728926][T25255] __x64_sys_write+0x73/0xb0 [ 683.728937][T25255] do_syscall_64+0x103/0x610 [ 683.728952][T25255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.728962][T25255] RIP: 0033:0x457e29 [ 683.728975][T25255] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 683.728981][T25255] RSP: 002b:00007f98fd0acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 683.728992][T25255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 683.729002][T25255] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 683.737521][T25255] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 683.737532][T25255] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98fd0ad6d4 [ 683.840439][T25255] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 00000000ffffffff [ 683.848385][T25255] [ 683.850704][T25255] Allocated by task 20044: [ 683.855110][T25255] save_stack+0x45/0xd0 [ 683.859239][T25255] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 683.864840][T25255] kasan_kmalloc+0x9/0x10 [ 683.869140][T25255] __kmalloc+0x15c/0x740 [ 683.873357][T25255] alloc_workqueue+0x13c/0xe70 [ 683.878091][T25255] hci_register_dev+0x209/0x860 [ 683.882916][T25255] __vhci_create_device+0x2d0/0x5a0 [ 683.888103][T25255] vhci_write+0x2d0/0x470 [ 683.892404][T25255] new_sync_write+0x4c7/0x760 [ 683.897060][T25255] __vfs_write+0xe4/0x110 [ 683.901361][T25255] vfs_write+0x20c/0x580 [ 683.905575][T25255] ksys_write+0xea/0x1f0 [ 683.909790][T25255] __x64_sys_write+0x73/0xb0 [ 683.914350][T25255] do_syscall_64+0x103/0x610 [ 683.918916][T25255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.924775][T25255] [ 683.927095][T25255] Freed by task 20044: [ 683.931134][T25255] save_stack+0x45/0xd0 [ 683.935262][T25255] __kasan_slab_free+0x102/0x150 [ 683.940171][T25255] kasan_slab_free+0xe/0x10 [ 683.944658][T25255] kfree+0xcf/0x230 [ 683.948440][T25255] alloc_workqueue+0xc3e/0xe70 [ 683.953191][T25255] hci_register_dev+0x209/0x860 [ 683.958019][T25255] __vhci_create_device+0x2d0/0x5a0 [ 683.963207][T25255] vhci_write+0x2d0/0x470 [ 683.967507][T25255] new_sync_write+0x4c7/0x760 [ 683.972283][T25255] __vfs_write+0xe4/0x110 [ 683.976584][T25255] vfs_write+0x20c/0x580 [ 683.980798][T25255] ksys_write+0xea/0x1f0 [ 683.985099][T25255] __x64_sys_write+0x73/0xb0 [ 683.989663][T25255] do_syscall_64+0x103/0x610 [ 683.994221][T25255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.000079][T25255] [ 684.002379][T25255] The buggy address belongs to the object at ffff888090a7ad40 [ 684.002379][T25255] which belongs to the cache kmalloc-512 of size 512 [ 684.016415][T25255] The buggy address is located 280 bytes inside of [ 684.016415][T25255] 512-byte region [ffff888090a7ad40, ffff888090a7af40) [ 684.029772][T25255] The buggy address belongs to the page: [ 684.035377][T25255] page:ffffea0002429e80 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0xffff888090a7a5c0 [ 684.045621][T25255] flags: 0x1fffc0000000200(slab) [ 684.050534][T25255] raw: 01fffc0000000200 ffffea00021a4808 ffffea0002313448 ffff88812c3f0940 [ 684.059089][T25255] raw: ffff888090a7a5c0 ffff888090a7a0c0 0000000100000005 0000000000000000 [ 684.067637][T25255] page dumped because: kasan: bad access detected [ 684.074025][T25255] [ 684.076323][T25255] Memory state around the buggy address: [ 684.081926][T25255] ffff888090a7ad00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 684.089961][T25255] ffff888090a7ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 684.098008][T25255] >ffff888090a7ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 684.106052][T25255] ^ [ 684.112954][T25255] ffff888090a7ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 684.120988][T25255] ffff888090a7af00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 684.129019][T25255] ================================================================== [ 684.137051][T25255] Disabling lock debugging due to kernel taint [ 684.143173][T25255] Kernel panic - not syncing: panic_on_warn set ... [ 684.149760][T25255] CPU: 0 PID: 25255 Comm: syz-executor.5 Tainted: G B 5.0.0-rc8-next-20190301 #1 [ 684.160139][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.170164][T25255] Call Trace: [ 684.173449][T25255] dump_stack+0x172/0x1f0 [ 684.177753][T25255] panic+0x2cb/0x65c [ 684.181621][T25255] ? __warn_printk+0xf3/0xf3 [ 684.186208][T25255] ? lock_downgrade+0x880/0x880 [ 684.191039][T25255] ? lockdep_register_key+0x3b9/0x490 [ 684.196412][T25255] ? trace_hardirqs_off+0x62/0x220 [ 684.201502][T25255] ? trace_hardirqs_off+0x59/0x220 [ 684.206604][T25255] ? lockdep_register_key+0x3b9/0x490 [ 684.211945][T25255] end_report+0x47/0x4f [ 684.216069][T25255] ? lockdep_register_key+0x3b9/0x490 [ 684.221413][T25255] kasan_report.cold+0xe/0x40 [ 684.226061][T25255] ? lockdep_register_key+0x3b9/0x490 [ 684.231411][T25255] __asan_report_load8_noabort+0x14/0x20 [ 684.237015][T25255] lockdep_register_key+0x3b9/0x490 [ 684.242190][T25255] alloc_workqueue+0x427/0xe70 [ 684.247026][T25255] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 684.252719][T25255] ? __init_waitqueue_head+0x36/0x90 [ 684.257995][T25255] hci_register_dev+0x1b8/0x860 [ 684.263006][T25255] ? hci_init_sysfs+0x7c/0xa0 [ 684.267658][T25255] __vhci_create_device+0x2d0/0x5a0 [ 684.272829][T25255] vhci_write+0x2d0/0x470 [ 684.277132][T25255] new_sync_write+0x4c7/0x760 [ 684.281889][T25255] ? default_llseek+0x2e0/0x2e0 [ 684.286716][T25255] ? common_file_perm+0x238/0x720 [ 684.291715][T25255] ? __fget+0x381/0x550 [ 684.295855][T25255] ? apparmor_file_permission+0x25/0x30 [ 684.301497][T25255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 684.307708][T25255] ? security_file_permission+0x94/0x380 [ 684.313313][T25255] __vfs_write+0xe4/0x110 [ 684.317619][T25255] vfs_write+0x20c/0x580 [ 684.321837][T25255] ksys_write+0xea/0x1f0 [ 684.326072][T25255] ? __ia32_sys_read+0xb0/0xb0 [ 684.330813][T25255] ? do_syscall_64+0x26/0x610 [ 684.335480][T25255] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.341518][T25255] ? do_syscall_64+0x26/0x610 [ 684.346169][T25255] __x64_sys_write+0x73/0xb0 [ 684.350744][T25255] do_syscall_64+0x103/0x610 [ 684.355305][T25255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.361171][T25255] RIP: 0033:0x457e29 [ 684.365041][T25255] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 684.384621][T25255] RSP: 002b:00007f98fd0acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 684.393201][T25255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 684.401172][T25255] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 684.409148][T25255] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 684.417091][T25255] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98fd0ad6d4 [ 684.425036][T25255] R13: 00000000004c6ef5 R14: 00000000004dc818 R15: 00000000ffffffff [ 684.434289][T25255] Kernel Offset: disabled [ 684.438620][T25255] Rebooting in 86400 seconds..